Microsoft Purview |Insider Risk Management - Enhancements to variant limits and detection groups

We’re increasing flexibility in Microsoft Purview Insider Risk Management to help organizations better manage insider risk scenarios. Based on customer feedback, we are raising the variant limit per indicator and expanding detection group capacity, enabling more comprehensive policy configurations.

This message is associated with Microsoft 365 Roadmap ID 518291.

When this will happen

• Public Preview: Rollout begins in early December 2025 and is expected to complete by late December 2025.
• General Availability (Worldwide): Rollout begins in mid-January 2026 and is expected to complete by late January 2026.

How this affects your organization

Who is affected: Admins managing Microsoft Purview Insider Risk Management policies.

What will happen

• Variant limit per indicator increases from 3 to 10.
• Overall variant limit across all indicators increases to 100.
• Detection group capacity increases from 200 to 500 items.
• No changes to privacy controls: users remain pseudonymized by default, and role-based access controls and audit logs continue to apply.

What you can do to prepare

• No action is required before rollout.
• If desired, review your Insider Risk Management policies to take advantage of expanded limits.

Learn more: Configure policy indicators in Insider Risk Management | Microsoft Learn

Compliance considerations

No compliance considerations identified. Review as appropriate for your organization.