Microsoft Purview | Insider Risk Management: Adaptive Protection + Conditional Access will be GA

Adaptive Protection integrated with Microsoft Entra ID Conditional Access will soon be generally available in Microsoft Purview | Insider Risk Management. The integration will allow organizations to set up policies to enforce Conditional Access actions (such as blocks) on users with insider risk levels in Adaptive Protection. For example, a Conditional Access policy with an Insider Risk Condition can block elevated risk users from all Microsoft 365 applications while allowing minor risk users to continue to access company resources. With this rollout, we will also change the default Insider Risk Conditional Access policy to block elevated risk users from all Microsoft 365 applications instead of all applications.

Organizations will need an Entra ID P2 license to use Adaptive Protection integrated with Conditional Access policies.

This message is associated with Microsoft 365 Roadmap ID 388737.

When this will happen

Public Preview: We began rolling out in March 2024 and completed by early June 2024.

General Availability (Worldwide): We will begin rolling out early July 2024 and expect to complete by early August 2024.

How this will affect your organization

Before this rollout: Adaptive Protection integrated with Purview DLP was not generally available.

After this rollout, you will be able to set up or view Conditional Access policies with the Insider Risk Condition in Purview > Insider risk management > Adaptive Protection:

If you configured the default Insider Risk Conditional Access policy during the Public Preview, your policy will remain unchanged.

The default state of this feature is off.

What you need to do to prepare

Your organization will need to enable Adaptive Protection in Insider Risk Management and follow the setup instructions. If you do not already have an Entra ID P2 license, your organization will need to obtain one.

Learn more