Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 272/272 feeds/APIs · 469/469 docs · 8/9 advisories · checked 11:37 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Purview | Insider Risk Management: Enhancements to potential high-impact user detections

Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.

Rollout

Roadmap
156016, 171720

Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".

What the notice says

Microsoft’s text, with source markup removed
Microsoft Purview Insider Risk Management will be rolling out minor changes for when it detects a potential high impact user whose activities may lead to potential data security incidents. These changes will include improving accessibility and more prominently highlighting the reasons for the detection on the Alert page. Also, we will provide additional descriptors for how the risk score booster is applied to the user.  This message is associated with Microsoft 365 Roadmap ID 156016 and Roadmap ID 171720. When this will happen: General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out late August 2024 and expect to complete the rollout by early September 2024. How this will affect your organization: Before this rollout, the Alerts page had fewer details about why the user was detected as potential high impact user. After this rollout, The Alert page will have improved accessibility, it will be easier to see the reasons for the detection of a potential high impact user, and admins will have additional descriptors for how the score booster is applied to the user. This feature is on by default and accessible to all Purview admins with appropriate permissions.  What you need to do to prepare: No action is needed to enable these features. You will see the potential high impact user experience enhancements on the alert/case detail pages. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. You can access the Insider Risk Management solution in the Microsoft Purview compliance portal. Learn more Create and manage insider risk management policies - Microsoft Purview (compliance) | Microsoft Learn Investigate insider risk management activities - Microsoft Purview (compliance) | Microsoft Learn This rollout will happen automatically by the specified dates. You may want to notify your admins about this change and update any relevant documentation.

What changed

Between archive captures, newest first

The archive supplies one version of this notice.

Linked documentation

Microsoft pages the notice links to

The notice links to no Microsoft Learn or Support page that this installation reads.

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Not confirmed here

What this page cannot tell you
  • Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 11:37 UTC · 272 of 272 readable · 270 fully read · documentation 469/469 current