Recorded 24 Oct 2026 at 11:31 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
Microsoft 365 roadmapMicrosoft 365 roadmap
Microsoft Purview: Data Loss Prevention – Enhancements to Data Security Triage Agent
Adding below enhancements to Data Security Triage Agent in MS Purview - Metadata supported Custom Instructions (DLP only) : Earlier the agent only supported custom instructions which are related to content (E.g. Focus on alerts related to financial information). Now we also support instructions related to metadata. (E.g. Focus on alerts related to financial information for user Adam in last 20 days) - Consolidated Agent settings : Earlier we had seperate controls for deployment configuration and triggers. We are now merging them into a single view as the settings can be altered anytime and it becomes easier for admins and analysts to change them from single view. - Support for alerts with Non content contains condition (DLP only) : Till now we were showing alerts generated from non-content contains conditions as unsupported. (E.g. Condition = RecipientDomainIs matches and triggers alert, alert is unsupported). Now we are bringing the alerts into triage capability and determining categorization for them also - Agent Identity : Now the Triage agent can be deployed with Agent's own identity generated in Microsoft Entra. There won't be a need to have the agent run using the user's ide…
What it said
Roadmap ID
557552
Status
Launched
General availability target
April CY2026
Preview target
February CY2026
Products
Microsoft Purview
Clouds
Worldwide (Standard Multi-Tenant)
Release phases
General Availability, Preview
Platforms
Web
Added to the roadmap
20 Feb 2026 00:00 UTC
Last changed
14 May 2026 23:15 UTC
Source evidence when recorded
Microsoft 365 roadmap
Complete at observationRead 24 Oct 2026 at 11:30 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.