365Fanatic / Microsoft 365 Message Center / MC1481317
Tenant announcements

Microsoft Purview | Insider Risk Management: Retirement of Data Risk Graph

MC1481317

All Microsoft 365 Message Center posts · Daily summary

SummaryDetailedTimelineProduct updatesThis weekMC SummaryMC DetailedPnP Search
About this page These posts come from a tenant in West Europe and are shown as a reference. Day-by-day digest: MC Summary. Linked to the roadmap via Roadmap ID when Microsoft names one. Items are kept for 12 months. Always check Message Center in your own environment for what applies to you.
Archive This post is no longer in the Microsoft 365 Message Center (last seen on 8 okt 2026). Microsoft removes posts after a while. We keep the last version here as an archive.
MC1481317 Major change
Microsoft Purview

What and why

We are retiring Data Risk Graph in Microsoft Purview Insider Risk Management (IRM).

Data Risk Graph provides a visual investigation experience that helps investigators review connections among impacted data, users, and alert-related activities. As part of ongoing investments in Insider Risk Management investigation experiences, we are retiring this capability and directing customers to alternative investigation tools that provide detailed activity timelines and investigative context.

After retirement, investigators can continue reviewing potentially risky activity by using Activity explorer, Content explorer, and User activity experiences within Microsoft Purview Insider Risk Management.

Rollout schedule

For Worldwide, GCC, GCC High, DoD:

  • The ability to configure Data Risk Graph was removed in early September 2026
  • New onboarding for Data Risk Graph ends September 24, 2026
  • Data Risk Graph retirement begins in early December 2026 and is expected to be fully retired by December 8, 2026

Impact on your organization

Who is affected

Platforms and services

  • Microsoft Purview Insider Risk Management
  • Web

What will happen

After retirement:

  • The Data Risk Graph tab will no longer be available in Insider Risk Management alert details.
  • Organizations will no longer be able to configure or begin using Data Risk Graph.
  • Existing Insider Risk Management policies, alerts, cases, reports, and investigation workflows will remain available.
  • Customers can continue to investigate potentially risky activity using Activity explorer, Content explorer, and User activity experiences.
  • No changes will be made to existing Insider Risk Management policy configurations as a result of this retirement.
  • No user action is required for feature disablement. The feature will be removed by Microsoft as part of the retirement process.

Action required and recommendations

Action is recommended if your organization currently uses Data Risk Graph.

  • Notify Insider Risk Management administrators and investigators about this retirement.
  • Review current investigation workflows that rely on the Data Risk Graph tab.
  • Update internal documentation, training materials, and standard operating procedures that reference Data Risk Graph.
  • Transition investigators to Activity explorer, Content explorer, and User activity experiences for investigation scenarios.

Learn more

Compliance considerations

No compliance considerations identified, review as appropriate for your organization.

This is in the weekly digest for week 40 · What changed this week? →