365Fanatic / Microsoft 365 Roadmap / Full list / #501786
Microsoft 365

Microsoft Purview compliance portal: Data Loss Prevention: User based alert aggregation

#501786 · Launched · September 2025 preview · November 2025 rollout

Microsoft 365 roadmap: what is new · All roadmap items · Microsoft

SummaryDetailedTimelineProduct updatesThis weekMC SummaryMC DetailedPnP Search
Archive This item is no longer on the public Microsoft 365 Roadmap (last seen on 9 okt 2026). Microsoft removes items once they have been rolled out for a while, merged or cancelled. We keep the last version here as an archive.
Launched
Preview availableSeptember 2025Rollout startNovember 2025
Archive

User-Based Aggregation consolidates DLP alerts by user identity i.e. a DLP rule violations, in a specified aggregation time window, of the same rule and single user will be aggregated into a single alert enabling quicker triage and remediation. Instead of reviewing alerts containing rule match events of multiple users, DLP admin can now analyze grouped DLP rule match events per user, gaining insights into repeated policy violations and anomalous behavior.

Microsoft Purview
TimelineOpen at Microsoft

Added to roadmap: 29 aug 2025 | Last modified: 9 dec 2025

What changed in Microsoft 365 this week? →