Microsoft 365

Microsoft Purview: Endpoint Data Loss Prevention - Allow customer to scope JIT Audit to specific user or user group

#562991 · In development · December 2026 rollout

Microsoft 365 roadmap: what is new · All roadmap items · Microsoft

In development
Rollout startDecember 2026

Enable customers to include or exclude users/user groups from Just‑In‑Time (JIT) Audit, ensuring audits are generated only for the selected users or groups.

Show Message Center information (1)
MC1387575Stay informed
(Updated) Microsoft Purview | Endpoint Data Loss Prevention: Scope Just-in-time audit by user or group

Updated September 14, 2026: We have updated the timeline. Thank you for your patience.

What and why

Admins can now scope which users and groups have their activities audited when Just-in-time protection is enabled in Microsoft Purview Endpoint Data Loss Prevention.

Previously, when Just-in-time protection was turned on, user activities were logged automatically for users who were not targeted by policies. With this update, audit logging must be explicitly configured so that only users or groups included in the audit scope have their activities logged. This change gives organizations greater control over audit signal collection and helps reduce unnecessary audit noise.

This message is associated with Microsoft 365 Roadmap ID 562991.

Added to roadmap: 26 mei 2026 | Last modified: 14 sep 2026