Microsoft Purview compliance portal: Insider Risk Management - User analytics

Vendor: Microsoft
Product: Microsoft Purview
Type: Security
Announcement date: 2025-01-23
Effective date: Date not published
Impact: Affected

In brief

What the source says

With this feature, insights will be generated for potentially risky behaviors at a user level and will be surfaced across the following experiences: 1) Insider risk management context in DLP alert investigation 2) Insider risk management context in Communication compliance alert investigation 3) Insider risk management context in Microsoft Defender XDR user entity page 4) Advanced hunting in Microsoft Defender XDR User analytics will cover all eligible users in the tenant including users not in the scope of any Insider risk management policy. Customers can enable/disable user analytics in their tenant from Insider Risk Management settings. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. GA date: January CY2026 Preview date: March CY2025 Launched General Availability Preview Worldwide (Standard Multi-Tenant) GCC GCC High DoD Microsoft Purview Web

Continue from here

See other Microsoft Purview changes See the public price for Microsoft Purview Compare with my estate Ask a question

Read the primary source

Choose your reading

The role changes the reading angle, not the facts, date or level of evidence.

Reading for a salesperson

Who is affected: The audience described by the Microsoft update is represented by: Microsoft Purview compliance portal: Insider Risk Management - User analytics With this feature, insights will be generated for potentially risky behaviors at a user level and will be surfaced across the following experiences: 1) Insider risk management context in DLP alert investigation 2) Insider risk management context in Communication compliance alert investigation 3) Insider risk management context in Microsoft Defender XDR user entity page 4) Advanced hunting in Microsoft Defender XDR User

Why it matters: The change matters because the official source describes: Microsoft Purview compliance portal: Insider Risk Management - User analytics With this feature, insights will be generated for potentially risky behaviors at a user level and will be surfaced across the following experiences: 1) Insider risk management context in DLP alert investigation 2) Insider risk management context in Communication compliance alert investigation 3) Insider risk management context in Microsoft Defender XDR user entity page 4) Advanced hunting in Microsoft Defender XDR User

Urgency: Monitor

Next action: Review affected accounts with the customer using the official announcement.

Commercial opportunities

Use the verified change to open a scoped customer conversation.

Technical actions

Assess whether the documented change intersects the customer's current stack.

Questions to ask the customer

Does this documented change affect a product or workload in scope?

Risks and objections

The official source does not establish facts beyond the quoted material.

Points to confirm

The effective date is unknown and must be confirmed before scheduling action.

Evidence and traceability

Each excerpt is linked to the primary source and retained for verification.

Raw capture
2026-08-29T09:22:49.319599+00:00
Event
Microsoft Purview compliance portal: Insider Risk Management - User analytics With this feature, insights will be generated for potentially risky behaviors at a user level and will be surfaced across the following experiences: 1) Insider risk management context in DLP alert investigation 2) Insider risk management context in Communication compliance alert investigation 3) Insider risk management context in Microsoft Defender XDR user entity page 4) Advanced hunting in Microsoft Defender XDR User analytics will cover all eligible users in the tenant including users not in the scope of any Insider risk management policy. Customers can enable/disable user analytics in their tenant from Insider Risk Management settings. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. GA date: January CY2026 Preview date: March CY2025 Launched General Availability Preview Worldwide (Standard Multi-Tenant) GCC GCC High DoD Microsoft Purview Web
source
Product Microsoft Purview
Microsoft Purview compliance portal: Insider Risk Management - User analytics With this feature, insights will be generated for potentially risky behaviors at a user level and will be surfaced across the following experiences: 1) Insider risk management context in DLP alert investigation 2) Insider risk management context in Communication compliance alert investigation 3) Insider risk management context in Microsoft Defender XDR user entity page 4) Advanced hunting in Microsoft Defender XDR User analytics will cover all eligible users in the tenant including users not in the scope of any Insider risk management policy. Customers can enable/disable user analytics in their tenant from Insider Risk Management settings. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. GA date: January CY2026 Preview date: March CY2025 Launched General Availability Preview Worldwide (Standard Multi-Tenant) GCC GCC High DoD Microsoft Purview Web
source
Insight a salesperson
Microsoft Purview compliance portal: Insider Risk Management - User analytics With this feature, insights will be generated for potentially risky behaviors at a user level and will be surfaced across the following experiences: 1) Insider risk management context in DLP alert investigation 2) Insider risk management context in Communication compliance alert investigation 3) Insider risk management context in Microsoft Defender XDR user entity page 4) Advanced hunting in Microsoft Defender XDR User analytics will cover all eligible users in the tenant including users not in the scope of any Insider risk management policy. Customers can enable/disable user analytics in their tenant from Insider Risk Management settings. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. GA date: January CY2026 Previe
source

Back to the public feed