Microsoft Purview: Adaptive scopes add lifecycle status evaluation controls for recipients and site owners
🚨 The Signal: Microsoft Purview adaptive scopes now default to including only active users and sites, improving data governance by excluding inactive or soft-deleted entities from policy application. This reduces the risk of over-retention or unintended data exposure.
The Impact
Microsoft Purview administrators are affected, with a reduced risk of applying data governance policies to inactive or deleted entities.
- Purview administrators: Reduced risk of accidental data exposure from inactive accounts.
- Data owners: Improved accuracy of data retention and deletion policies.
- Compliance teams: Better alignment with data lifecycle management requirements.
- Security teams: Enhanced control over data scope for information protection policies.
The Action
- Review existing adaptive scopes in Microsoft Purview to identify any that should include inactive or soft-deleted entities.
- For newly created adaptive scopes, explicitly configure inclusion of inactive/soft-deleted recipients/site owners if required for specific policies.
- Familiarize with ISO 8601 duration value support for date attributes in advanced queries for adaptive scopes.
Domain: Purview · Impact: medium · Workload: Microsoft Purview