Microsoft Viva: Viva Glint - Self service for historical imports

🚨 The Signal: Viva Glint now offers a simplified self-service option for importing historical employee feedback data. This streamlines data ingestion but requires careful access control to protect sensitive HR information.

The Impact

Admins are affected by new data import capabilities, increasing the risk of unauthorized access to sensitive HR data if not properly secured.

  • HR Admins: Simplified import could lead to accidental exposure of sensitive employee data.
  • Security Teams: New data flow requires review of existing data loss prevention (DLP) policies.
  • Compliance Officers: Attestation of data handling for historical data imports needs updating.
  • IT Admins: Granting access to this feature must follow least privilege principles.

The Action

  1. Review and update existing data governance policies for Viva Glint data imports.
  2. Ensure 'least privilege' access is enforced for all users with Viva Glint administrative roles.
  3. Verify Microsoft Purview DLP policies are configured to protect sensitive HR data within Viva Glint.
  4. Communicate new data import procedures and security best practices to HR administrators.

Impact: medium · Workload: Microsoft Purview