Microsoft Purview: Adaptive Scope evaluation control with recipient and site owner lifecycle status

🚨 The Signal: Purview Adaptive Scopes now allow explicit control over recipient and site owner lifecycle status. This improves data governance policy accuracy by ensuring policies only apply to active users and sites, reducing data sprawl and compliance risk.

The Impact

Security teams and Purview administrators are affected, reducing the risk of data over-retention or exposure on inactive resources.

• Security Teams: Reduced risk of data exposure from policies applied to inactive users/sites.
• Purview Administrators: Improved accuracy and efficiency in data governance policy enforcement.
• Compliance Officers: Enhanced ability to meet data retention and disposal requirements.

The Action

1. Review existing Adaptive Scopes in Microsoft Purview compliance portal.
2. Evaluate lifecycle status settings for recipients and site owners within relevant Adaptive Scopes.
3. Configure explicit lifecycle-state evaluation to align with organisational data retention policies.
4. Test policy application to ensure correct targeting of active users and sites.

Domain: Purview · Impact: medium · Workload: Microsoft Purview