Get started with Microsoft Purview Posture Agent in Data Security Posture Management.

January 2026

Adaptive scopes

• New: As an alternative, or to supplement the Export option to download a list of scope members, run the PowerShell cmdlet Get-AdaptiveScopeMembers. This cmdlet is helpful when the scope membership is large (1,000 or more), or you want to customize the export.

Copilot Agents in Purview

• In Preview: Get started with Microsoft Purview Posture Agent in Data Security Posture Management.

Data Governance

• In preview: Now rolling out in preview, when a data asset is deleted from Data Map, a notice displays in your data products and critical data elements that associated data assets or columns have been deleted, so that you can remove the deleted assets or columns from your view.
• General availability (GA): Multiregion configuration and virtual network support to store data quality error records locally where your data is located is generally available. Organizations can configure multiple folder locations—for example, one folder for sensitive data and another for nonsensitive data—to store data quality error records for analysis and remediation.
• In preview: Authoring custom rules using SQL expression language is now in preview. Users can create custom rules using both Azure Data Factory expression and SQL expression languages.
• General availability (GA): Virtual network support for self-service analytics metadata storage is now generally available.

Data Security Investigations

• In preview: New Data Security Investigation Compute Units (compute units) have replaced Security Compute Units (SCUs) for AI capacity billing in Data Security Investigations.

Data Security Posture Management (preview)

• New: Asset explorer now has an Agent tab for the new Data Security Posture Agent from Security Copilot. Use this tab to activate, configure, and use this agent exclusively in this version of DSPM. The agent uses natural‑language search and doesn't rely on keywords, sensitive information types, or classifiers to search across files in SharePoint and OneDrive, messages in Teams, emails in Exchange, and interactions with Copilot.

Sensitivity labels

• General availability (GA): Gradually rolling out in general availability, migration of parent sensitivity labels to label groups. During the initial rollout phase, tenants that don't have applicable parent labels will be automatically migrated to the new label scheme. If your tenant has the new label scheme, you see a green message bar on the Sensitivity labels page that confirms your tenant is successfully migrated to the modern label scheme, which provides more flexibility in organization and reduced complexity. There are no visible changes for users.
• New: Client-side improvements for sensitivity labels that extend SharePoint permissions to downloaded documents. Includes support for the Save As option with the minimum versions:
• Windows: Rolling out to Current Channel (Preview)
• macOS: Version 16.103+
• iOS: Version 2.103+
• Android: Version 16.0.19426+