Updated: Restructured the just-in-time (JIT) protection documentation

April 2026

Collection Policies

• Preview: Collection policies support sensitivity labels as a condition for scoping detection to items with specific sensitivity labels applied. This condition is supported with browser and network cloud apps detection.

Data Governance

• General availability (GA): Now rolling out, the advanced resource sets capability is available to all customers. Pricing for advanced resource sets is consistent with existing rates for classic Microsoft Purview data governance.
• In preview: Updates to facilitate editing and managing glossary terms in Unified Catalog:

1. Edit glossary terms in bulk
2. Move multiple terms at once from one governance domain into another domain

Data Loss Prevention

• Updated: Restructured the just-in-time (JIT) protection documentation. A new conceptual article, Learn about just-in-time protection, now covers JIT concepts, terms, supported activities, device compatibility, and includes a detailed JIT workflow diagram. The Get started with just-in-time protection article now focuses on deployment and configuration steps.

Insider Risk Management

• In preview: Preview content while triaging alerts to quickly identify false positives, confirm the presence of sensitive data, and decide whether the alert warrants escalation.

Data Loss Prevention

• Preview: DLP policies for unmanaged cloud apps support a new URL contains text condition that detects when the URL of the cloud app contains specified text strings. You can use it as a condition to scope DLP rules to specific URLs, or as an exception to exclude specific URLs from policy enforcement.
• Preview: Email notifications for browser and network DLP rules notify end users via email when their activity is blocked. Notifications use a rolling 10-minute batching window to prevent excessive emails.

Sensitivity labels

• General availability (GA): Auto-labeling policies introduce a new flow where you must decide whether to automatically apply a sensitivity label, or remove a label when the configured conditions apply for files in SharePoint and OneDrive. When you chose to automatically apply a sensitivity label, you can now optionally choose to always overriding an existing label that has a lower priority label, even if it was manually applied. This option was previously available for emails only and now extends to files in SharePoint and OneDrive.