Announcements
What is the difference between an environment and a tenant level DLP policy?. I was reading the following MS documentation:
https://learn.microsoft.com/en-us/power-platform/admin/wp-data-loss-prevention
I couldn't quite understand it though. Thanks in advance.
Let's say that you do not use Google Drive, so you don't want people to be able to combine Dataverse and Google Drive in the same app/flow. So, at the tenant level you put Dataverse in the Business bucket, and Google Drive in the Non-Business bucket. However, you find out there's one team of people who DO use Google Drive in a business capacity. You create a separate environment for them, and you create a DLP that has Dataverse and Google Drive in the Business bucket. When you get to the "Define Scope" screen, you select "Add multiple environments" and select your new environment. I believe you then have to go back to your tenant-level DLP and edit it to exclude the new environment because the most restrictive policy "wins". Since your tenant-level policy is more restrictive, it would override your environment-level policy.
Hi @Spamrancher,This was a very detailed reply. Thank you.
Under review
Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.
Congratulations to our 2026 Super Users!
Congratulations to our 2025 community superstars!
These are the community rock stars!
Stay up to date on forum activity by subscribing.
11manish 530
WarrenBelz 459 Most Valuable Professional
Haque 314
