- Log in to Power Automate.
- Click Create → Automated cloud flow.
- Name it “Purview Classification Change Alert”.
- Choose “Recurrence” as the trigger to check for changes periodically.
- Set it to run every X minutes/hours depending on your needs.
2. Add an HTTP Request to Check Classification Changes
- Click New Step → “HTTP” action.
- Set the method to GET and enter the Purview API endpoint:
https://{purview-endpoint}/catalog/api/classifications
- Add Headers:
Authorization: Bearer {access_token}
Content-Type: application/json
- Authenticate using the OAuth 2.0 method with the Client ID, Secret, and Tenant ID from Step 1.
Step 3: Filter for Classification Changes from “Restricted” to “Internal”
- Click New Step → “Filter array” action.
- In the “From” field, select the output from the HTTP response (JSON).
- Set the condition:
- Previous Classification = Restricted
- New Classification = Internal
Step 4: Send an Email Notification
- Click New Step → “Send an email (Outlook 365)” action.
- Configure the email:
- To: Compliance team or security group.
- Subject: “ALERT: Data Classification Changed from Restricted to Internal”
- Body:
Attention Security Team,
The following data classification has been changed:
- File Name: {File Name}
- Previous Classification: Restricted
- New Classification: Internal
- Changed By: {User}
- Timestamp: {Change Date}
Please review this change to ensure compliance.
Regards,
Security Team

Report
All responses (
Answers (