Format of $NewPolciyObject

(0) Share

Report

Posted on by NPrice99

1,302

In Set-DlpPolicy what is the format of a $NewPolciyOBject ?

I cannot find any documentation for it.

Thanks

Nigel

Categories:

Governance & administering

I have the same question (0)

All responses (5)

Answers (0)

Joel CustomerEffective 3,224 on at

Like (0)

Report

were you not able to get your policy created after this? https://powerusers.microsoft.com/t5/Power-Apps-Governance-and/Creating-a-DLP-Policy-using-PowerShell-I-get-asked-for/m-p/603327#M2715

Was this reply helpful? Yes No
Joel CustomerEffective 3,224 on at

Like (0)

Report

One reason why most people don't just use powershell to manage their dlp policies is there are new connectors all the time, so updating your powershell for each connector is not realistic. I like to use the DLP manager in the COE starter kit combined with setting the default category for new apps.

Was this reply helpful? Yes No
NPrice99 1,302 on at

Like (0)

Report

HI @jlindstrom

new-dlppolicy now only has the environment type.

Set-dlppolicy has the updatedPolicy object (see screenshot)

Dont new connectors go automatically into the Non-Business list of a DLP ?

Regards

Nigel

set-dlppolicy.JPG

Was this reply helpful? Yes No
NPrice99 1,302 on at

Like (0)

Report

HI @jlindstrom

I currently have 32 environments each with its own DLP to look after so having to go to the DLP Editor for each DLP when a new connector comes out will be a pain in the backside. The reason for this is there is one environment for each Project which may create one or more PowerApps. If One project needs access to a another connector(with the appropriate business justification) then I just need to update one DLP and it will not affect any other Projects. If after time, we find that a number of projects have the same connectors in their DLPs we might look at combining the DLPs into one.

I think it is better to have a PowerShell which goes around all of the DLPs and adds the new connector into the non-business list (and optionally if possible to be blocked) of all of the DLPs.

Regards

Nigel

Was this reply helpful? Yes No
Joel CustomerEffective 3,224 on at

Like (0)

Report

New connectors automatically go into whatever your default group is. That could also be the new blocked group.

even with 32 environments you can probably simplify this more using the global with exceptions policy And rather than maintaining 32 different sets of policies have one main one based on your base policy and then per environment exceptions.

also are you sure that you need 32 different environments? Some may be able to share the same environment

Was this reply helpful? Yes No