Hello,
We have adopted Power Platform not a long time ago and have developed a single business application so far. I have been able to successfully create a DLP policy for the environment hosting this business application but as we begin to roll out Power Platform to other makers, I was thinking about creating a global DLP policy.
After running several scenarios to understand DLP policies, I have come to the conclusion that it is best to apply a single DLP policy (either a global policy or environment specific policy) on any environment at a given time. If the global policy doesn't allow a particular connector (which could be listed as non-business) to be used with other connectors (listed in Business data group), it is best to exclude that environment from the global policy and create an environment specific policy (tenant-level).
The reason I have listed tenant-level policy type above is that I have got the 'Power Platform Administrator' role assigned to my account. With this role, my understanding is that I cannot create an environment-level policy type.
Any feedback on my approach will be highly appreciated.
