If we create individual environments and deposit restrictive DLP policies there, we have the problem that you can always switch to the "default environment".
Since the policies in the default environment are always tenant-wide, we always have to allow as much as possible.
Unfortunately, every user who is enabled for Flow automatically gets access to this environment and can thereby bypass the applicable DLP policies for his environment.
So we need a way to block users for the default environment. Does anyone have an idea how we can solve that problem?
