Answered

What happens if two DLP policies of different connector settings are applied to single environment ?

(0) Share

Report

Posted on by tom555

Hello,

What happens if two DLP policies of different connector settings are applied to single environment? which DLP policy/connector would be applicable to the environment in this setting? What are the consequences?

Thanks,

Categories:

Governance & administering

I have the same question (0)

All responses (5)

Answers (1)

Sort by

Verified answer

Pstork1 69,505 Most Valuable Professional on at

Like (1)

Report
Copy link

Link copied!

In that case the most restrictive policies from both policies will apply.

Was this reply helpful? Yes No
tom555 85 on at

Like (0)

Report
Copy link

Link copied!

Can you please elaborate "most restrictive policy" term out of two with example?

Thank you!

Was this reply helpful? Yes No
Hamish Sheild 3,005 Most Valuable Professional on at

Like (1)

Report
Copy link

Link copied!

Hi @tom555

An example, you have 2 DLP policies applied to an environment, policy 1 has the Dataverse connector classified as blocked, policy 2 has the Dataverse connector classified as Business. Blocked is the most restrictive classification, therefore, in an environment where policy 1 and policy 2 are both applied, the Dataverse connector will be blocked.

Take a look at this article for more examples

https://docs.microsoft.com/en-us/power-platform/admin/dlp-combined-effect-multiple-policies

Was this reply helpful? Yes No
tom555 85 on at

Like (0)

Report
Copy link

Link copied!

Thank you @HSheild

Scenario 1:
In case if DLP 1 has two connectors data verse, outlook in business category and DLP 2 has SQL and azure in non business category then combined effect will be as follows:

Resulted/combined DLP policy as most restrictive one from Scenario 1:
data verse, outlook in business category
SQL and azure in non business category

Scenario 2:
In case if DLP 1 has two connectors data verse, outlook in business category and DLP 2 has data verse in business category then combined effect will be as follows:

Resulted/combined DLP policy as most restrictive one from Scenario 2:
data verse in business category

Is above understanding correct?

Thanks

Was this reply helpful? Yes No
Pstork1 69,505 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

For example,

Policy 1 has SharePoint and OneDrive as a Business Connector and DropBox as a non-business connector and File System as a Blocked connector.

Policy 2 has the same settings except OneDrive is a non-Business connector.

The result would be that SharePoint and OneDrive could not be used in the same app because OneDrive will default to a non-business connector (due to #2) and SharePoint will be a business connector (due to #1) File System connector will be blocked entirely.

Was this reply helpful? Yes No