What happens if two DLP policies of different connector settings are applied to single environment ?

Like (0) Share

Report

Posted on 23 Mar 2022 11:44:56 by tom555

Hello,

What happens if two DLP policies of different connector settings are applied to single environment? which DLP policy/connector would be applicable to the environment in this setting? What are the consequences?

Thanks,

Categories:

Management

Environment

All responses (5)

Answers (1)

Pstork1 66,091 Most Valuable Professional on 23 Mar 2022 at 21:11:14

Like (0)

Report

Re: What happens if two DLP policies of different connector settings are applied to single environment ?

For example,

Policy 1 has SharePoint and OneDrive as a Business Connector and DropBox as a non-business connector and File System as a Blocked connector.

Policy 2 has the same settings except OneDrive is a non-Business connector.

The result would be that SharePoint and OneDrive could not be used in the same app because OneDrive will default to a non-business connector (due to #2) and SharePoint will be a business connector (due to #1) File System connector will be blocked entirely.
tom555 85 on 23 Mar 2022 at 18:25:41

Like (0)

Report

Re: What happens if two DLP policies of different connector settings are applied to single environment ?

Thank you @HSheild

Scenario 1:
In case if DLP 1 has two connectors data verse, outlook in business category and DLP 2 has SQL and azure in non business category then combined effect will be as follows:

Resulted/combined DLP policy as most restrictive one from Scenario 1:
data verse, outlook in business category
SQL and azure in non business category

Scenario 2:
In case if DLP 1 has two connectors data verse, outlook in business category and DLP 2 has data verse in business category then combined effect will be as follows:

Resulted/combined DLP policy as most restrictive one from Scenario 2:
data verse in business category

Is above understanding correct?

Thanks
H Sheild 3,000 Most Valuable Professional on 23 Mar 2022 at 16:49:47

Like (1)

Report

Re: What happens if two DLP policies of different connector settings are applied to single environment ?

Hi @tom555

An example, you have 2 DLP policies applied to an environment, policy 1 has the Dataverse connector classified as blocked, policy 2 has the Dataverse connector classified as Business. Blocked is the most restrictive classification, therefore, in an environment where policy 1 and policy 2 are both applied, the Dataverse connector will be blocked.

Take a look at this article for more examples

https://docs.microsoft.com/en-us/power-platform/admin/dlp-combined-effect-multiple-policies
tom555 85 on 23 Mar 2022 at 12:51:33

Like (0)

Report

Re: What happens if two DLP policies of different connector settings are applied to single environment ?

Can you please elaborate "most restrictive policy" term out of two with example?

Thank you!
Verified answer

Pstork1 66,091 Most Valuable Professional on 23 Mar 2022 at 11:58:33

Like (1)

Report

Re: What happens if two DLP policies of different connector settings are applied to single environment ?

In that case the most restrictive policies from both policies will apply.

Community site session details

What happens if two DLP policies of different connector settings are applied to single environment ?

Helpful resources

News and Announcements

Quick Links

Understanding Microsoft Agents - Introductory Session

Warren Belz – Community Spotlight

Congratulations to the April Top 10 Community Stars!

Leaderboard

Featured topics

Product updates

Community site session details

What happens if two DLP policies of different connector settings are applied to single environment ?

Helpful resources

News and Announcements

Quick Links

Understanding Microsoft Agents - Introductory Session

Warren Belz – Community Spotlight

Congratulations to the April Top 10 Community Stars!

Subscribe to this forum!

Select categories

Leaderboard

Featured topics

Product updates