Forum Discussion

sachinraj548's avatar
sachinraj548
Copper Contributor
May 19, 2025

My DLP policy is not generating alert.

I tried uploading sensitive information but its not working however in content explorer it is coming up with sensitive info but no alert generation. 

2 Replies

  • Did you simply upload the file on SPO/ODB or share it externally to trigger the "content is shared outside" condition as well?

     

    Content explorer will show sensitive data discovered across M365, not limited to DLP policy matches

  • luongtuan22's avatar
    luongtuan22
    Copper Contributor

    please make sure you have these
    1. To configure or view DLP alerts, users must be assigned specific roles in Microsoft Purview. These roles include:

    • Compliance Administrator
    • Information Protection Admin
    • Security Operator
    • Security Reader
    • Information Protection Investigator

    For viewing matched content or using Content explorer, the Content Explorer Content Viewer role is also required.

    2. Licensing requirements

    What you can configure depends on your Microsoft 365 license:

    • Single-event alerts: Available with E1, F1, G1, E3, or G3 licenses.
    • Aggregate-event alerts: Requires an E5 license or one of the following add-ons for E3/G3:
      • Office 365 Advanced Threat Protection Plan 2
      • Microsoft 365 E5 Compliance
      • Microsoft 365 eDiscovery and Audit add-on

Resources