Forum Discussion
Purview DLP Behaviours in SharePoint and OneDrive
We are currently testing Microsoft Purview DLP policies for user awareness across SharePoint Online, and OneDrive. The policy is configured such that sensitive information (based on a sensitivity label-OFFICIAL Sensitive) shared externally triggers a policy tip, with override allowed (justification options enabled) and no blocking action configured.
In SharePoint Online and OneDrive, users are not experiencing any DLP-related behaviour. When attempting to share labelled content externally:
- No policy tips are displayed
- No override prompts are presented
- No indication of DLP enforcement is shown
Users are able to share content externally without any awareness prompt or restriction.
Sharing in OneDrive/SharePointExpected behaviour:
- Users should receive a policy tip during the sharing process
- Users should be prompted for justification when overriding, aligned with the DLP configuration
Has anyone observed similar behaviour with DLP in SharePoint Online and OneDrive, particularly in scenarios where no blocking action is configured? Keen to understand if this is expected behaviour, a known limitation, or if there are any configuration considerations or workarounds to achieve a consistent user experience across workloads.
4 Replies
Hey, manojviduranga! 😊 As nikkichapple stated, reviewing your DLP rule configuration would definitely help. Here are some screenshots of an example policy:
manojviduranga, here’s what I’m seeing with Policy Tips + Override in OneDrive. In my test, the policy tip shows as part of the sharing flow (after you attempt/confirm the external share), since the DLP condition is evaluated once the sharing action is triggered — not while simply typing/selecting the external user in the People Picker. If the rule is configured for block-with-override, the justification prompt appears and the override is recorded
For reference: https://learn.microsoft.com/en-us/purview/dlp-use-notifications-and-policy-tips#policy-tips-on-onedrive-sites-and-sharepoint-sites
We’ve seen this behavior when DLP is in simulation mode. Policy tips appear without enforcement. Have you checked whether the rule is configured with ‘Audit only’ vs ‘Block’? Also worth confirming endpoint vs SharePoint scope differences. 🔥
Can you share screenshots of the DLP rule and confirm whether the policy is in simulation mode or switched on.
