Forum Discussion

AtharvaTheMaverics's avatar
AtharvaTheMaverics
Copper Contributor
Dec 02, 2025
Solved

Migrating DLP Policies from one tenant to other

Has anyone successfully migrated DLP policies from a dev tenant (like contoso.onmicrosoft.com) to a production tenant (paid license with custom domain) in Microsoft Purview without third-party tools?...
  • rogerval's avatar
    Dec 05, 2025

    There isn’t a built-in export/import mechanism for DLP policies across tenants.
    DLP policies contain tenant-bound objects (sensitive info types, locations, conditions, etc.), so they must be recreated in the destination tenant.

    The most reliable approach is:

    1. Export the policy definitions using Security & Compliance PowerShell
      Get-DlpCompliancePolicy and Get-DlpComplianceRule let you retrieve the configuration, match locations, and extract conditions.
    2. Recreate them in the target tenant using the same cmdlets
      (New-DlpCompliancePolicy, New-DlpComplianceRule).
      You’ll need to adjust references to any tenant-specific info types or endpoints.
    3. Validate sensitive info types
      If you used custom SITs, they must be exported/imported separately or recreated manually before importing the DLP rules.

    Today there is no cross-tenant migration API for DLP, and Microsoft Purview doesn't offer a native copy/clone feature.
    PowerShell automation is the cleanest and most predictable path.

Resources