Forum Discussion
AtharvaTheMaverics
Dec 02, 2025Copper Contributor
Migrating DLP Policies from one tenant to other
Has anyone successfully migrated DLP policies from a dev tenant (like contoso.onmicrosoft.com) to a production tenant (paid license with custom domain) in Microsoft Purview without third-party tools?...
- Dec 05, 2025
There isn’t a built-in export/import mechanism for DLP policies across tenants.
DLP policies contain tenant-bound objects (sensitive info types, locations, conditions, etc.), so they must be recreated in the destination tenant.The most reliable approach is:
- Export the policy definitions using Security & Compliance PowerShell
Get-DlpCompliancePolicy and Get-DlpComplianceRule let you retrieve the configuration, match locations, and extract conditions. - Recreate them in the target tenant using the same cmdlets
(New-DlpCompliancePolicy, New-DlpComplianceRule).
You’ll need to adjust references to any tenant-specific info types or endpoints. - Validate sensitive info types
If you used custom SITs, they must be exported/imported separately or recreated manually before importing the DLP rules.
Today there is no cross-tenant migration API for DLP, and Microsoft Purview doesn't offer a native copy/clone feature.
PowerShell automation is the cleanest and most predictable path. - Export the policy definitions using Security & Compliance PowerShell
Dec 05, 2025
I must say, I never tried it before myselfe but it is on my list.
Thist would be the Microsoft way to do it professional and save:
Manage Microsoft 365 Tenant Configuration with Azure DevOps - Azure Architecture Center | Microsoft Learn