Forum Discussion

Afsar260's avatar
Afsar260
Copper Contributor
Sep 13, 2024

Sharepoint online DLP alerts

Hello All

 

I have created the DLP policy with a very simple condition and action.

 

If content content U.S. Social security number 1- ANY
AND

content is shared from M365 - with people outside organization.

 

Action

 

Block only people outside organization.

 

User notifications with Policy tips

 

Allowed the user overrides

 

===============

 

Whenever I am sharing the content outside the organization I am able to see the policy with override option. After overriding the policy , it is allowing to share content. However it is not generating alert in the dashboard. I am able to see the DLP undo rule but not the alert.

 

Please advise if it is by design or am I missing something important.  

 

 

2 Replies

  • HaraldRau's avatar
    HaraldRau
    Iron Contributor

    Afsar260 did you activate this option in the rule itself?

     

    That's required to trigger an alert in the alert portal. Otherwise your events will only be displayed in the Activity Explorer.

    • Afsar_Shariff's avatar
      Afsar_Shariff
      Brass Contributor
      HaraldRau

      Yes I have activated this option, I am getting an alert whenever I am uploading a sensitive content to sharepoint site. I am not getting alert only when user overrides the policy.

Resources