Forum Discussion

TD_Bary's avatar
TD_Bary
Copper Contributor
Mar 03, 2023

Purview exceptions for email

Trying to set up some DLP rules for the first time.  Everything went great but I don't see an Exceptions section.  I've researched and found some forum posts that mention MS removed this function recently.  I also saw a MS article that sort of alludes to doing this at the tenant level but not sure how to go about doing that.

 

We want to apply DLP so that it doesn't alert when a rule triggers outbound emails going to specific outbound domains, such as *@contoso.com.  Additionally, ignoring alerts that are sent by specific email addresses (such as auto-emails coming from a ticketing system).

 

I can't tell if this is a permissions issue or if I'm just missing something.  Any help would be appreciated.  Thanks!

 

3 Replies

  • TD_Bary's avatar
    TD_Bary
    Copper Contributor
    So I've figured out that there is supposed to be a NOT operator that replaces the exceptions in the rule builder. However, whenever I build or modify a rule, I never get a NOT flag. I only get AND/OR. It says groups have to be created but when I create a group within the rule, it doesn't change anything. Is there somewhere else I'm supposed to create groups that then translate to the rule builder?
    • jderkowski's avatar
      jderkowski
      Copper Contributor
      You must add a group to see the NOT flag. It is the button next to the "Add condition"