Extending Microsoft Purview Ecosystem
Microsoft Purview aims to help customers govern and protect data across their multicloud, multiplatform data estates, while meeting the compliance requirements they are subjected to. That's why we are continuing to build extensibility and rich set of APIs and integrations with the broader ecosystem.
Extending Microsoft Purview Records Management with APIs and Power automate workflows
Organizations of all types require a records-management solution to manage regulatory, legal, and business-critical records across their corporate data. Microsoft Purview Records management helps an organization manage their legal obligations, provides the ability to demonstrate compliance with regulations, and increases efficiency with regular disposition of items that are no longer required to be retained, no longer of value, or no longer required for business purposes.
Microsoft Graph API for Purview Records Management
Microsoft Purview Records Management already supports automation using PowerShell Commands. One of the major asks we have heard from our customers and partners is to enable a modern, secure and programmable way of triggering of retention policies tied to external events. Examples include, an employee leaving the organization, a project hitting a completion milestone, fiscal year ending etc.
Today we are excited to announce the public preview of new Microsoft Graph APIs that enable CRUD – create, retrieve, update and delete – scenarios on the following entities:
- Retention Labels (security/labels/retentionLabels)
- Events (security/triggers/retentionEvents)
- Event Types (security/triggerTypes/retentionEventTypes)
We are also introducing two new permission attributes i.e. RecordsManagement.Read.All and RecordsManagement.ReadWrite.All that you will need to access these entities using Microsoft Graph APIs.
Power Automate Integration:
Records management is inherently workflow driven. We also know that our customers have unique business processes that they must execute to complete different steps in data’s lifecycle. To solve for these needs and more, we are excited to announce Power Automate integration for Microsoft Purview Records Management.
Microsoft Power Platform Connector is a proxy or a wrapper around an API that allows the underlying service to talk to Microsoft Power Automate, Microsoft Power Apps, and Azure Logic Apps. It provides a way for users to connect their accounts and leverage a set of prebuilt actions and triggers to build their apps and workflows. We already have a Microsoft 365 Compliance Connector. Today we are excited to share that we are adding the following two capabilities to this connector:
- Trigger to provide information about the expired item.
- Actions for:
- Deleting an item after its retention has expired.
- Applying a different label to an expired item.
Once the flow is created, it can easily be associated with a retention label. This will then trigger the associated Power Automate flow whenever items reach an end of retention period.
Custom Webhook Trigger
For developers who are interested in further customizing retention workflows, we are also providing a way to register Webhook APIs with a retention label. Instead of triggering a Power Automate flow we will invoke a registered Webhook with the configured JSON body. Initially this registration will only be possible through the New-ComplianceTag PowerShell Cmdlet.
This is just a beginning of extensibility journey for Microsoft Purview Records Management. To learn more about how to use these APIs and custom workflows view our Build session and read our product documentation here.
Microsoft Purview Information Protection + Adobe
It is critical for businesses to add Microsoft Purview Information Protection to standard business contracts traditionally shared as PDFs like purchase orders, partnership agreements, and service contracts, ensuring that only critical stakeholders can view, manage, and approve those documents.
Today, we are excited to share that Microsoft Purview’s multicloud and extensibility capabilities are expanding to include native classification, labeling and protection capabilities for Adobe Acrobat to help secure PDF documents. With this upcoming public preview, users will be able to apply Microsoft Purview Information Protection labels and policies to their most important pdf documents within the desktop version of Acrobat. Whenever a PDF is already labelled using Microsoft Purview Information Protection, the existing label can also be updated - given the user has appropriate edit permissions to do so. Acrobat will also honor sensitivity label policies like default labels, mandatory labels and controls on label downgrade. PDFs that are classified and optionally protected using Microsoft Purview Information Protection in Adobe Acrobat, contain content markings in the form of a header, footer, and watermark that are embedded into the PDF content stream and form an integral part of the document.
We are bundling Microsoft Purview’s Information Protection capabilities with the default Acrobat installer. This means that users do not need a separate plug-in to access Microsoft Purview’s Information Protection capabilities in Adobe Acrobat. To experience this capability in public preview please sign up here.
To summarize, we are on this exciting journey to build an extensible Microsoft Purview platform. With our APIs, Power Automate and built-in integrations, we are enabling extensibility so you can solve for your unique needs as well as benefit from value-added solutions built by our partner ecosystem. We can’t wait to see what you build next. In the meantime, here are some useful resources for your reference:
- Learn more about Microsoft Purview Records Management here.
- Try out Microsoft Purview Records Management and get a free test environment here.
- Sign up here for public preview of Adobe + Microsoft Purview Information Protection integration.
- Learn more about all our Microsoft Purview APIs and extensibility capabilities here.
Hammad Rajjoub
Director, Microsoft Purview and Priva Ecosystem