Examples

Author: chrisda

exchange/exchange-ps/exchange/New-DlpComplianceRule.md

@@ -305,6 +305,32 @@ New-DLPComplianceRule -Name "Contoso Rule 1" -Policy "Contoso Policy 1" -Advance
 
 This example uses the AdvancedRule parameter to read the following complex condition from a file: "Content contains sensitive information: "Credit card number OR Highly confidential" AND (NOT (Sender is a member of "Jane's Team" OR Recipient is "adele@contoso.com")).
 
+### Example 4
+```powershell
+$locations = '[{"Workload":"Applications","Location":"83ef198a-0396-4893-9d4f-d36efbffc8bd","LocationDisplayName":"Purview API Explorer","LocationSource":"Entra","LocationType":"Individual","Inclusions":[{"Type":"Tenant","Identity":"All"}]}]'
+
+New-DlpCompliancePolicy -Name "Test Risky user Entra DLP Policy" -Mode Enable -Locations $locations
+
+New-DlpComplianceRule -Name "Test Risky User Entra DLP Rule" -Policy "Test Risky user Entra DLP Policy" -SharedByIRMUserRisk @("FCB9FA93-6269-4ACF-A756-832E79B36A2A") -RestrictAccess @(@{setting="UploadText";value="Block"}) -GenerateAlert $true -GenerateIncidentReport @("siteadmin") -NotifyUser @("kyra@contoso.onmicrosoft.com")
+```
+
+This is an example of a risky user indicator rule.
+
+### Example 5
+```powershell
+$myEntraAppId = "72e39dca-38f3-4814-b93b-a7ed0a5a4b74"
+
+$myEntraAppName = "Contoso Demo"
+
+$locations = '[{"Workload":"Applications","Location":$myEntraAppId,"LocationDisplayName":$myEntraAppName,"LocationSource":"Entra","LocationType":"Individual","Inclusions":[{"Type":"Tenant","Identity":"All"}]}]'
+
+New-DlpCompliancePolicy -Name "Entra DLP Policy for CC" -Mode Enable -Locations $locations
+
+New-DlpComplianceRule -Name "Entra DLP Rule for CC" -Policy "Entra DLP Rule for CC" -ContentContainsSensitiveInformation @{Name = "credit card number"} -GenerateAlert $true -GenerateIncidentReport @("siteadmin") -NotifyUser @("arpitha@contonso.onmicrosoft.com" )-RestrictAccess @(@{setting="UploadText";value="Block"})
+```
+
+This is an example of a CCSI rule.
+
 ## PARAMETERS
 
 ### -Name
@@ -3344,11 +3370,11 @@ Accept wildcard characters: False
 ```
 
 ### -SharedByIRMUserRisk
-The SharedByIRMUserRisk paramter specifies the risk category of the user performing the violating action. Valid values are:
+The SharedByIRMUserRisk parameter specifies the risk category of the user performing the violating action. Valid values are:
 
-- Elevated Risk Level
-- Moderate Risk Level
-- Minor Risk Level
+- FCB9FA93-6269-4ACF-A756-832E79B36A2A (Elevated Risk Level)
+- 797C4446-5C73-484F-8E58-0CCA08D6DF6C (Moderate Risk Level)
+- 75A4318B-94A2-4323-BA42-2CA6DB29AAFE (Minor Risk Level)
 
 You can specify multiple values separated by commas.
 

exchange/exchange-ps/exchange/Set-DlpComplianceRule.md

@@ -187,7 +187,7 @@ This example modifies the access scope and blocking behavior of a DLP compliance
 
 ### Example 2
 ```powershell
-Contents of the file named C:\Data\Sensitive Type.txt:
+# Contents of the file named C:\Data\Sensitive Type.txt:
 
 {
 "Version": "1.0",
@@ -3237,7 +3237,13 @@ Accept wildcard characters: False
 ```
 
 ### -SharedByIRMUserRisk
-{{ Fill SharedByIRMUserRisk Description }}
+The SharedByIRMUserRisk parameter specifies the risk category of the user performing the violating action. Valid values are:
+
+- FCB9FA93-6269-4ACF-A756-832E79B36A2A (Elevated Risk Level)
+- 797C4446-5C73-484F-8E58-0CCA08D6DF6C (Moderate Risk Level)
+- 75A4318B-94A2-4323-BA42-2CA6DB29AAFE (Minor Risk Level)
+
+You can specify multiple values separated by commas.
 
 ```yaml
 Type: MultiValuedProperty