Skip to content

Commit 6e521cc

Browse files
Update New-DlpComplianceRule.md
Removed IRM policies for now (it will come in June) updated CCSI rule along with description.
1 parent 1254be8 commit 6e521cc

File tree

1 file changed

+7
-16
lines changed

1 file changed

+7
-16
lines changed

exchange/exchange-ps/exchange/New-DlpComplianceRule.md

Lines changed: 7 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -305,31 +305,22 @@ New-DLPComplianceRule -Name "Contoso Rule 1" -Policy "Contoso Policy 1" -Advance
305305

306306
This example uses the AdvancedRule parameter to read the following complex condition from a file: "Content contains sensitive information: "Credit card number OR Highly confidential" AND (NOT (Sender is a member of "Jane's Team" OR Recipient is "adele@contoso.com")).
307307

308+
308309
### Example 4
309310
```powershell
310-
$locations = '[{"Workload":"Applications","Location":"83ef198a-0396-4893-9d4f-d36efbffc8bd","LocationDisplayName":"Purview API Explorer","LocationSource":"Entra","LocationType":"Individual","Inclusions":[{"Type":"Tenant","Identity":"All"}]}]'
311-
312-
New-DlpCompliancePolicy -Name "Test Risky user Entra DLP Policy" -Mode Enable -Locations $locations
313-
314-
New-DlpComplianceRule -Name "Test Risky User Entra DLP Rule" -Policy "Test Risky user Entra DLP Policy" -SharedByIRMUserRisk @("FCB9FA93-6269-4ACF-A756-832E79B36A2A") -RestrictAccess @(@{setting="UploadText";value="Block"}) -GenerateAlert $true -GenerateIncidentReport @("siteadmin") -NotifyUser @("kyra@contoso.onmicrosoft.com")
315-
```
316-
317-
This is an example of a risky user indicator rule.
318311
319-
### Example 5
320-
```powershell
321-
$myEntraAppId = "72e39dca-38f3-4814-b93b-a7ed0a5a4b74"
312+
$myEntraAppId = ""
322313
323-
$myEntraAppName = "Contoso Demo"
314+
$myEntraAppName = ""
324315
325-
$locations = '[{"Workload":"Applications","Location":$myEntraAppId,"LocationDisplayName":$myEntraAppName,"LocationSource":"Entra","LocationType":"Individual","Inclusions":[{"Type":"Tenant","Identity":"All"}]}]'
316+
$locations = "[{`"Workload`":`"Applications`",`"Location`":`"$myEntraAppId`",`"LocationDisplayName`":`"$myEntraAppName`",`"LocationSource`":`"Entra`",`"LocationType`":`"Individual`",`"Inclusions`":[{`"Type`":`"Tenant`",`"Identity`":`"All`"}]}]"
326317
327-
New-DlpCompliancePolicy -Name "Entra DLP Policy for CC" -Mode Enable -Locations $locations
318+
new-dlpcompliancepolicy -Name "Test Entra DLP" -Mode Enable -Locations $locations -EnforecementPlanes @("Entra")
328319
329-
New-DlpComplianceRule -Name "Entra DLP Rule for CC" -Policy "Entra DLP Rule for CC" -ContentContainsSensitiveInformation @{Name = "credit card number"} -GenerateAlert $true -GenerateIncidentReport @("siteadmin") -NotifyUser @("arpitha@contonso.onmicrosoft.com" )-RestrictAccess @(@{setting="UploadText";value="Block"})
320+
new-dlpcompliancerule -Name "Test Entra Rule" -Policy "Test Entra DLP" -ContentContainsSensitiveInformation @{Name = "credit card number"} -GenerateAlert $true -GenerateIncidentReport @("siteadmin") -NotifyUser @("admin@contonso.onmicrosoft.com") -RestrictAccess @(@{setting="UploadText";value="Block"})
330321
```
331322

332-
This is an example of a CCSI rule.
323+
This is an example of applying a CCSI based DLP rule that should be handled by an entra-registered enterprise application in the tenant
333324

334325
## PARAMETERS
335326

0 commit comments

Comments
 (0)