9.1 Start Purview as‐a‐code configuration ‐ Purview and Compliance - dcasota/m365-scripts GitHub Wiki

Lately, having activated the Microsoft Developer Program, and created a new tenant, the amount of management portals increased, so for Purview and Compliance.

The Compliance Portal still is labeled as Microsoft Purview, because earlier it was one portal only, but the content between purview.microsoft.com and compliance.microsoft.com is different. In Compliance Portal you can do assessments, improvement actions, etc. and Compliance Manager measures the progress in completing actions that help reduce risks around data protection and regulatory standards. The Purview Portal spans data security, governance and compliance across Microsoft365, Microsoft Azure, Microsoft Fabric and other cloud platform as well.

Microsoft Purview: https://purview.microsoft.com/

Microsoft Compliance: https://compliance.microsoft.com/

Roadmap: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=Microsoft%20Syntex%2CMicrosoft%20Purview%20compliance%20portal%2CPreview%2CGeneral%20Availability#owRoadmapMainContent

Microsoft Purview Customer Experience engineering (CxE): https://microsoft.github.io/ComplianceCxE/playbooks/AIP2MIP/CompareAIP2MIP/

(Microsoft Edge: https://learn.microsoft.com/en-us/answers/questions/1183333/microsoft-purview-extension-for-edge)

Google Chrome:

• https://chromewebstore.google.com/detail/microsoft-purview-erweite/echcggldkblhodogklpincgchnpgcdco?pli=1 https://learn.microsoft.com/en-us/purview/dlp-chrome-get-started?source=recommendations

Firefox:

• https://learn.microsoft.com/en-us/purview/dlp-firefox-extension-get-started

Power BI:

• https://learn.microsoft.com/en-us/purview/dlp-powerbi-get-started

Symantec:

• https://learn.microsoft.com/en-us/purview/dlp-migration-assistant-for-symantec-get-started

See https://microsoft.github.io/ComplianceCxE/playbooks/sourceCodePlaybook/

There are quite a few management and privacy controls.

The data loss prevention modules allows predefined and custom policies in 8 areas:

1. Exchange email
2. Sharepoint sites
3. Onedrive accounts
4. Teams chat and channel messages
5. Devices
6. Microsoft Defender for Cloud Apps
7. On-premises repositories
8. Power BI

This is an attempt to make run unified labebling scanner, documented in https://learn.microsoft.com/en-us/training/modules/apply-manage-sensitivity-labels/4-configure-on-premises-labeling-for-unified-labeling-scanner .

install-module -name AIPService
import-module -name AIPService

When you create an app registration, select App registrations.

Select + New registration. Provide a meaningful name.

Select the Supported account type (or leave as default). For the first time, I have spotted this possibility of choosing any Microsoft Entra ID tenant and personal Microsoft accounts.

Set the Redirect url to: https://localhost. Select Register. Proceed with the step-by-step guide of https://learn.microsoft.com/en-us/training/modules/apply-manage-sensitivity-labels/4-configure-on-premises-labeling-for-unified-labeling-scanner.