{"id":100947,"date":"2022-04-11T15:00:00","date_gmt":"2022-04-11T22:00:00","guid":{"rendered":"https:\/\/cm-edgetun.pages.dev\/en-us\/power-platform\/blog\/?p=100947"},"modified":"2023-05-31T14:55:08","modified_gmt":"2023-05-31T21:55:08","slug":"protect-your-data-with-power-platforms-latest-data-loss-prevention-dlp-capabilities-now-generally-available","status":"publish","type":"post","link":"https:\/\/cm-edgetun.pages.dev\/en-us\/power-platform\/blog\/2022\/04\/11\/protect-your-data-with-power-platforms-latest-data-loss-prevention-dlp-capabilities-now-generally-available\/","title":{"rendered":"Protect your data with Power Platform\u2019s latest Data Loss Prevention (DLP) capabilities, now generally available"},"content":{"rendered":"\n

Microsoft Power Platform is a powerful low-code development platform that allows you to analyze data, build solutions, automate processes, and create virtual agents thanks to a growing ecosystem of more than 700 data connectors. Your organization’s data is likely one of the most important assets you’re responsible for safeguarding as an administrator. Therefore, Microsoft Power Platform provides a comprehensive set of Data Loss Prevention (DLP) policies to help you define and enforce rules for how these connectors can be used.<\/p>\n\n\n\n

Microsoft Power Platform has invested heavily in extending its DLP offering, and we are pleased to announce the general availability of two advanced capabilities, DLP connector action control<\/a><\/strong> and DLP for custom connectors<\/a><\/strong>, that will provide administrators with a level of control that is unmatched in the industry.<\/p>\n\n\n\n

DLP connector action control<\/strong> enables admins to easily allow or block specific connector actions for each connector. For example, you could block the Delete row (V2)<\/em> action for the SQL Server<\/em> connector.<\/p>\n\n\n\n

DLP for custom connectors<\/strong> enables admins to apply well known DLP constructs\u2014like connector classification (business, non-business, blocked)\u2014to a newer breed of connectors named custom connectors<\/em>.<\/p>\n\n\n\n

Important:<\/strong> DLP connector endpoint filtering<\/a> remains in preview. Its planned general availability on March 31, 2022, is postponed. We apologize for the delay, and we will notify you when a new date has been chosen.<\/p>\n\n\n\n

Data Loss Prevention connector action control<\/h2>\n\n\n\n

Microsoft Power Platform allows admins to categorize connectors in a DLP policy into buckets such as Business, Non-business, or Blocked. When administrators only have access to these heavy-handed settings, they have no choice but to block the connector if it represents the slightest risk. With DLP connector action control<\/strong>, administrators can now control which specific connector actions can be used by the Microsoft Power Platform\u2019s makers.<\/p>\n\n\n\n

For example, an organization may have a policy that says users cannot post tweets to Twitter but reading tweets is allowed. Typically, that organization would block the Twitter connector. Thanks to DLP connector action control, you can now choose to completely block the usage of the Twitter connector in one department but allow for limited usage of that same connector in the marketing department, where tracking product sentiment is an important sales signal. You can choose to disable the write or post actions, but allow for read actions, safely enabling the connector, and supporting scalable digital transformation.<\/p>\n\n\n\n

Configuring a connector’s actions is available for all blockable<\/em> connectors, but not for unblockable connectors<\/a> nor custom connectors<\/a>. It is available in the Prebuilt connectors<\/em> tab of the DLP Policies<\/em> wizard when selecting a connector.<\/p>\n\n\n\n

\"Animation
Note: Please zoom in your web browser\u2019s display to see the GIF in higher resolution.<\/em><\/figcaption><\/figure>\n\n\n\n

Data Loss Prevention for custom connectors<\/h2>\n\n\n\n

Microsoft Power Platform allows makers to create and share custom connectors<\/a>.<\/p>\n\n\n\n

Environment admins can now classify individual custom connectors by name in environment-level DLP policies in the Microsoft Power Platform admin center or with PowerShell. All custom connectors are listed in line with pre-built connectors in the Connectors<\/em> tab of the DLP Policies<\/em> wizard.<\/p>\n\n\n\n

Tenant admins can also classify custom connectors by their Host URL endpoints using a pattern matching construct with \u2018*\u2019 support for tenant-level DLP policies in the Power Platform admin center or with PowerShell. A new tab was added in the DLP Policies<\/em> wizard called Custom connectors<\/em> where you can specify an ordered list of allow and deny URL patterns for custom connectors.<\/p>\n\n\n\n

\"Animated
Note: Please zoom in your web browser\u2019s display to see the GIF in higher resolution.<\/em><\/figcaption><\/figure>\n\n\n\n

Getting started with Data Loss Prevention capabilities<\/h2>\n\n\n\n

We are confident that this new set of advanced DLP capabilities will help your organization strike a balance between productivity and protection. They are now available for all customers in all supported regions<\/a>. Want to learn more about using advanced DLP controls in your organization? Here are some resources to help you get started:<\/p>\n\n\n\n