Compliance Problems

How to Apply a Microsoft Purview DLP Policy to Specific Groups

Huda Qurayshi Oct 21, 2026 868 views

Question details

The user needs to configure Microsoft Purview Data Loss Prevention (DLP) policies so that they are restricted to selected users or specific departments, rather than applying globally to the entire organization.

How to Apply a Microsoft Purview DLP Policy to Specific Groups

Product: Microsoft Purview
Device & OS: not provided
Scenario: Setting up targeted compliance controls and data loss prevention measures for specific membership groups or departments.
Observed behavior: The goal is to successfully scope a Custom DLP policy to a designated distribution group or security group within the Microsoft Purview portal.

Before you start

Ensure you have the appropriate administrative privileges, such as the Compliance Administrator role, and that your target distribution or security groups are already created in your Microsoft 365 admin center.

Solution 1Recommended

Configure Group-Specific DLP Policies in Microsoft Purview

Use the Microsoft Purview compliance portal to create a custom data loss prevention policy and manually define the specific groups to include or exclude.

Applying DLP policies to specific groups allows organizations to enforce compliance controls tailored to certain departments without disrupting the workflows of other users.

Access the Purview Portal

Log into the Microsoft Purview compliance portal using your administrator account credentials.

Navigate to DLP Policies

In the left navigation pane, select 'Data loss prevention', and then click on the 'Policies' tab to view your current rules.

Create a New Policy

Click on 'Create policy'. In the template selection screen, choose the 'Custom' category and then select 'Custom policy' before proceeding.

Configure Required Locations

On the 'Choose locations to apply the policy' page, toggle the specific workloads you want to monitor, such as Exchange email, SharePoint sites, or OneDrive accounts.

Select the Target Groups

For the enabled locations (such as Exchange), click 'Edit' under the 'Included' column. Search for and select the specific distribution group or security group that this policy should cover, then save and activate the policy.

Configure Group-Specific DLP Policies in Microsoft Purview

Group Synchronization: Newly created security or distribution groups may take a few hours to sync across the Microsoft 365 ecosystem before they appear as selectable options in the Purview portal.

Free Microsoft Office alternative

Need a Lightweight Alternative to Microsoft Office? Try WPS Office

While enterprise data compliance features like Microsoft Purview DLP require administrative M365 access, everyday office tasks do not require a heavy, expensive enterprise subscription. WPS Office provides a complete, free, and highly compatible alternative for everyday document processing, spreadsheets, and presentations.

1. Download the Installer: Visit the official WPS Office website to download the free installation package for your operating system.
2. Install WPS Office: Run the downloaded installer and follow the simple on-screen instructions to complete the setup.
3. Open Your Files: Launch WPS Office and instantly open your existing Word, Excel, or PowerPoint documents with their formatting fully preserved.

Seamlessly compatible with Microsoft Office formats including .docx, .xlsx, and .pptx.Free to use with advanced PDF editing capabilities built directly into the suite.Lightweight installation that ensures smooth performance on older or lower-spec devices.Familiar user interface that allows seamless migration without a steep learning curve.

microsoft office alternative - wps office

Frequently Asked Questions

Can I apply a Microsoft Purview DLP policy to dynamic distribution groups?

Microsoft Purview DLP policies generally support mail-enabled security groups and standard distribution groups. Dynamic distribution groups are not fully supported for all workload locations, so it is highly recommended to use standard security groups to ensure consistent policy enforcement.

Do I need a specific license to use Microsoft Purview DLP?

Yes, utilizing Data Loss Prevention features in Microsoft Purview requires specific licensing, such as a Microsoft 365 E3 or E5 subscription, depending on the complexity of the rules and the specific services (like Teams or endpoint DLP) you are protecting.

How long does it take for a newly applied DLP policy to take effect?

After creating or updating a DLP policy targeting specific groups in the Microsoft Purview portal, it can take up to 24 hours for the policy settings to fully propagate and take effect across your entire organization's environment.

Microsoft Office Security Issues