Question

You are configuring your first Insider Risk Management policy in Microsoft Purview using the 'Data leaks' template. When you reach the policy indicators page, all of the SharePoint, Teams, and cloud storage indicator checkboxes are greyed out and cannot be selected. Other administrators confirm they see the same behavior. What must you do first to make these indicators available for selection?

Accepted Answer

Enable the required indicators globally in Insider Risk Management settings before or during policy creation

Answer

Assign yourself the Insider Risk Management Investigators role group

Answer

Onboard all devices to Microsoft Defender for Endpoint

Answer

Create a Data Loss Prevention policy that references the same locations