question

KoteswararaoKata-4343 avatar image
0 Votes"
KoteswararaoKata-4343 asked YukiSun-MSFT commented

How to automate apply changes to child dlp policies those are done in master dlp policy using powershell?

Hi Team,

How to automate apply changes to child dlp policies those are done in master dlp policy using powershell?

Example: In case of any rule or action change in master policy we have find out the changes on periodic basis and need to apply them to child policies using any ps script.

Kindly help me over the possibilities and details procedure on high level.

Regards
Koteswararao

office-exchange-online-itpro
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @KoteswararaoKata-4343,

I've read through your post but not quite sure about what you are trying to achieve. Would you please clarify a bit more about what you mean by "child dlp policies" and "master dlp policy" so that we can understand better about your question?


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 Votes 0 ·

Hi YukiSun,

Requirement 1: Basically we want to export existing DLP Schema(assume as main policy or master policy) as a template and need to create more policies based the schema exported.

Requirement 2: In future if there is any changes in the main policy rules or actions we have to detect those changes on periodic basis then following we have to apply these changes to the other DLP policies(Assume as Child policies) created based on main policy.

Over all process we have to automate what all are the possibilities, your help must appreciated.

0 Votes 0 ·

1 Answer

YukiSun-MSFT avatar image
0 Votes"
YukiSun-MSFT answered YukiSun-MSFT commented

Hi @KoteswararaoKata-4343,

Thanks for the elaboration. I read through your description but based on my knowledge and research, I am afraid neither of the two requirements can be realized.

For Requirement 1, as we can learn from this article, DLP Policy templates are expressed as XML documents which adhere to certain schema. With the built-in features and cmdlet available, we can only export the DLP policy collections using the Export-DlpPolicyCollection cmdlet, but its output is far from adequate to develop a Policy template. Given this, you would need to refer to the first link mentioned earlier to manually developing the DLP policy template files based on your need.

For Requirement 2, per my understanding, the DLP policy is independent from the policy template after it's been created, therefore I'm afraid it's not feasible to make changes applied automatically to the "child policies" when a change is made in the "main policy".


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @KoteswararaoKata-4343,

Just checked in to follow up with this thread. If you have any questions or need further help on this issue, please feel free to post back.


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 Votes 0 ·