Roadmap › 576710

Microsoft Purview: Introducing IRM Alert classification

In development Microsoft Purview Web
General availability
2027-01
Preview
2026-11
Added
22 Oct 2026
Last modified
22 Oct 2026 22:58 UTC
First archived
23 Oct 2026
Release rings
General Availability, Preview
Clouds
Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD

Description

<p>Insider risk management will be introducing the ability to classify alerts as True positive, Benign (operational), and False positive. This will be available on all alerts where authorized analysts with the appropriate permissions can choose from a list of predefined classification reasons. Alert classification will help tenants to better classify risk within alerts to support reporting and tuning needs. This will replace existing dismissal reasons.</p>

© Microsoft — from the Microsoft 365 Roadmap · View on microsoft.com · Content notice