Loading...

Microsoft Purview | Experience enhancements to IRM alert workflow

Microsoft Purview | Experience enhancements to IRM alert workflow

Microsoft Purview is enhancing the Insider Risk Management alert workflow to improve usability by reducing clutter and maximizing visual space. Key updates include default opening of the Activity Explorer tab, relocated features under the Manage button, and adjustable panels. Rollout begins August 2025, with no admin action needed. Introduction We’re enhancing the Insider Risk Management (IRM) alert investigation experience to streamline workflows and improve usability. These updates are designed to maximize visual space, reduce clutter, and make it easier for analysts and investigators to focus on key insights during alert investigations. This message is associated with Microsoft 365 Roadmap ID 493754 for Worldwide. When this will happen Public Preview (Worldwide): We will begin rolling out in early August 2025 and expect to complete by late August 2025. How this will affect your organization Prerequisite: To receive the updated IRM alert workflow experience, tenants must have an Insider Risk Management (IRM) license. This feature is on by default for eligible tenants once rollout begins. These updates will improve the alert investigation experience for Insider Risk Management analysts and investigators. While all existing functionality remains available, some features will appear in new locations. Key changes include: These changes are designed to reduce visual clutter and improve focus during investigations. Alert workflow enhancements before and after: View image in new tab The Activity Explorer tab will now open by default when an alert is selected. The All Risk Factors tab has been enhanced to support more efficient investigations. The alert details banner previously shown at the top of each tab is now accessible via the Manage button. Actions such as assigning users or taking action on an alert are now located under the Manage button. The User Timeline, previously displayed to the left of the Activity Explorer, is now accessible via the View activity timeline button. Users can now maximize or minimize the Activity Explorer panel for improved visibility. What you need to do to prepare Share this information with your Insider Risk Management analysts and investigators. Review the updated layout and functionality to ensure teams are familiar with the new locations of existing […]

The post Microsoft Purview | Experience enhancements to IRM alert workflow appeared first on M365 Admin.

Published on:

Learn more
Need help with this product?

We can help you with Microsoft Purview | Experience enhancements to IRM alert workflow

If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.

M365 Admin
M365 Admin

by João Ferreira

Share post:

Related posts

Microsoft Entra ID: Risk-based anti-bot verification (CAPTCHA) for SMS and voice multi-factor authentication

Starting mid-November 2026, Microsoft Entra ID will add risk-based CAPTCHA verification for SMS and voice MFA to prevent automated fraud. Some...

1 day ago

[Outlook for iOS and Android] Copilot Chat in Outlook UX improvements

Copilot Chat in Outlook for iOS and Android is being updated with a refreshed, consistent design across Microsoft 365 apps, improved chat inte...

1 day ago

Microsoft Word: Retirement of legacy compatibility settings

Microsoft Word will retire legacy compatibility settings for documents in Compatibility Mode starting December 2026 (Windows) and early 2027 (...

1 day ago

Power Platform – Information regarding the end of support for SharePoint temporary authentication URLs

Starting April 1, 2027, SharePoint temporary authentication URLs will be retired. Power Apps and Automate functionality that relies on these U...

1 day ago

Windows Office Hours: November 19, 2026

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live ...

1 day ago

Scheduled prompts in Microsoft 365 Copilot are moving to native Copilot scheduling and the Tasks view

Microsoft 365 Copilot is moving scheduled prompts from Power Platform to native Copilot scheduling, enabling automatic execution of one-time o...

1 day ago

Prevent issues with NetApp SMB shares: Learn about new Windows Server security requirements

Microsoft introduced additional security requirements for LDAP authentication on Active Directory domain controllers starting with the October...

1 day ago

60-day reminder: Hardening changes for ReFS volumes on removable media

Microsoft is making hardening changes to the Resilient File System (ReFS). The changes improve the security posture of Windows by adding visib...

1 day ago

Microsoft 365 Copilot: Copilot Workspaces is replacing standalone agent selection with agentic chat

Microsoft 365 Copilot Workspaces will replace standalone agent selection (Researcher, Analyst, Designer) with an agentic chat that applies ski...

1 day ago

Microsoft Teams: Updated recording and transcript access setting behavior for town halls and webinars

Microsoft Teams is updating the “Who has access to the recording or transcript” option for Events App town halls and webinars. It ...

1 day ago

Newsletter

Get the latest Dynamics 365 and Power Platform content in your inbox

A curated digest of community blogs, product news, videos, and podcasts — delivered without the noise.

Weekly updates Unsubscribe anytime Fresh community picks
We use your email only for the newsletter and you can unsubscribe at any time.
By subscribing, you agree to the privacy policy.