Microsoft Purview: Enhanced user profile in Insider Risk Management alerts

Microsoft Purview Insider Risk Management alerts will display enhanced user profiles with additional Entra attributes and risk signals within the alert workflow, improving investigation efficiency while maintaining privacy protections. The update rolls out from June to October 2026, requiring no immediate action but recommended review and communication. What and Why: Microsoft is enhancing the user profile experience within Microsoft Purview Insider Risk Management alerts by surfacing additional user and risk-related attributes directly within the alert investigation workflow. This helps investigators access key contextual information without leaving the alert experience while maintaining privacy-by-design protections such as pseudonymization, role-based access controls, and audit logging. This message is associated with Microsoft 365 Roadmap ID 564619. Rollout Schedule: Public Preview: Began late June 2026; expected to complete by mid-July 2026 General Availability (Worldwide, GCC, GCC High, DoD): Beginning early October 2026; expected to complete by mid-October 2026 Impact on Your Organization: Who is affected: Organizations using Microsoft Purview Insider Risk Management. Compliance investigators, analysts and administrators. Tenants using the Alerts (Preview) experience. Platforms/Services: Microsoft Purview Insider Risk Management Microsoft Entra ID profile integration Alerts (Preview) Web What will happen: Investigators will see an expanded User Details section within Insider Risk Management alerts. View image in new tab Additional Entra profile attributes will be displayed, including: Office location Employee type Department Last working date Insider risk signals will be aggregated into a consolidated user profile view. User profile details may include: Policy inclusion status Priority user group membership Prior alert history Prior case history Analysts will no longer need to navigate away from the alert to gather common contextual information. Existing pseudonymization settings and privacy protections remain in effect. Additional user profile attributes may be introduced in future updates. The feature is surfaced through the Alerts (Preview) experience. No changes are being made to Insider Risk Management policy configuration or alert generation logic. > Action Required / Recommendations: No immediate action is required. Recommended actions: Review the updated user profile experience before general availability. Communicate the new investigator experience to compliance and insider risk analysts. Update any internal investigation procedures or training materials that reference […]

The post Microsoft Purview: Enhanced user profile in Insider Risk Management alerts appeared first on M365 Admin.