# Microsoft Learn Documentation Changes - 2026-03-11

**Run Date:** 2026-03-11
**Run Time:** 2026-03-11T12:59:29.613756+00:00
**Total URLs Checked:** 209

---

## Executive Summary

| Category | Count |
|----------|-------|
| CRITICAL Changes | 6 |
| HIGH Changes | 45 |
| MEDIUM Changes | 130 |
| Redirects | 21 |
| Errors | 1 |

---

## Change Summary (Quick Scan)

| # | URL | Classification | Affected Controls | Action Required |
|---|-----|----------------|-------------------|-----------------|
| 1 | managed-environment-overview | HIGH | 3.7, 2.1, 2.15, 2.2, 1.8 | Review and update |
| 2 | managed-environment-enable | MEDIUM | 2.1, 1.4 | Review optional |
| 3 | managed-environment-sharing-limits | HIGH | 2.1, 1.1 | Update portal-walkthrough |
| 4 | managed-environment-solution-checker | MEDIUM | 2.1 | Review optional |
| 5 | managed-environment-usage-insights | MEDIUM | 3.2, 2.1 | Update portal-walkthrough |
| 6 | environment-groups | MEDIUM | 2.15, 2.2, 1.4 | Review optional |
| 7 | environment-groups-rules | MEDIUM | 2.2 | Review optional |
| 8 | default-environment-routing | MEDIUM | 2.15 | Review optional |
| 9 | create-developer-environment | MEDIUM | 2.15 | Review optional |
| 10 | advanced-connector-policies | MEDIUM | 1.4 | Review optional |
| 11 | wp-data-loss-prevention | MEDIUM | 3.7, 2.7, 2.24, 1.28, 1.14 | Review and update |
| 12 | dlp-connector-classification | MEDIUM | 1.14 | Review optional |
| 13 | ...en-us/connectors/connector-reference/ | HIGH | 1.4 | Review and update |
| 14 | ...m/en-us/connectors/custom-connectors/ | MEDIUM | 2.7 | Review optional |
| 15 | security-overview | MEDIUM | 1.8, 1.26, 1.25 | Review and update |
| 16 | security-roles-privileges | MEDIUM | 1.1, 1.18 | Review optional |
| 17 | create-edit-security-role | MEDIUM | 1.18 | Review optional |
| 18 | database-security | MEDIUM | 2.8, 1.1 | Review optional |
| 19 | field-level-security | MEDIUM | 1.18 | Review optional |
| 20 | manage-high-privileged-admin-roles | MEDIUM | 2.8 | Review optional |
| 21 | ip-firewall | MEDIUM | 1.20 | Review optional |
| 22 | cross-tenant-restrictions | MEDIUM | 2.1 | Update portal-walkthrough |
| 23 | manage-encryption-key | MEDIUM | 1.15 | Review optional |
| 24 | analytics-common-data-service | MEDIUM | 2.9 | Review optional |
| 25 | self-service-analytics | MEDIUM | 2.9 | Review optional |
| 26 | power-platform-inventory | HIGH | None | Review and update |
| 27 | monitor-copilot-studio | MEDIUM | 3.2 | Review optional |
| 28 | monitoring-overview | MEDIUM | None | Review optional |
| 29 | alerts | MEDIUM | None | Review optional |
| 30 | copilot-hub | MEDIUM | 3.8, 3.1 | Review optional |
| 31 | welcome-content | MEDIUM | None | Review optional |
| 32 | identity-access-management | CRITICAL | None | Monitor |
| 33 | manage-copilot-studio-messages-capacity | MEDIUM | None | Review optional |
| 34 | business-continuity-disaster-recovery | MEDIUM | 2.4 | Review optional |
| 35 | backup-restore-environments | MEDIUM | 2.4 | Review optional |
| 36 | regions-overview | MEDIUM | 2.4 | Review optional |
| 37 | capacity-storage | MEDIUM | 3.5 | Review optional |
| 38 | powerapps-powershell | CRITICAL | 1.2 | Monitor |
| 39 | powershell-getting-started | MEDIUM | 3.1 | Review optional |
| 40 | dlp-strategy | MEDIUM | 1.4 | Review optional |
| 41 | environment-strategy | HIGH | 2.4 | Review and update |
| 42 | power-bi-monitor | MEDIUM | 2.6 | Review optional |
| 43 | ...ower-platform/release-plan/2025wave2/ | MEDIUM | 2.10 | Review and update |
| 44 | pipelines | MEDIUM | 2.3 | Review optional |
| 45 | set-up-pipelines | MEDIUM | 2.3 | Update portal-walkthrough |
| 46 | run-pipeline | MEDIUM | 2.3 | Update portal-walkthrough |
| 47 | ...-pipeline-rule-for-environment-groups | MEDIUM | None | Review optional |
| 48 | solution-concepts-alm | MEDIUM | 2.3 | Review optional |
| 49 | admin-deployment-hub | HIGH | 2.1 | Update portal-walkthrough |
| 50 | fundamentals-what-is-copilot-studio | MEDIUM | 3.8, 1.2 | Review optional |
| 51 | security-and-governance | MEDIUM | 1.8, 1.28, 1.1 | Review optional |
| 52 | sensitivity-label-copilot-studio | MEDIUM | None | Review optional |
| 53 | ...ication-fundamentals-publish-channels | HIGH | None | Review and update |
| 54 | admin-share-bots | CRITICAL | None | Monitor |
| 55 | analytics-overview | MEDIUM | 3.2, 3.10, 2.6, 2.9 | Review optional |
| 56 | advanced-connectors | MEDIUM | None | Review optional |
| 57 | knowledge-copilot-studio | MEDIUM | 2.16 | Review optional |
| 58 | nlu-gpt-overview | MEDIUM | 2.12 | Review optional |
| 59 | external-security-provider | MEDIUM | 1.8 | Review optional |
| 60 | advanced-hand-off | MEDIUM | 2.19, 2.12 | Review optional |
| 61 | authoring-test-bot | MEDIUM | 2.5 | Review optional |
| 62 | admin-network-isolation-vnet | MEDIUM | 1.20 | Review optional |
| 63 | whats-new | HIGH | 2.10 | Review and update |
| 64 | manage-copilot-agents-integrated-apps | MEDIUM | 3.8, 3.11, 3.6, 3.1 | Review optional |
| 65 | microsoft-365-copilot-usage | MEDIUM | 3.8 | Review optional |
| 66 | m365-agents-visual-map | MEDIUM | 3.8, 1.1 | Review optional |
| 67 | m365-agents-checklist | MEDIUM | 3.8, 3.5, 3.1, 1.11, 1.1, 1.6, 1.5 | Review optional |
| 68 | m365-agents-blueprint | MEDIUM | 2.1, 2.3, 1.11 | Review optional |
| 69 | .../en-us/microsoft-agent-365/developer/ | MEDIUM | 3.2, 3.6, 2.5, 1.7, 1.2 | Review optional |
| 70 | registration | MEDIUM | 1.2 | Review optional |
| 71 | agent-365-security | MEDIUM | 3.7, 1.8 | Review optional |
| 72 | dlp-create-deploy-policy | MEDIUM | 1.5 | Review optional |
| 73 | dlp-policy-reference | HIGH | None | Review and update |
| 74 | sensitivity-labels | HIGH | 1.3, 1.26, 1.5 | Review and update |
| 75 | sensitivity-labels-teams-groups-sites | HIGH | 1.3 | Review and update |
| 76 | audit-solutions-overview | MEDIUM | 4.5, 1.7, 1.28, 1.27, 1.6 | Review and update |
| 77 | audit-copilot | MEDIUM | None | Review optional |
| 78 | audit-log-retention-policies | MEDIUM | 1.7 | Review optional |
| 79 | ai-microsoft-purview | HIGH | 1.6, 1.5 | Review and update |
| 80 | communication-compliance | MEDIUM | 1.10 | Review optional |
| 81 | communication-compliance-policies | MEDIUM | 1.10 | Review optional |
| 82 | ...tion-compliance-investigate-remediate | MEDIUM | 1.10 | Review optional |
| 83 | insider-risk-management | MEDIUM | 1.12, 1.6 | Review optional |
| 84 | insider-risk-management-policies | HIGH | 1.12 | Review and update |
| 85 | ...management-settings-policy-indicators | HIGH | 1.12 | Review and update |
| 86 | insider-risk-management-activities | CRITICAL | 1.12 | Monitor |
| 87 | import-hr-data | MEDIUM | 1.12 | Review optional |
| 88 | retention | HIGH | 4.3, 2.13, 1.9 | Review and update |
| 89 | ...tion-labels-data-lifecycle-management | HIGH | 4.3, 1.9 | Review and update |
| 90 | retention-policies-sharepoint | HIGH | 4.3 | Review and update |
| 91 | disposition | HIGH | 1.9 | Review and update |
| 92 | retention-regulatory-requirements | HIGH | 4.3, 1.9 | Review and update |
| 93 | records-management | HIGH | 3.3, 2.13 | Review and update |
| 94 | data-lifecycle-management | HIGH | 1.14 | Review and update |
| 95 | ediscovery | MEDIUM | 1.9, 1.19 | Review optional |
| 96 | ediscovery-create-and-manage-cases | MEDIUM | 1.19 | Review optional |
| 97 | ...keyword-queries-and-search-conditions | MEDIUM | 1.19 | Review optional |
| 98 | ediscovery-create-holds | MEDIUM | 1.9, 1.19 | Review optional |
| 99 | endpoint-dlp-learn-about | MEDIUM | 1.17 | Review optional |
| 100 | endpoint-dlp-getting-started | MEDIUM | 1.17 | Review optional |
| 101 | dlp-configure-endpoint-settings | MEDIUM | 1.17 | Review optional |
| 102 | information-barriers | CRITICAL | 1.22 | Monitor |
| 103 | data-classification-activity-explorer | MEDIUM | 1.6 | Review optional |
| 104 | compliance-manager | HIGH | None | Review and update |
| 105 | compliance-manager-assessments | MEDIUM | None | Review optional |
| 106 | overview | HIGH | 1.11 | Review and update |
| 107 | concept-conditional-access-policies | MEDIUM | None | Review optional |
| 108 | concept-conditional-access-cloud-apps | HIGH | 1.23 | Review and update |
| 109 | ...o-conditional-access-session-lifetime | MEDIUM | 1.23 | Review optional |
| 110 | concept-authentication-strengths | MEDIUM | 1.23 | Review optional |
| 111 | custom-overview | MEDIUM | None | Review optional |
| 112 | permissions-reference | MEDIUM | None | Review optional |
| 113 | access-reviews-overview | MEDIUM | 1.3 | Review optional |
| 114 | create-access-review | MEDIUM | 4.2, 2.8 | Review optional |
| 115 | pim-configure | MEDIUM | 2.8, 1.18 | Review optional |
| 116 | ...n.microsoft.com/en-us/entra/agent-id/ | HIGH | 1.11, 1.2, 1.18 | Review and update |
| 117 | ...-entra-agent-identities-for-ai-agents | HIGH | 1.11, 1.18 | Review and update |
| 118 | agent-id-governance-overview | HIGH | 3.6, 1.11 | Review and update |
| 119 | sharepoint-admin-role | MEDIUM | None | Review optional |
| 120 | modern-experience-sharing-permissions | MEDIUM | 1.14 | Review optional |
| 121 | external-sharing-overview | MEDIUM | 4.4 | Review and update |
| 122 | turn-external-sharing-on-or-off | MEDIUM | 4.4, 1.3 | Review and update |
| 123 | restricted-access-control | HIGH | 4.1 | Review and update |
| 124 | restricted-content-discovery | MEDIUM | 4.6, 4.1, 4.7 | Review and update |
| 125 | restricted-sharepoint-search | HIGH | 4.6, 4.1 | Review and update |
| 126 | advanced-management | HIGH | 4.6, 4.1, 4.5, 4.2, 1.3 | Review and update |
| 127 | data-access-governance-reports | MEDIUM | 4.6, 4.4, 4.1, 4.5, 4.2 | Review and update |
| 128 | site-lifecycle-management | HIGH | 4.3, 4.2 | Review and update |
| 129 | request-site-attestations | HIGH | 4.2 | Review and update |
| 130 | insights-on-sharepoint-agents | HIGH | 4.5 | Review and update |
| 131 | control-lists | MEDIUM | 3.4 | Review optional |
| 132 | create-training-site | MEDIUM | 2.14 | Review optional |
| 133 | ...ntent-approval-and-check-out-planning | MEDIUM | 2.16 | Review optional |
| 134 | manage-addins-in-the-admin-center | CRITICAL | 1.2 | Monitor |
| 135 | view-service-health | MEDIUM | None | Review optional |
| 136 | message-center | MEDIUM | 2.10 | Review optional |
| 137 | overview | MEDIUM | 3.9 | Review optional |
| 138 | connect-data-sources | CRITICAL | None | Monitor |
| 139 | monitor-your-data | HIGH | None | Review and update |
| 140 | ...cident-handling-with-automation-rules | HIGH | None | Review and update |
| 141 | investigate-cases | MEDIUM | None | Review optional |
| 142 | overview | MEDIUM | 1.15 | Review optional |
| 143 | private-link-service | MEDIUM | 1.20 | Review optional |
| 144 | private-link-overview | MEDIUM | 1.20 | Review optional |
| 145 | immutable-storage-overview | MEDIUM | 2.13, 1.7 | Review optional |
| 146 | alerts-overview | MEDIUM | 2.9 | Review optional |
| 147 | service-health-overview | MEDIUM | 2.10 | Review optional |
| 148 | what-is-information-protection | MEDIUM | 1.16 | Review optional |
| 149 | concept-responsible-ai | MEDIUM | 2.21, 2.11 | Review optional |
| 150 | overview | MEDIUM | 1.8 | Review optional |
| 151 | overview-cost-management | MEDIUM | None | Review optional |
| 152 | tutorial-acm-create-budgets | MEDIUM | None | Review optional |
| 153 | overview | MEDIUM | 2.5 | Review optional |
| 154 | ai-agent-inventory | MEDIUM | 3.7, 3.1, 1.21 | Review optional |
| 155 | get-started-approvals | MEDIUM | 3.4, 3.10, 3.12, 2.16 | Review optional |
| 156 | run-scheduled-tasks | MEDIUM | 3.6, 3.3 | Review optional |
| 157 | use-powerapps-checker | MEDIUM | 2.5 | Review optional |
| 158 | testing-phase | HIGH | 2.5 | Review and update |
| 159 | application | HIGH | 1.2 | Review and update |
| 160 | accessreviewsv2-overview | MEDIUM | 4.2 | Review optional |
| 161 | overview-viva-learning | MEDIUM | 2.14 | Review optional |
| 162 | incident-response-planning | MEDIUM | None | Review optional |
| 163 | new-dlpcompliancepolicy | MEDIUM | 1.5 | Review optional |
| 164 | ...365-management-activity-api-reference | MEDIUM | 1.7 | Review optional |
| 165 | whats-new | HIGH | None | Review and update |
| 166 | pricing-billing-skus | MEDIUM | 3.5, 2.1 | Review optional |
| 167 | microsoft-365-overview | MEDIUM | None | Review optional |
| 168 | microsoft-purview-service-description | HIGH | None | Review and update |
| 169 | requirements-licensing-subscriptions | MEDIUM | None | Review optional |

---

## CRITICAL: Playbook Updates Required

These changes affect step-by-step procedures and must be addressed.

### 1. Managed Environment Sharing Limits

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-sharing-limits
**Section:** Power Platform Administration
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 2.1: Control 2.1: Managed Environments
  - File: `controls/pillar-2-management/2.1-managed-environments.md`
- Control 1.1: Control 1.1: Restrict Agent Publishing by Authorization
  - File: `controls/pillar-1-security/1.1-restrict-agent-publishing-by-authorization.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.1/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -93,11 +94,6 @@ If
 Only share with individuals (no security groups)
 is selected, you can control the maximum number of viewers with whom an agent can be shared with.
-Important
-This is a production-ready preview feature.
-Production-ready previews are subject to
-supplemental terms of use
-.
 To learn more about
 Editor
 and

```

---

### 2. Usage Insights

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-usage-insights
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 3.2: Control 3.2: Usage Analytics and Activity Monitoring
  - File: `controls/pillar-3-reporting/3.2-usage-analytics-and-activity-monitoring.md`
- Control 2.1: Control 2.1: Managed Environments
  - File: `controls/pillar-2-management/2.1-managed-environments.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.1/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 3. Cross-Tenant Restrictions

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/cross-tenant-restrictions
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 2.1: Control 2.1: Managed Environments
  - File: `controls/pillar-2-management/2.1-managed-environments.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.1/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 4. Set Up Pipelines

**URL:** https://learn.microsoft.com/en-us/power-platform/alm/set-up-pipelines
**Section:** Power Platform ALM
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 2.3: Control 2.3: Change Management and Release Planning
  - File: `controls/pillar-2-management/2.3-change-management-and-release-planning.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.3/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 5. Run Pipelines

**URL:** https://learn.microsoft.com/en-us/power-platform/alm/run-pipeline
**Section:** Power Platform ALM
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 2.3: Control 2.3: Change Management and Release Planning
  - File: `controls/pillar-2-management/2.3-change-management-and-release-planning.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.3/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 6. Admin Deployment Hub

**URL:** https://learn.microsoft.com/en-us/power-platform/alm/admin-deployment-hub
**Section:** Power Platform ALM
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 2.1: Control 2.1: Managed Environments
  - File: `controls/pillar-2-management/2.1-managed-environments.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.3/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -160,7 +161,7 @@ autoclaim policy
 , which is applied automatically. The autoclaim policy ensures users who access apps in Managed Environments automatically receive the necessary licenses. Ensure you have appropriate license capacity in the tenant to utilize autoclaim.
 Will Microsoft enable unmanaged pipelines target environments in February 2026 if the automatic enablement setting is turned off?
-Yes. We also recommend you enable the setting to ensure future compliance.
+Yes. These are different and one doesn't impact the other. The notification you recieved doesn't require opt-in and is specific to environments you've already deployed to. The automatic enablement setting is opt-in and helps you stay compliant going forward.
 Can I restrict access to personal pipelines?
 Yes. Go to the Power Platform admin center >
 Deployments

```

---

## HIGH: Control Review Recommended

### 1. Managed Environments

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-overview
**Section:** Power Platform Administration
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 3.7: Control 3.7: PPAC Security Posture Assessment
  - File: `controls/pillar-3-reporting/3.7-ppac-security-posture-assessment.md`
- Control 2.1: Control 2.1: Managed Environments
  - File: `controls/pillar-2-management/2.1-managed-environments.md`
- Control 2.15: Control 2.15: Environment Routing and Auto-Provisioning
  - File: `controls/pillar-2-management/2.15-environment-routing.md`
- Control 2.2: Control 2.2: Environment Groups and Tier Classification
  - File: `controls/pillar-2-management/2.2-environment-groups-and-tier-classification.md`
- Control 1.8: Control 1.8: Runtime Protection and External Threat Detection
  - File: `controls/pillar-1-security/1.8-runtime-protection-and-external-threat-detection.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -50,7 +51,6 @@ Virtual Network support for Power Platform
 Conditional access on individual apps
 Control which apps are allowed in your environment
-Configure auditing for an environment
 Create and manage masking rules
 Note
 Managed Environments is included as an entitlement with standalone Power Apps, Power Automate, Microsoft Copilot Studio, Power Pages, and Dynamics 365 licenses. Trial licenses can be used to license users in Managed Environments, with the restrictions specific to these types of licenses. To learn more about Managed Environment licensing, see

```

---

### 2. DLP Policies (Power Platform)

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/wp-data-loss-prevention
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 3.7: Control 3.7: PPAC Security Posture Assessment
  - File: `controls/pillar-3-reporting/3.7-ppac-security-posture-assessment.md`
- Control 2.7: Control 2.7: Vendor and Third-Party Risk Management
  - File: `controls/pillar-2-management/2.7-vendor-and-third-party-risk-management.md`
- Control 2.24: Control 2.24: Agent Feature Enablement and Restriction Governance
  - File: `controls/pillar-2-management/2.24-agent-feature-enablement-and-restriction-governance.md`
- Control 1.28: Control 1.28: Policy-Based Agent Publishing Restrictions
  - File: `controls/pillar-1-security/1.28-policy-based-agent-publishing-restrictions.md`
- Control 1.14: Control 1.14: Data Minimization and Agent Scope Control
  - File: `controls/pillar-1-security/1.14-data-minimization-and-agent-scope-control.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.25/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/1.28/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 3. Connector Reference

**URL:** https://learn.microsoft.com/en-us/connectors/connector-reference/
**Section:** Power Platform Administration
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 1.4: Control 1.4: Advanced Connector Policies (ACP)
  - File: `controls/pillar-1-security/1.4-advanced-connector-policies-acp.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -684,8 +685,12 @@ By: Troy Taylor
 CRM Bot
 By: CRM Bot Ltd
+Cronofy MCP
+By: Cronofy Ltd
 Crossbeam
 By: Crossbeam
+CSC Corptax
+By: Corptax
 CSV Converter by Power2Apps
 By: Power2Apps P2A GmbH
 Custom Vision
@@ -702,6 +707,8 @@ By: Dun & Bradstreet
 d.velop
 By: d.velop AG
+D365 Contact Center Admin MCP
+By: Microsoft
 D7Messaging
 By: Signtaper Technologies FZCO
 D7SMS
@@ -1036,6 +1043,8 @@ By: SkyXoft Technologies, Inc.
 EXPOCAD
 By: EXPOCAD
+Ezekia-MCP
+By: Ezekia
 Face API
 By: Microsoft
 FactSet
@@ -1128,6 +1137,8 @@ By: Microsoft
 FTP
 By: Microsoft
+Fulcrum
+By: Spatial Networks, Inc.
 Fun Translations (Independent Publisher)
 By: Troy Taylor
 FuseLagNotam1.1 (Independent Publisher)
@@ -1245,6 +1256,8 @@ HighQ
 By: Thomson Reuters Incorporated
 Highspot
+By: Highspot
+Highspot MCP
 By: Highspot
 HipChat
 By: Microsoft
@@ -1358,6 +1371,8 @@ By: i Love PDF
 iLoveSign
 By: i Love PDF
+iManage AI
+By: iManage Power Platform Connector
 iManage Data Marts
 By: iManage Power Platform Connector
 iManage Insight Plus
@@ -1582,6 +1597,10 @@ By: Loopio
 Loripsum (Independent Publisher)
 By: Troy Taylor, Hitachi Solutions
+LSEG
+By: LSEG Financial Analytics
+LSEG Financial Analytics
+By: LSEG Financial Analytics
 LUIS
 By: Microsoft
 Luware Nimbus
@@ -1650,6 +1669,8 @@ By: Build My Team LLC
 Michael Scott Quotes (Independent Publisher) [DEPRECATED]
 By: Troy Taylor
+Microsoft 365 Admin Center MCP
+By: Microsoft
 Microsoft 365 compliance
 By: Microsoft
 Microsoft 365 message center
@@ -1734,6 +1755,8 @@ By: Troy Taylor
 Mitto
 By: Mitto AG
+Mobile Text Alerts MCP Server
+By: Mobile Text Alerts
 Mobili Stotele
 By: Tele2
 MobilyWS
@@ -1894,6 +1917,8 @@ By: Microsoft
 Office 365 Video [DEPRECATED]

```

---

### 4. Security

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/security/security-overview
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.8: Control 1.8: Runtime Protection and External Threat Detection
  - File: `controls/pillar-1-security/1.8-runtime-protection-and-external-threat-detection.md`
- Control 1.26: Control 1.26: Agent File Upload and File Analysis Restrictions
  - File: `controls/pillar-1-security/1.26-agent-file-upload-and-file-analysis-restrictions.md`
- Control 1.25: Control 1.25: MIME Type Restrictions for File Uploads
  - File: `controls/pillar-1-security/1.25-mime-type-restrictions.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.26/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 5. Power Platform Inventory

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/power-platform-inventory
**Section:** Power Platform Administration
**Classification:** HIGH (Portal references)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -152,6 +153,10 @@ Only published, model-driven apps are captured.
 Model-driven apps in the default environment:
 The default environment comes with three preinstalled model-driven apps: Power Platform Environment Settings, Power Pages Management, and Solution Health Hub. These don't appear in the inventory initially unless they're edited and republished.
+Sovereign cloud
+:
+Power Platform inventory
+isn't currently available in the US Government Community Cloud (GCC, GCC-High, and DoD), 21Vianet (China), or Air Gapped environments.
 Programmatic access
 Power Platform inventory data is available programmatically, supporting advanced scenarios such as automation, reporting, and integration with external tools.
 Power Platform for Admins V2 connector

```

---

### 6. Environment Strategy

**URL:** https://learn.microsoft.com/en-us/power-platform/guidance/adoption/environment-strategy
**Section:** Power Platform Administration
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 2.4: Control 2.4: Business Continuity and Disaster Recovery
  - File: `controls/pillar-2-management/2.4-business-continuity-and-disaster-recovery.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -409,7 +410,7 @@ to help minimize the risk of data exfiltration between tenants.
 Restrict the creation of net-new production environments to admins.
 Limiting environment creation
-is beneficial to maintain control in general, both to prevent unaccounted capacity consumption and to reduce the number of environments to manage. If users have to request environments from central IT, itâs easier to see what people are working on if admins are the gatekeepers.
+is beneficial to maintain control in general, both to prevent unaccounted capacity consumption and to reduce the number of environments to manage. If users have to request environments from central IT, it's easier to see what people are working on if admins are the gatekeepers.
 Secure the default environment
 The default environment has a role in supporting Microsoft 365 productivity customizations. As part of the recommended environment strategy, though, it's best to minimize its use as much as possible. Instead, makers should build in their own isolated environments. Although you can't block access to the default environment, you can minimize what can be done in it.
 First, use environment routing to direct makers to their own workspace to build low-code assets.
@@ -631,7 +632,7 @@ Related information
 Environment groups
 Environment routing
-Enterprise security with Power Platform (white paper)
+Security overview and strategy
 Low-code security and governance
 Solution concepts in ALM
 Feedback

```

---

### 7. Release Plans

**URL:** https://learn.microsoft.com/en-us/power-platform/release-plan/2025wave2/
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 2.10: Control 2.10: Patch Management and System Updates
  - File: `controls/pillar-2-management/2.10-patch-management-and-system-updates.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/2.7/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 8. Agent Publishing

**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/publication-fundamentals-publish-channels
**Section:** Copilot Studio
**Classification:** HIGH (Feature availability)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,7 +27,7 @@ Key concepts - Publish and deploy your agent
 Feedback
 Summarize this article for me
-With Copilot Studio, you can publish agents to engage with your customers on multiple platforms or channels, such as live websites, mobile apps, Microsoft 365 Copilot or messaging platforms like Teams and Facebook.
+With Copilot Studio, you can publish agents to engage with your customers on multiple platforms or channels. For example, live websites, mobile apps, Microsoft 365 Copilot, and messaging platforms like Teams and Facebook.
 Each time you update your agent, you can publish it again from within Copilot Studio. Publishing your agent applies to all the channels associated with your agent.
 Web app
 Teams
@@ -54,7 +55,7 @@ If you select
 No authentication
 , your agent can't use
-Agent actions
+tools
 with
 user credentials
 .
@@ -66,9 +67,9 @@ Publish
 , and then confirm. Publishing can take a few minutes.
 Test your agent
-Test your agent after you publish. You can
+Test your agent after you publish it. You can
 make the agent available to users in Teams and Microsoft 365 Copilot
-with the installation link or from various places in the Microsoft Teams app store.
+by using the installation link or from various places in the Microsoft Teams app store.
 You can share your agent later by selecting
 Make the agent available to others
 from the
@@ -99,8 +100,8 @@ On the top menu bar, select
 Channels
 .
-Select the desired channel from the list of available channels.
-The connection steps are different for each channel. For more information, see the article for the desired channels, in the following list:
+Select the channel you want from the list of available channels.
+Each channel has different connection steps. Learn more:
 Teams and Microsoft 365 Copilot
 SharePoint
 WhatsApp
@@ -120,7 +121,7 @@ Direct Line Speech
 Email
 C
```

---

### 9. What's New

**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/whats-new
**Section:** Copilot Studio
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 2.10: Control 2.10: Patch Management and System Updates
  - File: `controls/pillar-2-management/2.10-patch-management-and-system-updates.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/2.7/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -39,6 +40,53 @@ Releases are rolled out over several days. New or updated functionality might not appear immediately.
 Notable changes
 The following sections list features released in the past months, with links to related information.
+March 2026
+(Preview) Use
+Work IQ
+tools to connect Microsoft 365 Copilot and your agents to the Work IQ service, enabling access to real-time work insights and context from Microsoft 365 files, emails, meetings, chats, and more.
+February 2026
+Improved agent responses for ticketâbased Microsoft 365 Graph
+connectors
+. Agents more accurately retrieve
+ServiceNow
+tickets and
+Azure DevOps
+work items and generate clear, actionable summaries, which improves workflow reliability, and time to value.
+Select Claude Sonnet 4.5 (beta) for
+Computer Use
+agents. This model improves nuanced decisionâmaking for complex tasks, increasing reliability, and success rates for advanced uses.
+Enhancements to the
+prompt builder
+include:
+Configure
+content moderation sensitivity per prompt
+to control how hate/fairness, sexual, violence, and selfâharm content is filteredâsupporting regulated and documentâprocessing scenarios with low or high sensitivity settings for managed models.
+Optimize
+prompts
+with new Claude models by choosing Claude Opus 4.6 or Claude Sonnet 4.5, enabling fineâgrained control over reasoning depth, quality, latency, and cost per prompt.
+Edit prompt instructions and settings inline
+in agent tool details, bringing model selection, inputs, knowledge, and testing into a single, streamlined authoring experience.
+January 2026
+(Preview) New enhancements to agent evaluations:
+Provide realâtime
+thumbsâup/down feedback
+on evaluation results to verify grading performance and drive ongoing improvements to evaluation reliability.
+View your agent's sequence of inputs, decis
```

---

### 10. DLP Policy Reference

**URL:** https://learn.microsoft.com/en-us/purview/dlp-policy-reference
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -49,7 +50,7 @@ - This article presents some common policy intent scenarios that you map to configuration options, then it walks you through configuring those options.
 Learn about investigating data loss prevention alerts
 - This article introduces you to the lifecycle of alerts from creation, through final remediation and policy tuning. It also introduces you to the tools you use to investigate alerts.
-DLP platform considersations
+DLP platform considerations
 Also, you need to be aware of these constraints of the platform:
 Maximum number of MIP + MIG policies in a tenant: 10,000
 Maximum size of a DLP policy (100 KB)
@@ -856,7 +857,7 @@ Yes
 - distribution groups assigned or dynamic
 - security groups
-- non-email enabled security groups assigned or dynamic)
+- non email enabled security groups assigned or dynamic)
 - Microsoft 365 groups assigned or dynamic
 data-in-motion
 No
@@ -870,7 +871,7 @@ Yes
 - Distribution groups
 - Security groups
-- Non-email enabled security groups
+- Non email enabled security groups
 - Microsoft 365 groups (Group members only, not the group as an entity)
 data-at-rest
 data-in-use
@@ -895,7 +896,7 @@ Yes
 - Distribution groups
 - Security groups
-- Non-email enabled security groups
+- Non email enabled security groups
 - Microsoft 365 groups (Group members only, not the group as an entity)
 data-in-use
 data-in-motion
@@ -1116,9 +1117,18 @@ SharePoint location scoping
 When scoping a policy for SharePoint locations, you can limit the scope of a policy to specific SharePoint sites. DLP supports scoping policies to up to 100 sites.
 Device scoping
-In preview, DLP policies for endpoints are scoped by users, and devices. For an endpoint policy to be applied, both the user and the device must be in the policy scope. This means that if a user is in the policy scope, but the device isn't, the policy w
```

---

### 11. Sensitivity Labels

**URL:** https://learn.microsoft.com/en-us/purview/sensitivity-labels
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`
- Control 1.26: Control 1.26: Agent File Upload and File Analysis Restrictions
  - File: `controls/pillar-1-security/1.26-agent-file-upload-and-file-analysis-restrictions.md`
- Control 1.5: Control 1.5: Data Loss Prevention (DLP) and Sensitivity Labels
  - File: `controls/pillar-1-security/1.5-data-loss-prevention-dlp-and-sensitivity-labels.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.26/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,8 +27,7 @@ Learn about sensitivity labels
 Feedback
 Summarize this article for me
-Microsoft 365 licensing guidance for security & compliance
-.
+Microsoft Purview service description
 Note
 If you're looking for information about sensitivity labels that you see and can select in your Office apps, check their documentation. For example,
 Apply sensitivity labels to your files
@@ -251,6 +251,10 @@ For detailed information about what happens when you delete a sensitivity label and how this is different from removing it from a sensitivity label policy, see
 Removing and deleting labels
 .
+Sensitivity label limitations per tenant
+A single tenant can have a high number of sensitivity labels (1,000+), with one exception: If the label applies encryption that specifies the users and permissions, there's a maximum of 500 labels per tenant supported with this configuration. However, as a best practice to lower admin overheads and reduce complexity for your users, try to keep the number of labels to a minimum.
+Tip
+Real-world deployments have proved effectiveness to be noticeably reduced when users have more than five main labels or more than five sublabels per main label. You might also find that some applications can't display all your labels when too many are published to the same user.
 What label policies can do
 After you create your sensitivity labels, you need to publish them to make them available to people and services in your organization. The sensitivity labels can then be applied to Office documents and emails, and other items that support sensitivity labels.
 Unlike retention labels, which are published to locations such as all Exchange mailboxes, sensitivity labels are published to users or groups. Apps that support sensitivity labels can then display them to those users and groups as labels that they can apply.
@@ -295
```

---

### 12. Sensitivity Labels for Sites

**URL:** https://learn.microsoft.com/en-us/purview/sensitivity-labels-teams-groups-sites
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,8 +27,7 @@ Use sensitivity labels to protect content in Microsoft Teams, Microsoft 365 groups, and SharePoint sites
 Feedback
 Summarize this article for me
-Microsoft 365 licensing guidance for security & compliance
-.
+Microsoft Purview service description
 In addition to using
 sensitivity labels
 to protect documents and emails, you can also use sensitivity labels to protect content in the following containers: Microsoft Teams sites, Microsoft 365 groups (
@@ -473,7 +473,7 @@ label to a SharePoint site, and somebody uploads to this site a document labeled
 Confidential
 . Because a sensitivity label with a higher priority identifies content that is more sensitivity than content that has a lower priority order, this situation could be a security concern.
-Although the action isn't blocked, it is audited and by default, automatically generates an email to the person who uploaded the document and the site administrator. As a result, both the user and administrators can identify documents that have this misalignment of label priority and take action if needed. For example, delete or move the uploaded document from the site.
+Although the action isn't blocked, it automatically generates an email that's sent to the person who uploaded the document, and also sent to site owners and site admins (maximum of 100 in total). As a result, both the user and these administrators can identify documents that have this misalignment of label priority and take action if needed. For example, delete or move the uploaded document from the site.
 Important
 If the file is in the Preservation Hold library, it's not supported to interact with files in this location. Files can automatically move into the Preservation Hold library as a result of compliance requirements to automatically retain files that users delete or are cloud attachments. For more 
```

---

### 13. Audit Logging

**URL:** https://learn.microsoft.com/en-us/purview/audit-solutions-overview
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 4.5: Control 4.5: SharePoint Security and Compliance Monitoring
  - File: `controls/pillar-4-sharepoint/4.5-sharepoint-security-and-compliance-monitoring.md`
- Control 1.7: Control 1.7: Comprehensive Audit Logging and Compliance
  - File: `controls/pillar-1-security/1.7-comprehensive-audit-logging-and-compliance.md`
- Control 1.28: Control 1.28: Policy-Based Agent Publishing Restrictions
  - File: `controls/pillar-1-security/1.28-policy-based-agent-publishing-restrictions.md`
- Control 1.27: Control 1.27: AI Agent Content Moderation Enforcement
  - File: `controls/pillar-1-security/1.27-ai-agent-content-moderation-enforcement.md`
- Control 1.6: Control 1.6: Microsoft Purview DSPM for AI
  - File: `controls/pillar-1-security/1.6-microsoft-purview-dspm-for-ai.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.27/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/4.5/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 14. DSPM for AI

**URL:** https://learn.microsoft.com/en-us/purview/ai-microsoft-purview
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 1.6: Control 1.6: Microsoft Purview DSPM for AI
  - File: `controls/pillar-1-security/1.6-microsoft-purview-dspm-for-ai.md`
- Control 1.5: Control 1.5: Data Loss Prevention (DLP) and Sensitivity Labels
  - File: `controls/pillar-1-security/1.5-data-loss-prevention-dlp-and-sensitivity-labels.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,7 +27,7 @@ Microsoft Purview data security and compliance protections for generative AI apps
 Feedback
 Summarize this article for me
-Microsoft 365 licensing guidance for security & compliance
+Microsoft Purview service description
 Use Microsoft Purview to mitigate and manage the risks associated with AI usage, and implement corresponding protection and governance controls.
 The following sections on this page provide an overview of Data Security Posture Management for AI and the Microsoft Purview capabilities that provide additional data security and compliance controls to accelerate your organization's adoption of Copilots and agents, and other generative AI apps.
 In some Microsoft Purview solutions, you might see the supported AI apps grouped by the following category names:

```

---

### 15. Create Insider Risk Policies

**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management-policies
**Section:** Microsoft Purview
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.12: Control 1.12: Insider Risk Detection and Response
  - File: `controls/pillar-1-security/1.12-insider-risk-detection-and-response.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -84,8 +85,10 @@ : Detects activities involving your organization's most valuable assets. Loss of these assets could result in legal liability, financial loss, or reputational damage.â
 Data leaks
 : Detect potential data leaks from all users in your organization, which can range from accidental oversharing of sensitive info to data theft with malicious intent. â
-Data theft by departing users
-: Detects potential data theft by users near their resignation or termination date or based on their account being deleted from Microsoft Entra ID.â
+Data theft from Microsoft 365 apps by users leaving your organization
+: Detects potential data theft from Microsoft 365 cloud apps by users leaving your organization or whose account was deleted from Microsoft Entra ID.
+Data theft from non-Microsoft 365 apps by users leaving your organization
+: (preview) Detects potential data theft from non-Microsoft 365 cloud apps, including Microsoft Fabric, by users leaving your organization or whose account was deleted from Microsoft Entra ID.
 Email exfiltration
 : Detects when users email sensitive assets outside your organization. For example, users emailing sensitive assets to their personal email address.â
 To get started, go to

```

---

### 16. Insider Risk Indicators

**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management-settings-policy-indicators
**Section:** Microsoft Purview
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.12: Control 1.12: Insider Risk Detection and Response
  - File: `controls/pillar-1-security/1.12-insider-risk-detection-and-response.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -144,7 +145,11 @@ To use this indicator, enable
 pay-as-you-go billing
 in your organization.
-These indicators include policy indicators for Microsoft Power BI that you can use to detect techniques used to figure out the environment (such as viewing Power BI reports and dashboards) and techniques used to gather data of interest (such as downloading Power BI reports).
+These indicators include policy indicators for Microsoft Fabric workloads such as Power BI and Lakehouse (preview). They help you detect techniques used to:
+Figure out the environment (for example, viewing Power BI reports and dashboards).
+Gather data of interest (for example, downloading Power BI reports).
+Obfuscate the data gathered or change protection (for example, downgrading or removing sensitivity labels of Power BI or Lakehouse assets).
+Exfiltrate the data (for example, sharing Lakehouse data with people outside the organization).
 Generative AI apps indicators (preview)
 These indicators include policy indicators for numerous generative AI applications. Use these indicators in policies to analyze interactions (prompts and responses) entered into these applications and help detect inappropriate or risky interactions or sharing of confidential information. These indicators include the following generative AI applications:
 Microsoft Copilot experiences

```

---

### 17. Data Retention

**URL:** https://learn.microsoft.com/en-us/purview/retention
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 4.3: Control 4.3: Site and Document Retention Management
  - File: `controls/pillar-4-sharepoint/4.3-site-and-document-retention-management.md`
- Control 2.13: Control 2.13: Documentation and Record Keeping
  - File: `controls/pillar-2-management/2.13-documentation-and-record-keeping.md`
- Control 1.9: Control 1.9: Data Retention and Deletion Policies
  - File: `controls/pillar-1-security/1.9-data-retention-and-deletion-policies.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.3/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,8 +27,7 @@ Learn about retention policies and retention labels
 Feedback
 Summarize this article for me
-Microsoft 365 licensing guidance for security & compliance
-.
+Microsoft Purview service description
 Note
 If you're seeing messages about retention policies in Teams or have questions about retention labels in your apps, contact your IT department for information about how they have been configured for you. In the meantime, you might find the following articles helpful:
 Teams messages about retention policies
@@ -636,16 +636,22 @@ The longest retention period wins.
 If content is subject to multiple retention settings that retain content for different periods of time, the content is retained until the end of the longest retention period for the item.
 Note
-It's possible for a retention period of five years in a retention policy or label wins over a retention period of seven years in a retention policy or label, because the 5-year period is configured to start based on when the file is last modified, and the 7-year period is configured to start from when the file is created.
+It's possible for a retention period of five years in a retention policy or label wins over a retention period of seven years in a retention policy or label, because the 5-year period is configured to start based on when the file is last modified, and the seven year period is configured to start from when the file is created.
 Example for this second principle
 : Documents in the Marketing SharePoint site are subject to two retention policies. The first retention policy is configured for all SharePoint sites to retain items for five years after they are created. The second retention policy is configured for specific SharePoint sites to retain items for 10 years after they are created.
 Documents in this Marketing SharePoint site are retained for 10 y
```

---

### 18. Retention Labels

**URL:** https://learn.microsoft.com/en-us/purview/create-retention-labels-data-lifecycle-management
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 4.3: Control 4.3: Site and Document Retention Management
  - File: `controls/pillar-4-sharepoint/4.3-site-and-document-retention-management.md`
- Control 1.9: Control 1.9: Data Retention and Deletion Policies
  - File: `controls/pillar-1-security/1.9-data-retention-and-deletion-policies.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,8 +27,7 @@ Create retention labels for exceptions to your retention policies
 Feedback
 Summarize this article for me
-Microsoft 365 licensing guidance for security & compliance
-.
+Microsoft Purview service description
 As part of your data governance strategy to retain what you need and delete what you don't, you might need to create a few retention labels for items that need exceptions to your retention policies.
 Whereas retention policies automatically apply to all items at the container level (such as SharePoint sites, user mailboxes, and so on), retention labels apply to individual items, such as a SharePoint document or an email message.
 Make sure you understand the

```

---

### 19. Retention for SharePoint

**URL:** https://learn.microsoft.com/en-us/purview/retention-policies-sharepoint
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 4.3: Control 4.3: Site and Document Retention Management
  - File: `controls/pillar-4-sharepoint/4.3-site-and-document-retention-management.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.3/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,8 +27,7 @@ Learn about retention for SharePoint and OneDrive
 Feedback
 Summarize this article for me
-Microsoft 365 licensing guidance for security & compliance
-.
+Microsoft Purview service description
 The information in this article supplements
 Learn about retention
 because it has information that's specific to SharePoint and OneDrive.

```

---

### 20. Disposition

**URL:** https://learn.microsoft.com/en-us/purview/disposition
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 1.9: Control 1.9: Data Retention and Deletion Policies
  - File: `controls/pillar-1-security/1.9-data-retention-and-deletion-policies.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.3/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,8 +27,7 @@ Disposition of content
 Feedback
 Summarize this article for me
-Microsoft 365 licensing guidance for security & compliance
-.
+Microsoft Purview service description
 Use the
 Disposition
 page from

```

---

### 21. SEC 17a-4 / Preservation Lock

**URL:** https://learn.microsoft.com/en-us/purview/retention-regulatory-requirements
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 4.3: Control 4.3: Site and Document Retention Management
  - File: `controls/pillar-4-sharepoint/4.3-site-and-document-retention-management.md`
- Control 1.9: Control 1.9: Data Retention and Deletion Policies
  - File: `controls/pillar-1-security/1.9-data-retention-and-deletion-policies.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.3/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,8 +27,7 @@ Regulatory requirements for data lifecycle management and records management
 Feedback
 Summarize this article for me
-Microsoft 365 licensing guidance for security & compliance
-.
+Microsoft Purview service description
 Use the resources on this page to help you meet specific regulatory requirements for data lifecycle management and records management in Microsoft 365. Each section of this document focuses on one or more related regulations and includes any existing guidance or third-party assessment of how to configure Microsoft 365 to help with the requirements outlined.
 These resources are available to download from the
 Data Protection Resources, FAQ, and White Papers

```

---

### 22. Records Management

**URL:** https://learn.microsoft.com/en-us/purview/records-management
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 3.3: Control 3.3: Compliance and Regulatory Reporting
  - File: `controls/pillar-3-reporting/3.3-compliance-and-regulatory-reporting.md`
- Control 2.13: Control 2.13: Documentation and Record Keeping
  - File: `controls/pillar-2-management/2.13-documentation-and-record-keeping.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,7 +27,7 @@ Learn about records management
 Feedback
 Summarize this article for me
-Microsoft 365 licensing guidance for security & compliance
+Microsoft Purview service description
 A records management system, also known as records and information management, is a solution for organizations to manage regulatory, legal, and business-critical records. Records management for Microsoft Purview helps you achieve your organization's legal obligations, provides the ability to demonstrate compliance with regulations, and increases efficiency with regular disposition of items that are no longer required to be retained, no longer of value, or no longer required for business purposes.
 Use the following capabilities to support your records management solution for Microsoft 365 data:
 Label items as a record

```

---

### 23. Data Lifecycle Management

**URL:** https://learn.microsoft.com/en-us/purview/data-lifecycle-management
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 1.14: Control 1.14: Data Minimization and Agent Scope Control
  - File: `controls/pillar-1-security/1.14-data-minimization-and-agent-scope-control.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,8 +27,7 @@ Learn about data lifecycle management
 Feedback
 Summarize this article for me
-Microsoft 365 licensing guidance for security & compliance
-.
+Microsoft Purview service description
 Microsoft Purview Data Lifecycle Management (formerly Microsoft Information Governance) provides you with tools and capabilities to retain the content that you need to keep, and delete the content that you don't.
 Retaining and deleting content is often needed for compliance and regulatory requirement, but deleting content that no longer has business value also helps you manage risk and liability. For example, it reduces your attack surface.
 Microsoft 365 features

```

---

### 24. Compliance Manager

**URL:** https://learn.microsoft.com/purview/compliance-manager
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -30,9 +31,9 @@ Microsoft Purview Compliance Manager is a solution that helps you automatically assess and manage compliance across your multicloud environment. Compliance Manager can help you throughout your compliance journey, from taking inventory of your data protection risks to managing the complexities of implementing controls, staying current with regulations and certifications, and reporting to auditors.
 Watch the video below to learn how Compliance Manager can help simplify how your organization manages compliance:
 Compliance Manager helps simplify compliance and reduce risk by providing:
-Pre-built assessments for common industry and regional standards and regulations, or custom assessments to meet your unique compliance needs (available assessments depend on your licensing agreement;
+Pre-built assessments for common industry and regional standards and regulations, or custom assessments to meet your unique compliance needs. Available assessments depend on your licensing agreement;
 learn more
-).
+.
 Workflow capabilities to help you efficiently complete your risk assessments through a single tool.
 Detailed step-by-step guidance on suggested improvement actions to help you comply with the standards and regulations that are most relevant for your organization. For actions that are managed by Microsoft, youâll see implementation details and audit results.
 A risk-based compliance score to help you understand your compliance posture by measuring your progress in completing improvement actions.

```

---

### 25. Conditional Access

**URL:** https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview
**Section:** Microsoft Entra ID
**Classification:** HIGH (UI element names)

**Affected Controls:**
- Control 1.11: Control 1.11: Conditional Access and Phishing-Resistant MFA
  - File: `controls/pillar-1-security/1.11-conditional-access-and-phishing-resistant-mfa.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -97,17 +98,17 @@ .
 The
 Overview
-page shows a summary of policy state, agents, users, devices, and applications, along with general and security alerts with suggestions.
+page shows a summary of recent activity that relates to Conditional Access policies. Here you can see how many policies are enabled vs report-only, agent and user activity, applications, devices, and general security alerts with suggestions.
 The
 Coverage
-page shows a summary of applications with and without Conditional Access policy coverage over the past seven days.
-On the
+tab shows a summary of applications with and without Conditional Access policy coverage over the past seven days.
+The
 Policies
-page, admins can filter Conditional Access policies based on items like the actor, target resource, condition, control applied, state, or date. This filtering lets admins quickly find specific policies based on their configuration.
-Conditional Access optimization agent
+page lists all of the polices in your tenant, including report-only policies and policies created by the Conditional Access Optimization Agent (if applicable). Options to filter, view "What if" scenarios, and create new policies are available here.
+Conditional Access Optimization Agent
 The
-Conditional Access optimization agent
-(preview) with Microsoft Security Copilot suggests new policies and changes to existing ones based on Zero Trust principles and Microsoft best practices. With one click, apply the suggestion to automatically update or create a Conditional Access policy. The agent needs at least the Microsoft Entra ID P1 license and
+Conditional Access Optimization Agent
+with Microsoft Security Copilot suggests new policies and changes to existing ones based on Zero Trust principles and Microsoft best practices. With one click, apply the suggestion to automatically update or create a
```

---

### 26. Authentication Contexts

**URL:** https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-cloud-apps#authentication-context
**Section:** Microsoft Entra ID
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 1.23: Control 1.23: Step-Up Authentication for AI Agent Operations
  - File: `controls/pillar-1-security/1.23-step-up-authentication-for-agent-operations.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -100,16 +101,17 @@ .
 For Azure Government, you should target the Azure Government Cloud Management API application.
 Microsoft Admin Portals
-When a Conditional Access policy targets the Microsoft Admin Portals cloud app, the policy is enforced for tokens issued to application IDs of the following Microsoft administrative portals:
-Azure portal
-Exchange admin center
-Microsoft 365 admin center
-Microsoft 365 Defender portal
-Microsoft Entra admin center
-Microsoft Intune admin center
-Microsoft Purview portal
-Microsoft Teams admin center
-We're continually adding more administrative portals to the list.
+When a Conditional Access policy targets the Microsoft Admin Portals cloud app, the policy is enforced for tokens issued to specific underlying resource application IDs associated with Microsoft admin portals. The app grouping doesn't include the backend services that those portals might call or depend on. To identify service dependencies of the admin portals, use the
+Conditional Access audience reporting in sign-in logs
+The following applications comprise the Microsoft Admin Portals:
+Exchange Admin Center app ID: 497effe9-df71-4043-a8bb-14cf78c4b63b
+Azure portal app ID: c44b4083-3bb0-49c1-b47d-974e53cbdf3c
+Microsoft Office 365 Portal app ID: 00000006-0000-0ff1-ce00-000000000000
+Microsoft 365 Security And Compliance Center (Protection Center) app ID: 80ccca67-54bd-44ab-8625-4b79c4dc7775
+The Admin Portal grouping is primarily intended for include scenarios,for a simplified way to target one or more admin portals with Conditional Access policies (for example, enforcing MFA). This grouping is leveraged in our
+MFA for admins Microsoft-managed policy
+to streamline policy creation.
+This option is not intended to function as a bulk exclusion mechanism for all backend services associated with the underlying application IDs.
 N
```

---

### 27. Agent ID Overview

**URL:** https://learn.microsoft.com/en-us/entra/agent-id/
**Section:** Microsoft Entra Agent ID
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.11: Control 1.11: Conditional Access and Phishing-Resistant MFA
  - File: `controls/pillar-1-security/1.11-conditional-access-and-phishing-resistant-mfa.md`
- Control 1.2: Control 1.2: Agent Registry and Integrated Apps Management
  - File: `controls/pillar-1-security/1.2-agent-registry-and-integrated-apps-management.md`
- Control 1.18: Control 1.18: Application-Level Authorization and Role-Based Access Control (RBAC)
  - File: `controls/pillar-1-security/1.18-application-level-authorization-and-role-based-access-control-rbac.md`

**What Changed:**
```diff
--- +++ @@ -10,10 +10,10 @@ Create an agent identity
 Microsoft Entra Agent ID
 The comprehensive solution for protecting and governing AI agents in enterprise environments. Includes advanced security controls, and governance policies for agent identities and access management.
-Register and manage agents
+Manage agents
 What is Microsoft Entra Agent ID?
-What is the Agent Registry?
-Organize agents with collections
+Owners, sponsors, and managers
+Manage agents in the end user experience
 Agent governance and lifecycles
 Identity Governance for agents
 Agent identity lifecycle management
@@ -22,19 +22,19 @@ Identity Protection for agents
 Network controls for agents
 Microsoft agent identity platform for developers
-The platform that enables you to create, register, and manage agent identities. Includes the Agent Registry for discovering and organizing agents across your organization.
-Microsoft agent identity platform for developers
+The platform that enables you to create and manage agent identities.
+Learn about key concepts
 What is an agent identity blueprint?
+What is an agent identity?
+What are agent users?
+Build with the Microsoft agent identity platform
 Create an agent identity blueprint
-What is an agent identity?
 Create an agent identity
 Configure Microsoft Entra SDK for agent identities
-Agent Registry
-What is the Agent Registry?
-Register agents with the Agent Registry
-Agent Registry collections
-Agent Registry metadata and discoverability
-Agent communications
+Authenticate and call APIs
+Request tokens for autonomous agents
+Call Microsoft Graph from an agent
+Grant app permissions to an autonomous agent
 Learn more
 Explore SDK references, API documentation, and code samples to build and manage agent identities.
 Technical references

```

---

### 28. Agent Identities for AI Agents

**URL:** https://learn.microsoft.com/en-us/entra/agent-id/identity-professional/microsoft-entra-agent-identities-for-ai-agents
**Section:** Microsoft Entra Agent ID
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.11: Control 1.11: Conditional Access and Phishing-Resistant MFA
  - File: `controls/pillar-1-security/1.11-conditional-access-and-phishing-resistant-mfa.md`
- Control 1.18: Control 1.18: Application-Level Authorization and Role-Based Access Control (RBAC)
  - File: `controls/pillar-1-security/1.18-application-level-authorization-and-role-based-access-control-rbac.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,10 +27,6 @@ What is Microsoft Entra Agent ID?
 Feedback
 Summarize this article for me
-Important
-Microsoft Entra Agent ID
-is currently in PREVIEW.
-This information relates to a prerelease product that may be substantially modified before it's released. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.
 As assistive and autonomous agents become more prevalent in organizations, new security, governance, and compliance challenges must be addressed. Microsoft Entra Agent ID extends the comprehensive security capabilities of Microsoft Entra to agents, enabling organizations to build, discover, govern, and protect agent identities.
 Security for AI
 spans multiple Microsoft Entra features and is integrated through Microsoft Entra Agent ID and the
@@ -37,27 +34,27 @@ .
 This article explains how Microsoft Entra Agent ID extends security capabilities to agents through conditional access policies, identity protection, identity governance, network-level controls, and the agent identity platform.
 Important
-Microsoft Entra Agent ID is part of Microsoft Agent 365, available now in Frontier, the Microsoft early access program for the latest AI innovations. For more information, see
 Microsoft Entra Agent ID
-.
-Conditional access for agents
-Conditional access enables organizations to define and enforce adaptive policies that evaluate agent context and risk before granting access to resources. It's achieved by:
+is currently in PREVIEW.
+This information relates to a prerelease product that may be substantially modified before it's released. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.
+Conditional Access for agents
+Conditional Access enables organizations to define and enforce adaptive policies that evaluate agent context and risk
```

---

### 29. Governing Agent Identities

**URL:** https://learn.microsoft.com/en-us/entra/id-governance/agent-id-governance-overview
**Section:** Microsoft Entra Agent ID
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 3.6: Control 3.6: Orphaned Agent Detection and Remediation
  - File: `controls/pillar-3-reporting/3.6-orphaned-agent-detection-and-remediation.md`
- Control 1.11: Control 1.11: Conditional Access and Phishing-Resistant MFA
  - File: `controls/pillar-1-security/1.11-conditional-access-and-phishing-resistant-mfa.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,20 +27,38 @@ Governing Agent Identities (Preview)
 Feedback
 Summarize this article for me
-Microsoft Entra allows you to ensure that the right people have the right access to the right apps and services at the right time. With the addition of the Microsoft agent identity platform, managing agents in the same way is just as important in the governance lifecycle of your organization. The Microsoft agent identity platform introduces the concept of Agent Identities (IDs). Agent identities are accounts within Microsoft Entra ID that provide unique identification and authentication capabilities for AI agents.
+Microsoft Entra allows you to ensure that the right people have the right access to the right apps and services at the right time. With the addition of the Microsoft agent identity platform, managing the access rights of agents in the same way is just as important in the governance lifecycle of your organization's identities. The Microsoft agent identity platform introduces the concept of Agent Identities (IDs). Agent identities are accounts within Microsoft Entra ID that provide unique identification and authentication capabilities for AI agents.
 This allows agent identities to be governed with Microsoft Entra features in the same style as you would govern human identities. With Agent identities, you can govern and manage the identity and access lifecycle of agents, ensuring the agents have a responsible person providing oversight throughout the agent lifecycle and agent's access does not persist longer than it is needed. This article provides an overview of how Microsoft Entra can be utilized to govern agent identities.
 License requirements
-Important
-Microsoft Entra Agent ID is part of Microsoft Agent 365, available now in Frontier, the Microsoft early access program for the latest AI innovations. For more information, s
```

---

### 30. External Sharing

**URL:** https://learn.microsoft.com/en-us/sharepoint/external-sharing-overview
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 4.4: Control 4.4: Guest and External User Access Controls
  - File: `controls/pillar-4-sharepoint/4.4-guest-and-external-user-access-controls.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.4/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 31. Manage Sharing Settings

**URL:** https://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 4.4: Control 4.4: Guest and External User Access Controls
  - File: `controls/pillar-4-sharepoint/4.4-guest-and-external-user-access-controls.md`
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.4/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 32. Restricted Access Control

**URL:** https://learn.microsoft.com/en-us/sharepoint/restricted-access-control
**Section:** SharePoint Administration
**Classification:** HIGH (Policy language)

**Affected Controls:**
- Control 4.1: Control 4.1: SharePoint Information Access Governance (IAG) / Restricted Content Discovery
  - File: `controls/pillar-4-sharepoint/4.1-sharepoint-information-access-governance-iag-restricted-content-discovery.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -54,8 +55,8 @@ by purchasing a standalone SharePoint Advanced Management license
 .
 Enable site-level access restriction for your organization
-You must enable site-level access restriction for your organization before you can configure it for individual sites.
-To enable site-level access restriction for your organization in SharePoint admin center:
+You must enable site-level access restriction for your organization before you can configure it for individual sites. You can also delegate site access restriction control to all the site admins of your organization.
+To enable site-level access restriction for your organization in the SharePoint admin center, follow these steps:
 Expand
 Policies
 and select
@@ -72,6 +73,14 @@ To enable site-level access restriction for your organization using PowerShell, run the following command:
 Set-SPOTenant -EnableRestrictedAccessControl $true
 It might take up to one hour for the command to take effect.
+Delegate Management of Restricted Access Control to Site Admins
+As a SharePoint administrator, you can also delegate management of Restricted Access Control to site admin. Upon managing the policy, the site admins would need to provide appropriate justification on why the policy is being updated.
+By default, the delegation is turned off. If you decide to enable it, run the following command:
+Set-SPOTenant -DelegateRestrictedAccessControlManagement $true
+Once the Restricted Access Control is delegated to all the site admins, they can manage the policy.
+Check status of Delegate management of Restricted Access Control to site admins
+To check the delegation status, run the following command:
+Get-SPOTenant | Select-Object DelegateRestrictedAccessControlManagement
 Note
 For Microsoft 365 Multi-Geo users, run this command separately for each desired geo-location.
 Restrict access to all Shar
```

---

### 33. Restricted Content Discovery

**URL:** https://learn.microsoft.com/en-us/sharepoint/restricted-content-discovery
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 4.6: Control 4.6: Grounding Scope Governance
  - File: `controls/pillar-4-sharepoint/4.6-grounding-scope-governance.md`
- Control 4.1: Control 4.1: SharePoint Information Access Governance (IAG) / Restricted Content Discovery
  - File: `controls/pillar-4-sharepoint/4.1-sharepoint-information-access-governance-iag-restricted-content-discovery.md`
- Control 4.7: Control 4.7: Microsoft 365 Copilot Data Governance
  - File: `controls/pillar-4-sharepoint/4.7-microsoft-365-copilot-data-governance.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.6/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/4.7/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 34. Restricted SharePoint Search

**URL:** https://learn.microsoft.com/en-us/sharepoint/restricted-sharepoint-search
**Section:** SharePoint Administration
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 4.6: Control 4.6: Grounding Scope Governance
  - File: `controls/pillar-4-sharepoint/4.6-grounding-scope-governance.md`
- Control 4.1: Control 4.1: SharePoint Information Access Governance (IAG) / Restricted Content Discovery
  - File: `controls/pillar-4-sharepoint/4.1-sharepoint-information-access-governance-iag-restricted-content-discovery.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -27,98 +28,126 @@ Feedback
 Summarize this article for me
 Important
-Restricted SharePoint Search is designed for customers of Microsoft 365 Copilot.
+Restricted SharePoint Search is designed for customers of Microsoft 365 Copilot chat and agentic experiences. It's designed as a short-term solution to allow time for your organization's administrators to thoroughly review and audit site and file permissions, but it's not intended or scalable for long-term use. Comprehensive data security solutions are available, including
+SharePoint Advanced Management
+and
+Microsoft Purview
+.
 What is Restricted SharePoint Search?
-Restricted SharePoint Search is a setting that helps you as a
+Restricted SharePoint Search is a setting that enables you as a
 SharePoint Administrator
 or
-above
-in Microsoft 365 to maintain a list of SharePoint sites ("allowed list") that you have checked the permissions and applied data governance for. The allowed list defines which SharePoint sites can participate in organization-wide search and Copilot experiences. By default, the Restricted SharePoint Search setting is turned off and the allowed list is empty.
-Restricted SharePoint Search allows you to restrict both organization-wide search and Copilot experiences to a curated set of SharePoint sites of your choice. Additionally, whether you have
-enabled Restricted SharePoint Search
-, users in your organization are still able to interact with files and content they own or that they have previously accessed in Copilot.
-Why should you use Restricted SharePoint Search?
-Restricted SharePoint Search gives you time to review and audit site permissions. We provide Restricted SharePoint Search to help you maintain momentum with your Copilot deployment while you're implementing comprehensive data security with
+other Microsoft 365 administrator
+to maintain a lis
```

---

### 35. Advanced Management

**URL:** https://learn.microsoft.com/en-us/sharepoint/advanced-management
**Section:** SharePoint Administration
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 4.6: Control 4.6: Grounding Scope Governance
  - File: `controls/pillar-4-sharepoint/4.6-grounding-scope-governance.md`
- Control 4.1: Control 4.1: SharePoint Information Access Governance (IAG) / Restricted Content Discovery
  - File: `controls/pillar-4-sharepoint/4.1-sharepoint-information-access-governance-iag-restricted-content-discovery.md`
- Control 4.5: Control 4.5: SharePoint Security and Compliance Monitoring
  - File: `controls/pillar-4-sharepoint/4.5-sharepoint-security-and-compliance-monitoring.md`
- Control 4.2: Control 4.2: Site Access Reviews and Certification
  - File: `controls/pillar-4-sharepoint/4.2-site-access-reviews-and-certification.md`
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.5/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/4.6/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -118,10 +119,10 @@ Insights on agents accessing content:
 Get insights on how the agents are accessing content across all SharePoint and OneDrive sites in your organization.
 App insights:
-Monitor and manage non-Microsoft applications registered in your Microsoft Entra admin center that access your SharePoint content.
+Monitor and manage non-Microsoft applications registered in your Microsoft Entra admin center that accesss your SharePoint content.
 Initiate site access reviews:
 Delegate review of overshared sites to site owners, ensuring regular validation of access permissions.
-Restrict access to all OneDrives by security group:
+Restrict access to all OneDrive sites by security group:
 Limit OneDrive access to specific security groups, enhancing data protection.
 Restrict access to specific OneDrives:
 Control access to individual OneDrive accounts based on user roles or group memberships.
@@ -130,7 +131,7 @@ Restrict site creation by users:
 Enforce policies to control who can create new SharePoint sites, reducing unnecessary sprawl.
 Restrict site creation by apps:
-Control which non-Microsoft applications can create SharePoint sites, ensuring only trusted apps have this capability.
+Specify the non-Microsoft applications that can create SharePoint sites, ensuring only trusted apps have this capability.
 Restrict SharePoint access by security groups:
 Apply security group-based policies to further refine who can access specific SharePoint sites.
 By using these features together, you can ensure that only authorized users have access to your organization's data, reduce the risk of data leaks, and support secure, efficient collaboration with Microsoft 365 Copilot.
@@ -181,7 +182,7 @@ You can limit access to shared content of a specific user's OneDrive to only people in a security group with the
 Restricted Access Control for 
```

---

### 36. Data Access Governance Reports

**URL:** https://learn.microsoft.com/en-us/sharepoint/data-access-governance-reports
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 4.6: Control 4.6: Grounding Scope Governance
  - File: `controls/pillar-4-sharepoint/4.6-grounding-scope-governance.md`
- Control 4.4: Control 4.4: Guest and External User Access Controls
  - File: `controls/pillar-4-sharepoint/4.4-guest-and-external-user-access-controls.md`
- Control 4.1: Control 4.1: SharePoint Information Access Governance (IAG) / Restricted Content Discovery
  - File: `controls/pillar-4-sharepoint/4.1-sharepoint-information-access-governance-iag-restricted-content-discovery.md`
- Control 4.5: Control 4.5: SharePoint Security and Compliance Monitoring
  - File: `controls/pillar-4-sharepoint/4.5-sharepoint-security-and-compliance-monitoring.md`
- Control 4.2: Control 4.2: Site Access Reviews and Certification
  - File: `controls/pillar-4-sharepoint/4.2-site-access-reviews-and-certification.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.4/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/4.5/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try

```

---

### 37. Site Lifecycle Management

**URL:** https://learn.microsoft.com/en-us/sharepoint/site-lifecycle-management
**Section:** SharePoint Administration
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 4.3: Control 4.3: Site and Document Retention Management
  - File: `controls/pillar-4-sharepoint/4.3-site-and-document-retention-management.md`
- Control 4.2: Control 4.2: Site Access Reviews and Certification
  - File: `controls/pillar-4-sharepoint/4.2-site-access-reviews-and-certification.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.3/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -117,19 +118,29 @@ Active mode
 The active policy runs monthly, generating reports and sending notifications to site owners to confirm the site's status. If it fails during a particular month, it will run again on the next schedule. The policy enforces actions on sites that remain uncertified or unattested by the site owner or admin, provided you configured it to take enforcement actions.
 How to create an inactive site policy
-To create an inactive site policy, expand
+As a SharePoint administrator, go to the
+SharePoint admin center
+and sign in.
+In the navigation pane, expand
 Policies
-and select
+, and then select
 Site lifecycle management
-in the
-SharePoint admin center
-:
+.
+Under
+Inactive site policies
+, select
+Open
+.
 Select
 + Create policy
-and then select
+. Review the
+Manage inactive sites
+information, and then select
 Next
 .
-Choose your policy scope option and select
+On the
+Set policy scope
+step, choose your policy scope option, and then select
 Next
 .
 If you select
@@ -139,16 +150,22 @@ You can export the site list from the SharePoint active sites page.
 Ensure the CSV file use the same format of the sample CSV file and has no duplicate URLs and those URLs are valid and complete.â¯
 Ensure the URLs listed in CSV file belong to your tenant's domain.â¯
-If you select
+If you chose
 Include sites with retention policies and retention holds
-, the policy scope includes read-only sites and locked sites. The policy scope automatically includes all inactive ownerless sites.
-Define the configuration of the policy by selecting the inactivity period, the email recipients, and the enforcement actions. Select
+, this option applies only to sites that are governed by
+Microsoft Purview retention policies and labels
+. This setting doesn't affect the inclusion or exclusion of sites that are in a read-only or lo
```

---

### 38. Site Attestation

**URL:** https://learn.microsoft.com/en-us/sharepoint/request-site-attestations
**Section:** SharePoint Administration
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 4.2: Control 4.2: Site Access Reviews and Certification
  - File: `controls/pillar-4-sharepoint/4.2-site-access-reviews-and-certification.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -26,12 +27,14 @@ Request recurring site attestations for SharePoint sites
 Feedback
 Summarize this article for me
-The site lifecycle management features from
+The site lifecycle management features in
 Microsoft SharePoint Advanced Management
-help you improve site governance by automating policy configuration in the
+help your organization improve site governance by automating policy configuration in the
 SharePoint admin center
-. Site attestation policies, part of SharePoint's site lifecycle management features, help you manage periodic attestation of sites at scale. This attestation involves regular reviews by site owners or admins to check and confirm the accuracy of site information, including the site's necessity, its owners, members, permissions, and sharing settings. For sites that remain unattested, you can choose to automate enforcement actions to prevent risks of content overexposure. This approach ensures ongoing site compliance and actively reduces risks such as information oversharing.
-What do you need to create a site attestation policy
+. Site attestation policies, part of SharePoint's site lifecycle management features, help you manage periodic attestation of sites at scale.
+Site attestation involves regular reviews by site owners or site admins to check and confirm the accuracy of site information, including the site's necessity, its owners, members, permissions, and sharing settings. For sites that remain unattested, you can choose to automate enforcement actions to prevent risks of content overexposure. This approach ensures ongoing site compliance and actively reduces risks such as information oversharing.
+This article describes how to create and configure a site attestation policy.
+Requirements for a site attestation policy
 What are the license requirements?
 Your organization needs to have the right l
```

---

### 39. Agent Insights

**URL:** https://learn.microsoft.com/en-us/sharepoint/insights-on-sharepoint-agents
**Section:** SharePoint Administration
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 4.5: Control 4.5: SharePoint Security and Compliance Monitoring
  - File: `controls/pillar-4-sharepoint/4.5-sharepoint-security-and-compliance-monitoring.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.5/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -28,16 +29,14 @@ Summarize this article for me
 Insights report on agents in SharePoint provides SharePoint Administrators with rich information on the recently created agents across all SharePoint sites and OneDrive sites within their organization. This report provides admins with the ability to learn about the sites with the highest number of agents created. Using this report, SharePoint admins can further govern and maintain the integrity of the content used by agents as grounding data.
 The insights report is based on the Microsoft audit data logged for the agents, created in SharePoint, through the FileCreated and FileRenamed events.
-You can generate and manage agent Insights report in SharePoint Admin Center or with SharePoint Online Management Shell.
-What do you need to access agent Insights report
-What are the license requirements?
-Your organization needs to have the right license and meet certain administrative permissions or roles to use the feature described in this article.
-First, your organization must have one of the following base licenses:
+You can generate and manage agent insights report in SharePoint Admin Center or with SharePoint Online Management Shell.
+What do you need to access agent insights report
+License requirements
+Your organization needs to have the right licenses and meet certain administrative permissions or roles to use the feature described in this article.
+First, your organization must have one of the following licenses:
 Office 365 E3, E5, or A5
 Microsoft 365 E1, E3, E5, or A5
-Additionally, you need to have
-Microsoft 365 Copilot license
-.
+Additionally, you need to have a Microsoft 365 Copilot license.
 Note
 At least one user in your organization must be assigned a Copilot license (this user doesn't need to be a SharePoint administrator).
 If your organization has a Copilot license 
```

---

### 40. Workbooks

**URL:** https://learn.microsoft.com/azure/sentinel/monitor-your-data
**Section:** Azure Services
**Classification:** HIGH (Portal references)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -30,23 +31,15 @@ Microsoft Sentinel allows you to create custom workbooks across your data or use existing workbook templates available with packaged solutions or as standalone content from the content hub. Each workbook is an Azure resource like any other, and you can assign it with Azure role-based access control (RBAC) to define and limit who can access.
 This article describes how to visualize your data in Microsoft Sentinel by using workbooks. Editing workbooks directly in the Defender portal is as Preview.
 Important
-Microsoft Sentinel is generally available in the Microsoft Defender portal
-, including for customers without Microsoft Defender XDR or an E5 license.
 After
 March 31, 2027
 , Microsoft Sentinel will no longer be supported in the Azure portal and will be available only in the Microsoft Defender portal. All customers using Microsoft Sentinel in the Azure portal will be
 redirected to the Defender portal and will use Microsoft Sentinel in the Defender portal only
-. Starting in
-July 2025
-, many new customers are
-automatically onboarded and redirected to the Defender portal
 .
 If you're still using Microsoft Sentinel in the Azure portal, we recommend that you start planning your
 transition to the Defender portal
 to ensure a smooth transition and take full advantage of the
 unified security operations experience offered by Microsoft Defender
-. For more information, see
-Itâs Time to Move: Retiring Microsoft Sentinelâs Azure portal for greater security
 .
 Prerequisites
 You must have at least

```

---

### 41. Automation Rules

**URL:** https://learn.microsoft.com/azure/sentinel/automate-incident-handling-with-automation-rules
**Section:** Azure Services
**Classification:** HIGH (Portal references)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -28,23 +29,15 @@ Summarize this article for me
 This article explains what Microsoft Sentinel automation rules are, and how to use them to implement your Security Orchestration, Automation and Response (SOAR) operations. Automation rules increase your SOC's effectiveness and save you time and resources.
 Important
-Microsoft Sentinel is generally available in the Microsoft Defender portal
-, including for customers without Microsoft Defender XDR or an E5 license.
 After
 March 31, 2027
 , Microsoft Sentinel will no longer be supported in the Azure portal and will be available only in the Microsoft Defender portal. All customers using Microsoft Sentinel in the Azure portal will be
 redirected to the Defender portal and will use Microsoft Sentinel in the Defender portal only
-. Starting in
-July 2025
-, many new customers are
-automatically onboarded and redirected to the Defender portal
 .
 If you're still using Microsoft Sentinel in the Azure portal, we recommend that you start planning your
 transition to the Defender portal
 to ensure a smooth transition and take full advantage of the
 unified security operations experience offered by Microsoft Defender
-. For more information, see
-Itâs Time to Move: Retiring Microsoft Sentinelâs Azure portal for greater security
 .
 What are automation rules?
 Automation rules are a way to centrally manage automation in Microsoft Sentinel, by allowing you to define and coordinate a small set of rules that can apply across different scenarios.

```

---

### 42. Testing Guidance

**URL:** https://learn.microsoft.com/en-us/power-apps/guidance/planning/testing-phase
**Section:** Power Apps
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 2.5: Control 2.5: Testing, Validation, and Quality Assurance
  - File: `controls/pillar-2-management/2.5-testing-validation-and-quality-assurance.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -23,116 +24,80 @@ Access to this page requires authorization. You can try
 changing directories
 .
-Testing phase
+Overview of plans
 Feedback
 Summarize this article for me
-Now that your app is built, the next step is to start testing it. In
-this section you'll learn the basics of how testing should be carried
-out.
-Types of tests
-Unit tests
-A
-unit test
-is used to check whether a specific function or feature of
-your app is working correctly.
-End-to-end tests
-End-to-end tests
-are used to check whether the overall solution runs correctly.
-This is important because even if all unit tests function correctly, the
-integration between two units can potentially fail. These tests are done by
-following a test scenario that's close to the use case of the actual business
-process.
-User acceptance tests
-A
-user acceptance test
-(UAT) is done by the user of the app instead of
-the maker. This test is to ensure that what has been built by the makers matches the
-requirements initially requested by the user.
-Here are some tips for getting good results from UATs:
-Test with the real users.
-Try to choose users with diversity in terms of IT skill levels. This way, you can get a variety of feedback.
-Don't give the user instructions; see whether they can understand the app
-intuitively.
-Observe how they navigate the app without assistance, and see where you can improve
-the design.
-When the user is stuck on a screen, ask them to explain what their
-expectation was.
-Try out different devices to make sure the test cases behave the same.
-Ideally, test the app in the user's actual environment or location if the app uses offline
-capabilities.
-Ask your users to try to "break" your app, such as by entering unusual
-characters in text fields.
-Users will typically test the "happy path" (the path a user takes when
-everything is going 
```

---

### 43. Application Resources

**URL:** https://learn.microsoft.com/en-us/graph/api/resources/application
**Section:** Microsoft Graph API
**Classification:** HIGH (Policy language)

**Affected Controls:**
- Control 1.2: Control 1.2: Agent Registry and Integrated Apps Management
  - File: `controls/pillar-1-security/1.2-agent-registry-and-integrated-apps-management.md`

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -522,6 +523,16 @@ webApplication
 Specifies settings for a web application.
 signInAudience values
+Important
+Using the
+signInAudience
+property to limit where an application can be used
+isn't
+a replacement for proper tenant validation and authorization enforcement in your application code. If your application expects access only in specific tenants, you
+must
+enforce that validation in your application code. To learn more, see
+Secure applications and APIs by validating claims
+.
 Value
 Description
 AzureADMyOrg
@@ -567,6 +578,18 @@ 30
 30
 30
+Note
+For Microsoft Entra Agent ID, some high-risk Microsoft Graph permissions are globally blocked for agents and can't be granted to agent identities.
+If you include a blocked Microsoft Graph delegated permission scope or app role in the
+resourceAccess
+collection of a
+requiredResourceAccess
+entry, the request is rejected with an HTTP
+400 Bad Request
+response and an error indicating that the permission is blocked and can't be granted to agent identities.
+For the list of blocked Microsoft Graph permissions for agents, see
+Microsoft Graph permissions blocked for agents
+.
 Relationships
 Important
 Specific usage of the

```

---

### 44. Purview What's New

**URL:** https://learn.microsoft.com/en-us/purview/whats-new
**Section:** Release Plans and Roadmaps
**Classification:** HIGH (Feature availability)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -41,6 +42,76 @@ for data governance solutions.
 Roadmap
 for data security and risk and compliance solutions.
+March 2026
+Data Governance
+General availability (GA)
+:
+Authoring custom data quality rules using SQL expression
+language is now generally available. Users can create custom rules using both Azure Data Factory expression and SQL expression languages.
+Data Security Investigations
+New
+:
+Categorization
+now includes a
+Standard
+and
+Advanced
+option.
+Standard
+categorization can significantly reduce the time it takes to complete processing and the amount of Data Security Investigation Compute Units (compute unit) needed for categorization.
+Insider Risk Management
+In preview
+: Disable content download to create cases without content to reduce triage time. To get started, see
+Enable or disable content download
+.
+Sensitivity labels
+General availability (GA)
+: Manual labeling for OneNote, supported at the
+section level
+. Because retention labels also support labeling at the section level, you might find it helpful to review the
+architecture diagram for retention policies and retention labels
+. To enable the support for sensitivity labels,
+SharePoint and OneDrive must already be enabled for sensitivity labels
+, and then run the following PowerShell command:
+Set-SPOTenant -EnableSensitivityLabelforOneNote $true
+In preview
+:
+Auto-labeling policies
+introduce a new flow where you must decide whether to automatically apply a sensitivity label, or remove a label when the configured conditions apply for files in SharePoint and OneDrive. When you chose to automatically apply a sensitivity label, you can now optionally choose to always overriding an existing label that has a lower priority label, even if it was manually applied. This option was previously available for emails only and now extends to files in Sh
```

---

### 45. Purview Licensing

**URL:** https://learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-purview-service-description
**Section:** Licensing
**Classification:** HIGH (Portal references)

**What Changed:**
```diff
--- +++ @@ -13,6 +13,7 @@ x.com
 LinkedIn
 Email
+Copy Markdown
 Print
 Note
 Access to this page requires authorization. You can try
@@ -56,22 +57,25 @@ Considerations for deploying Microsoft Purview Data Security Posture Management for AI & data security and compliance protections for Microsoft Copilot and other generative AI apps | Microsoft Learn
 .
 Feature availability
-Microsoft Purview Audit (Standard)**
+Microsoft Purview Audit (Standard)
 Microsoft Purview Audit (Standard) provides you with the ability to log and search for audited activities and power your forensic, IT, compliance, and legal investigations. To learn more, see
 Learn about auditing solutions in Microsoft Purview
 .
 Feature
-Microsoft 365 E5 + Microsoft 365 Copilot
-Microsoft 365 E3 + Microsoft 365 Copilot
-Microsoft 365 E5/A5/G5
+Microsoft 365 E3/A3/A1/G3/F3/F1
+Office 365 E3/E1/A3/A1/G3/G1/F3
+Microsoft 365 Business Basic/Standard/Premium
 Audit (Standard)
 Yes
 Yes
 Yes
 Audit (Standard) for Microsoft 365 Copilot interactions
-Yes
-Yes
-No
+1
+Yes
+Yes
+Yes
+1
+Audit logs for Microsoft 365 Copilot interactions are generated only when Microsoft 365 Copilot is licensed and in use.
 Microsoft Purview Audit (Premium)
 Audit (Premium) (formerly named Microsoft 365 Advanced Audit) provides one-year retention of audit logs for user and admin activities and provides the ability to create custom audit log retention policies to manage audit log retention for other Microsoft 365 services. It also provides access to crucial events for investigations and high-bandwidth access to the Office 365 Management Activity API.
 Users benefit from Audit (Premium) because audit records related to user activity in Microsoft 365 services can be retained for up to one year. Additionally, high-value auditing events are logged, such as when items in a user's mailbox are accessed or read.
@@ -80,23 +84,29 @@ One-year retention of audit logs and the auditing of crucial events only apply to users with the appropriate 
```

---

## MEDIUM: Minor Changes (Review Optional)

### 1. Enable Managed Environments
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-enable
**Classification:** MEDIUM (General content update)

---

### 2. Solution Checker Enforcement
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-solution-checker
**Classification:** MEDIUM (General content update)

---

### 3. Usage Insights
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-usage-insights
**Classification:** MEDIUM (General content update)

---

### 4. Environment Groups
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/environment-groups
**Classification:** MEDIUM (General content update)

---

### 5. Environment Group Rules
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/environment-groups-rules
**Classification:** MEDIUM (General content update)

---

### 6. Environment Routing
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/default-environment-routing
**Classification:** MEDIUM (General content update)

---

### 7. Developer Environments
**URL:** https://learn.microsoft.com/en-us/power-platform/developer/create-developer-environment
**Classification:** MEDIUM (General content update)

---

### 8. Advanced Connector Policies
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/advanced-connector-policies
**Classification:** MEDIUM (General content update)

---

### 9. DLP Policies (Power Platform)
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/wp-data-loss-prevention
**Classification:** MEDIUM (General content update)

---

### 10. Connector Classification
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/dlp-connector-classification
**Classification:** MEDIUM (General content update)

---

### 11. Custom Connectors
**URL:** https://learn.microsoft.com/en-us/connectors/custom-connectors/
**Classification:** MEDIUM (General content update)

---

### 12. Security
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/security/security-overview
**Classification:** MEDIUM (General content update)

---

### 13. Security Roles
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/security-roles-privileges
**Classification:** MEDIUM (General content update)

---

### 14. Create Security Roles
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/create-edit-security-role
**Classification:** MEDIUM (General content update)

---

### 15. Database Security
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/database-security
**Classification:** MEDIUM (General content update)

---

### 16. Column-Level Security
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/field-level-security
**Classification:** MEDIUM (General content update)

---

### 17. High-Privileged Admin Roles
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/manage-high-privileged-admin-roles
**Classification:** MEDIUM (General content update)

---

### 18. IP Firewall
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/ip-firewall
**Classification:** MEDIUM (General content update)

---

### 19. Cross-Tenant Restrictions
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/cross-tenant-restrictions
**Classification:** MEDIUM (General content update)

---

### 20. Encryption
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/manage-encryption-key
**Classification:** MEDIUM (General content update)

---

### 21. Analytics
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/analytics-common-data-service
**Classification:** MEDIUM (General content update)

---

### 22. Export Analytics to Azure
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/self-service-analytics
**Classification:** MEDIUM (General content update)

---

### 23. Monitor Copilot Studio
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/monitoring/monitor-copilot-studio
**Classification:** MEDIUM (General content update)

---

### 24. Monitoring Hub
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/monitoring/monitoring-overview
**Classification:** MEDIUM (General content update)

---

### 25. Monitor Alerts
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/monitoring/alerts
**Classification:** MEDIUM (General content update)

---

### 26. Copilot Hub
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/copilot/copilot-hub
**Classification:** MEDIUM (General content update)

---

### 27. Maker Onboarding (Welcome Content)
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/welcome-content
**Classification:** MEDIUM (General content update)

---

### 28. Agent Access Points
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/security/identity-access-management#agent-access-points-preview
**Classification:** CRITICAL (Deprecation notice)

---

### 29. Copilot Studio Message Capacity
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/manage-copilot-studio-messages-capacity
**Classification:** MEDIUM (General content update)

---

### 30. Business Continuity
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/business-continuity-disaster-recovery
**Classification:** MEDIUM (General content update)

---

### 31. Backup and Restore
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/backup-restore-environments
**Classification:** MEDIUM (General content update)

---

### 32. Regions Overview
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/regions-overview
**Classification:** MEDIUM (General content update)

---

### 33. Capacity Storage
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/capacity-storage
**Classification:** MEDIUM (General content update)

---

### 34. PowerShell
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/powerapps-powershell
**Classification:** CRITICAL (Deprecation notice)

---

### 35. PowerShell Getting Started
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/powershell-getting-started
**Classification:** MEDIUM (General content update)

---

### 36. Power Platform Governance
**URL:** https://learn.microsoft.com/en-us/power-platform/guidance/adoption/dlp-strategy
**Classification:** MEDIUM (General content update)

---

### 37. CoE Power BI Monitor
**URL:** https://learn.microsoft.com/en-us/power-platform/guidance/coe/power-bi-monitor
**Classification:** MEDIUM (General content update)

---

### 38. Release Plans
**URL:** https://learn.microsoft.com/en-us/power-platform/release-plan/2025wave2/
**Classification:** MEDIUM (General content update)

---

### 39. Pipelines Overview
**URL:** https://learn.microsoft.com/en-us/power-platform/alm/pipelines
**Classification:** MEDIUM (General content update)

---

### 40. Set Up Pipelines
**URL:** https://learn.microsoft.com/en-us/power-platform/alm/set-up-pipelines
**Classification:** MEDIUM (General content update)

---

### 41. Run Pipelines
**URL:** https://learn.microsoft.com/en-us/power-platform/alm/run-pipeline
**Classification:** MEDIUM (General content update)

---

### 42. Default Deployment Pipeline
**URL:** https://learn.microsoft.com/en-us/power-platform/alm/default-deployment-pipeline-rule-for-environment-groups
**Classification:** MEDIUM (General content update)

---

### 43. Solution Concepts
**URL:** https://learn.microsoft.com/en-us/power-platform/alm/solution-concepts-alm
**Classification:** MEDIUM (General content update)

---

### 44. Copilot Studio Overview
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/fundamentals-what-is-copilot-studio
**Classification:** MEDIUM (General content update)

---

### 45. Security and Governance
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/security-and-governance
**Classification:** MEDIUM (General content update)

---

### 46. Sensitivity Labels in Copilot Studio
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/sensitivity-label-copilot-studio
**Classification:** MEDIUM (General content update)

---

### 47. Share and Manage Agents
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/admin-share-bots
**Classification:** CRITICAL (Deprecation notice)

---

### 48. Analytics
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/analytics-overview
**Classification:** MEDIUM (General content update)

---

### 49. Connectors
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/advanced-connectors
**Classification:** MEDIUM (General content update)

---

### 50. Knowledge Sources
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/knowledge-copilot-studio
**Classification:** MEDIUM (General content update)

---

### 51. Generative AI
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/nlu-gpt-overview
**Classification:** MEDIUM (General content update)

---

### 52. External Threat Detection
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/external-security-provider
**Classification:** MEDIUM (General content update)

---

### 53. Human Agent Handoff
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/advanced-hand-off
**Classification:** MEDIUM (General content update)

---

### 54. Test Your Agent
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/authoring-test-bot
**Classification:** MEDIUM (General content update)

---

### 55. VNet Support
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/admin-network-isolation-vnet
**Classification:** MEDIUM (General content update)

---

### 56. Manage Copilot Agents
**URL:** https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps
**Classification:** MEDIUM (General content update)

---

### 57. Copilot Usage Reports
**URL:** https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/microsoft-365-copilot-usage
**Classification:** MEDIUM (General content update)

---

### 58. Visual Governance Guide
**URL:** https://learn.microsoft.com/en-us/copilot/microsoft-365/agent-essentials/m365-agents-visual-map
**Classification:** MEDIUM (General content update)

---

### 59. Deployment Checklist
**URL:** https://learn.microsoft.com/en-us/copilot/microsoft-365/agent-essentials/m365-agents-checklist
**Classification:** MEDIUM (General content update)

---

### 60. Deployment Blueprint
**URL:** https://learn.microsoft.com/en-us/copilot/microsoft-365/agent-essentials/m365-agents-blueprint
**Classification:** MEDIUM (General content update)

---

### 61. Agent 365 SDK Overview
**URL:** https://learn.microsoft.com/en-us/microsoft-agent-365/developer/
**Classification:** MEDIUM (General content update)

---

### 62. Blueprint Registration
**URL:** https://learn.microsoft.com/en-us/microsoft-agent-365/developer/registration
**Classification:** MEDIUM (General content update)

---

### 63. Agent 365 Security Overview
**URL:** https://learn.microsoft.com/en-us/security/security-for-ai/agent-365-security
**Classification:** MEDIUM (General content update)

---

### 64. Create DLP Policies
**URL:** https://learn.microsoft.com/en-us/purview/dlp-create-deploy-policy
**Classification:** MEDIUM (General content update)

---

### 65. Audit Logging
**URL:** https://learn.microsoft.com/en-us/purview/audit-solutions-overview
**Classification:** MEDIUM (General content update)

---

### 66. Audit Copilot Activities
**URL:** https://learn.microsoft.com/en-us/purview/audit-copilot
**Classification:** MEDIUM (General content update)

---

### 67. Audit Log Retention
**URL:** https://learn.microsoft.com/en-us/purview/audit-log-retention-policies
**Classification:** MEDIUM (General content update)

---

### 68. Communication Compliance
**URL:** https://learn.microsoft.com/en-us/purview/communication-compliance
**Classification:** MEDIUM (General content update)

---

### 69. Create Policies
**URL:** https://learn.microsoft.com/en-us/purview/communication-compliance-policies
**Classification:** MEDIUM (General content update)

---

### 70. Investigate Alerts
**URL:** https://learn.microsoft.com/en-us/purview/communication-compliance-investigate-remediate
**Classification:** MEDIUM (General content update)

---

### 71. Insider Risk Management
**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management
**Classification:** MEDIUM (General content update)

---

### 72. Investigate Alerts
**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management-activities
**Classification:** CRITICAL (Deprecation notice)

---

### 73. HR Data Connector
**URL:** https://learn.microsoft.com/en-us/purview/import-hr-data
**Classification:** MEDIUM (General content update)

---

### 74. eDiscovery
**URL:** https://learn.microsoft.com/en-us/purview/ediscovery
**Classification:** MEDIUM (General content update)

---

### 75. Create Cases
**URL:** https://learn.microsoft.com/en-us/purview/ediscovery-create-and-manage-cases
**Classification:** MEDIUM (General content update)

---

### 76. KeyQL Reference
**URL:** https://learn.microsoft.com/en-us/purview/ediscovery-keyword-queries-and-search-conditions
**Classification:** MEDIUM (General content update)

---

### 77. eDiscovery Holds
**URL:** https://learn.microsoft.com/en-us/purview/ediscovery-create-holds
**Classification:** MEDIUM (General content update)

---

### 78. Endpoint DLP
**URL:** https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about
**Classification:** MEDIUM (General content update)

---

### 79. Onboard Devices
**URL:** https://learn.microsoft.com/en-us/purview/endpoint-dlp-getting-started
**Classification:** MEDIUM (General content update)

---

### 80. Configure Settings
**URL:** https://learn.microsoft.com/en-us/purview/dlp-configure-endpoint-settings
**Classification:** MEDIUM (General content update)

---

### 81. Information Barriers
**URL:** https://learn.microsoft.com/en-us/purview/information-barriers
**Classification:** CRITICAL (Deprecation notice)

---

### 82. Activity Explorer
**URL:** https://learn.microsoft.com/en-us/purview/data-classification-activity-explorer
**Classification:** MEDIUM (General content update)

---

### 83. Assessments
**URL:** https://learn.microsoft.com/purview/compliance-manager-assessments
**Classification:** MEDIUM (General content update)

---

### 84. Conditional Access Policies
**URL:** https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-policies
**Classification:** MEDIUM (General content update)

---

### 85. Session Controls
**URL:** https://learn.microsoft.com/en-us/entra/identity/conditional-access/howto-conditional-access-session-lifetime
**Classification:** MEDIUM (General content update)

---

### 86. Phishing-Resistant MFA
**URL:** https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-strengths
**Classification:** MEDIUM (General content update)

---

### 87. Role-Based Access Control
**URL:** https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/custom-overview
**Classification:** MEDIUM (General content update)

---

### 88. Admin Roles
**URL:** https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference
**Classification:** MEDIUM (General content update)

---

### 89. Access Reviews
**URL:** https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview
**Classification:** MEDIUM (General content update)

---

### 90. Create Access Review
**URL:** https://learn.microsoft.com/en-us/entra/id-governance/create-access-review
**Classification:** MEDIUM (General content update)

---

### 91. Privileged Identity Management
**URL:** https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure
**Classification:** MEDIUM (General content update)

---

### 92. SharePoint Admin Center
**URL:** https://learn.microsoft.com/en-us/sharepoint/sharepoint-admin-role
**Classification:** MEDIUM (General content update)

---

### 93. Sharing Permissions
**URL:** https://learn.microsoft.com/en-us/sharepoint/modern-experience-sharing-permissions
**Classification:** MEDIUM (General content update)

---

### 94. External Sharing
**URL:** https://learn.microsoft.com/en-us/sharepoint/external-sharing-overview
**Classification:** MEDIUM (General content update)

---

### 95. Manage Sharing Settings
**URL:** https://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off
**Classification:** MEDIUM (General content update)

---

### 96. Restricted Content Discovery
**URL:** https://learn.microsoft.com/en-us/sharepoint/restricted-content-discovery
**Classification:** MEDIUM (General content update)

---

### 97. Data Access Governance Reports
**URL:** https://learn.microsoft.com/en-us/sharepoint/data-access-governance-reports
**Classification:** MEDIUM (General content update)

---

### 98. List Management
**URL:** https://learn.microsoft.com/en-us/sharepoint/control-lists
**Classification:** MEDIUM (General content update)

---

### 99. Training Sites
**URL:** https://learn.microsoft.com/en-us/sharepoint/create-training-site
**Classification:** MEDIUM (General content update)

---

### 100. Versioning
**URL:** https://learn.microsoft.com/en-us/sharepoint/governance/versioning-content-approval-and-check-out-planning
**Classification:** MEDIUM (General content update)

---

### 101. Integrated Apps
**URL:** https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-addins-in-the-admin-center
**Classification:** CRITICAL (Deprecation notice)

---

### 102. Service Health
**URL:** https://learn.microsoft.com/en-us/microsoft-365/enterprise/view-service-health
**Classification:** MEDIUM (General content update)

---

### 103. Message Center
**URL:** https://learn.microsoft.com/en-us/microsoft-365/admin/manage/message-center
**Classification:** MEDIUM (General content update)

---

### 104. Microsoft Sentinel
**URL:** https://learn.microsoft.com/en-us/azure/sentinel/overview
**Classification:** MEDIUM (General content update)

---

### 105. Data Connectors
**URL:** https://learn.microsoft.com/azure/sentinel/connect-data-sources
**Classification:** CRITICAL (Deprecation notice)

---

### 106. Investigate Incidents
**URL:** https://learn.microsoft.com/azure/sentinel/investigate-cases
**Classification:** MEDIUM (General content update)

---

### 107. Azure Key Vault
**URL:** https://learn.microsoft.com/en-us/azure/key-vault/general/overview
**Classification:** MEDIUM (General content update)

---

### 108. Key Vault Private Endpoints
**URL:** https://learn.microsoft.com/en-us/azure/key-vault/general/private-link-service
**Classification:** MEDIUM (General content update)

---

### 109. Azure Private Link
**URL:** https://learn.microsoft.com/en-us/azure/private-link/private-link-overview
**Classification:** MEDIUM (General content update)

---

### 110. Immutable Blob Storage
**URL:** https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-storage-overview
**Classification:** MEDIUM (General content update)

---

### 111. Azure Monitor Alerts
**URL:** https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-overview
**Classification:** MEDIUM (General content update)

---

### 112. Azure Service Health
**URL:** https://learn.microsoft.com/en-us/azure/service-health/service-health-overview
**Classification:** MEDIUM (General content update)

---

### 113. Azure Information Protection
**URL:** https://learn.microsoft.com/en-us/azure/information-protection/what-is-information-protection
**Classification:** MEDIUM (General content update)

---

### 114. Responsible AI
**URL:** https://learn.microsoft.com/en-us/azure/machine-learning/concept-responsible-ai
**Classification:** MEDIUM (General content update)

---

### 115. AI Content Safety
**URL:** https://learn.microsoft.com/en-us/azure/ai-services/content-safety/overview
**Classification:** MEDIUM (General content update)

---

### 116. Cost Management
**URL:** https://learn.microsoft.com/azure/cost-management-billing/costs/overview-cost-management
**Classification:** MEDIUM (General content update)

---

### 117. Azure Budgets
**URL:** https://learn.microsoft.com/azure/cost-management-billing/costs/tutorial-acm-create-budgets
**Classification:** MEDIUM (General content update)

---

### 118. Azure DevOps Test Plans
**URL:** https://learn.microsoft.com/en-us/azure/devops/test/overview
**Classification:** MEDIUM (General content update)

---

### 119. Defender for Cloud Apps - AI Inventory
**URL:** https://learn.microsoft.com/en-us/defender-cloud-apps/ai-agent-inventory
**Classification:** MEDIUM (General content update)

---

### 120. Approval Workflows
**URL:** https://learn.microsoft.com/en-us/power-automate/get-started-approvals
**Classification:** MEDIUM (General content update)

---

### 121. Scheduled Flows
**URL:** https://learn.microsoft.com/en-us/power-automate/run-scheduled-tasks
**Classification:** MEDIUM (General content update)

---

### 122. Solution Checker
**URL:** https://learn.microsoft.com/en-us/power-apps/maker/data-platform/use-powerapps-checker
**Classification:** MEDIUM (General content update)

---

### 123. Access Reviews API
**URL:** https://learn.microsoft.com/en-us/graph/api/resources/accessreviewsv2-overview
**Classification:** MEDIUM (General content update)

---

### 124. Viva Learning Overview
**URL:** https://learn.microsoft.com/en-us/viva/learning/overview-viva-learning
**Classification:** MEDIUM (General content update)

---

### 125. Incident Response Planning
**URL:** https://learn.microsoft.com/security/operations/incident-response-planning
**Classification:** MEDIUM (General content update)

---

### 126. DLP Cmdlets
**URL:** https://learn.microsoft.com/en-us/powershell/module/exchange/new-dlpcompliancepolicy
**Classification:** MEDIUM (General content update)

---

### 127. Management Activity API
**URL:** https://learn.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-reference
**Classification:** MEDIUM (General content update)

---

### 128. Power Platform Licensing
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/pricing-billing-skus
**Classification:** MEDIUM (General content update)

---

### 129. Microsoft 365 Licensing
**URL:** https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-overview
**Classification:** MEDIUM (General content update)

---

### 130. Copilot Studio Licensing
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/requirements-licensing-subscriptions
**Classification:** MEDIUM (General content update)

---

## URL Redirects Detected

Consider updating microsoft-learn-urls.md:

| Original URL | Redirects To |
|--------------|--------------|
| https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps | https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps?view=o365-worldwide |
| https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/microsoft-365-copilot-usage | https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/microsoft-365-copilot-usage?view=o365-worldwide |
| https://learn.microsoft.com/purview/compliance-manager | https://learn.microsoft.com/en-us/purview/compliance-manager |
| https://learn.microsoft.com/purview/compliance-manager-assessments | https://learn.microsoft.com/en-us/purview/compliance-manager-assessments |
| https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-addins-in-the-admin-center | https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-addins-in-the-admin-center?view=o365-worldwide |
| https://learn.microsoft.com/en-us/microsoft-365/enterprise/view-service-health | https://learn.microsoft.com/en-us/microsoft-365/enterprise/view-service-health?view=o365-worldwide |
| https://learn.microsoft.com/en-us/microsoft-365/admin/manage/message-center | https://learn.microsoft.com/en-us/microsoft-365/admin/manage/message-center?view=o365-worldwide |
| https://learn.microsoft.com/azure/sentinel/connect-data-sources | https://learn.microsoft.com/en-us/azure/sentinel/connect-data-sources |
| https://learn.microsoft.com/azure/sentinel/monitor-your-data | https://learn.microsoft.com/en-us/azure/sentinel/monitor-your-data |
| https://learn.microsoft.com/azure/sentinel/automate-incident-handling-with-automation-rules | https://learn.microsoft.com/en-us/azure/sentinel/automate-incident-handling-with-automation-rules |
| https://learn.microsoft.com/azure/sentinel/investigate-cases | https://learn.microsoft.com/en-us/azure/sentinel/investigate-cases |
| https://learn.microsoft.com/en-us/azure/machine-learning/concept-responsible-ai | https://learn.microsoft.com/en-us/azure/machine-learning/concept-responsible-ai?view=azureml-api-2 |
| https://learn.microsoft.com/azure/cost-management-billing/costs/overview-cost-management | https://learn.microsoft.com/en-us/azure/cost-management-billing/costs/overview-cost-management |
| https://learn.microsoft.com/azure/cost-management-billing/costs/tutorial-acm-create-budgets | https://learn.microsoft.com/en-us/azure/cost-management-billing/costs/tutorial-acm-create-budgets |
| https://learn.microsoft.com/en-us/azure/devops/test/overview | https://learn.microsoft.com/en-us/azure/devops/test/overview?view=azure-devops |
| https://learn.microsoft.com/en-us/power-apps/guidance/planning/testing-phase | https://learn.microsoft.com/en-us/power-apps/maker/plan-designer/plan-designer |
| https://learn.microsoft.com/en-us/graph/api/resources/application | https://learn.microsoft.com/en-us/graph/api/resources/application?view=graph-rest-1.0 |
| https://learn.microsoft.com/en-us/graph/api/resources/accessreviewsv2-overview | https://learn.microsoft.com/en-us/graph/api/resources/accessreviewsv2-overview?view=graph-rest-1.0 |
| https://learn.microsoft.com/security/operations/incident-response-planning | https://learn.microsoft.com/en-us/security/operations/incident-response-planning |
| https://learn.microsoft.com/en-us/powershell/module/exchange/new-dlpcompliancepolicy | https://learn.microsoft.com/en-us/powershell/module/exchangepowershell/new-dlpcompliancepolicy?view=exchange-ps |
| https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-overview | https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-overview?view=o365-worldwide |

---

## Errors

- **Agent Inventory** (HTTP 404): https://learn.microsoft.com/en-us/power-platform/admin/tenant-wide-agent-inventory

---

*Generated by `scripts/learn_monitor.py` (unified monitoring framework)*