MC1309841 - Microsoft Purview: Insider Risk Management-AI app selection for Generative AI apps indicators
Message Center
Summary
Microsoft Purview Insider Risk Management will enable admins to select specific Generative AI apps for monitoring insider risk signals, improving relevance and cost efficiency. The feature rolls out May–June 2026, applies to Copilot and enterprise AI apps, and requires no user workflow changes. Admins can configure settings post-rollout.
Published
Service
Tag
Platforms
More information
Introduction
Microsoft Purview Insider Risk Management is introducing AI app selection for Generative AI app indicators, giving administrators more precise control over which AI applications will be evaluated when detecting Generative AI–related insider risk signals. This update will help organizations improve signal relevance, align monitoring with approved AI usage, and optimize pay‑as‑you‑go (PAYG) costs.
This message is associated with Microsoft 365 Roadmap ID 559992.
When this will happen
- Public Preview: We will begin rolling out in early May 2026 and expect to complete by mid-May 2026.
- General Availability (Global): We will begin rolling out in mid-June 2026 and expect to complete by late June 2026.
How this affects your organization
Who is affected
- Microsoft Purview Insider Risk Management administrators
- Organizations that use or plan to use Generative AI indicators in Insider Risk Management policies
What will happen
- Admins will be able to select which AI applications are included when evaluating specific Generative AI indicators:
- AI app selection will apply to the following indicators:
- Entering risky prompts in Copilot
- Receiving sensitive responses from Copilot
- Entering risky prompts in enterprise AI apps
- Receiving sensitive responses from enterprise AI apps
- Existing Insider Risk Management policies will continue to function without modification.
- By default, all supported AI apps will remain selected until an admin updates the configuration.
- There will be no change to user workflows or user experience.
What you can do to prepare
No action is required before rollout.
After the feature is available, Insider Risk Management admins with appropriate permissions can choose to:
- Review and update AI app selections to align with approved AI usage.
- Improve signal relevance and optimize PAYG costs by excluding unsupported or unused AI apps.
- Update internal governance or security documentation if it references Generative AI monitoring.
Admin configuration path (available after rollout):
- Microsoft Purview portal
- Settings > Insider Risk Management
- Policy indicators > Generative AI indicators
- Microsoft Copilot experiences or Enterprise AI apps
- Choose apps to monitor
This feature will be enabled automatically once rollout is complete.
Compliance considerations
| Question | Answer |
| Does the change alter how existing customer data is processed, stored, or accessed? | Yes. The update refines how existing AI‑related signals are evaluated by allowing admins to specify which AI apps are included in Generative AI indicators. No new data sources are introduced. |
| Does the change alter how admins can monitor, report on, or demonstrate compliance activities? | Yes. Admins gain a new control that affects which AI app signals are evaluated and surfaced in Insider Risk Management alerts and analytics. |
| Does the change include an admin control? | Yes. Admins can configure AI app selection for Generative AI indicators within the Microsoft Purview portal. |