Updated July 23, 2024: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Purview is enhancing the Audit custom retention policy experience to make it easier for customers to change the default retention policy across all their Audit logs. With this change, customers can now create blanket custom retention policies that apply to all Audit recordTypes. This capability will become available in addition to the existing support of manually selecting specific recordTypes in a custom policy.
This message is associated with Microsoft 365 Roadmap ID 395215
When this will happen:
Public Preview: We will begin rolling out late August 2024 (previously mid-June 2024July) and expect to complete by mid-September 2024 (previously late June 2024.July).
General Availability: We will begin rolling out late September2024 (previously mid-July 2024August) and expect to complete by late July 2024.October 2024 (previously late August).
How this will affect your organization:
This change now allows security admins in your organization to apply a default retention policy to all of the Audit recordTypes. Previously, an admin had to manually select every single recordType in the dropdown menu of a custom retention policy. Moreover, it did not automatically include any new recordTypes added to the Audit log at a future time.
With this change, an admin can simply select All under the recordTypes field to apply the custom retention policy to all existing and future recordTypes.
What you need to do to prepare:
To apply a custom retention policy to all recordType logs, an admin can simply select All under the recordTypes field to apply the custom retention policy to all existing and future recordTypes.
More information is available here: Manage audit log retention policies | Microsoft Learn