Error Creating Data Loss Prevention Policy in Microsoft Purview for MS Fabric Assets

Luis Rodrigues 60 Reputation points
2024-12-17T20:16:52.3833333+00:00

I am encountering the following error in Microsoft Purview when attempting to create a Data Loss Prevention (DLP) policy for MS Fabric assets:

User's image

Missing parameter: 'NotifyUser'. Use of 'BlockAccessScope PerUser' requires -BlockAccess $true -AccessScope NotInOrganization -NotifyUser -NotifyAllowOverride parameters.

What steps can be taken to resolve this error?

Azure Information Protection
Azure Information Protection
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
551 questions
Microsoft Purview
Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
1,298 questions
{count} votes

Accepted answer
  1. Chandra Boorla 5,755 Reputation points Microsoft Vendor
    2024-12-18T13:58:42.4+00:00

    @Luis Rodrigues

    Greetings & Welcome to Microsoft Q&A forum! Thanks for posting your query!

    The error you are encountering suggests that you are trying to create a Data Loss Prevention (DLP) policy in Microsoft Purview for Microsoft Fabric assets, but the required parameters for the specific BlockAccessScope PerUser setting are missing.

    To resolve the error "Missing parameter: 'NotifyUser'. Use of 'BlockAccessScope PerUser' requires -BlockAccess $true -AccessScope NotInOrganization -NotifyUser -NotifyAllowOverride parameters" when creating a Data Loss Prevention (DLP) policy in Microsoft Purview for MS Fabric assets, you should ensure that you include the required parameters in your policy configuration. Specifically, make sure to set the -NotifyUser parameter to true, along with the other parameters mentioned in the error message.

    Below are the considerations to address your query:

    Review the Parameters - Ensure that you are using the correct parameters in your DLP policy command. The parameters should include:

    • -BlockAccess $true: Enables the blocking of access.
    • -AccessScope NotInOrganization: Restricts access to users outside your organization.
    • -NotifyUser: Ensures users are notified when the policy is enforced.
    • -NotifyAllowOverride: Allows exceptions under defined conditions.

    Modify the Policy Creation Command - If you are using a command-line interface or script to create the policy, modify it to include the missing parameters as specified in the error message.

    Test the Policy Creation - After making the changes, attempt to create the DLP policy again to see if the error persists.

    For more details, please refer the below documentations:

    Please refer to the similar thread to get some useful insights: https://learn.microsoft.com/en-us/answers/questions/1085036/dlp-policy

    I hope this information helps. Please do let us know if you have any further queries.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.