Microsoft Purview Workload Content roles in Entra & new PIM alerts
Purview Workload Content roles Entra ID are now automatically synced from Microsoft Purview into Entra, causing unexpected PIM alerts and audit log activity. This MC1199765 update creates direct role mapping between Purview and Entra ID. Here’s what’s changing, why it matters, and what you’ll see in your tenant.
19 minutes ago4 min read
Migrating to Microsoft Purview sensitivity label groups: what I learned
Sensitivity label groups are replacing parent and child labels in Microsoft Purview. This post covers what changes, how the migration works, what Microsoft documents, what I have seen in testing and production, and why I would be careful before migrating widely adopted labels in a live environment.
6 days ago7 min read
AI governance overview: stop panicking and fix the basics
A practical AI governance overview for organisations that are either rushing into AI or panicking over every new feature. This post explains why strong fundamentals, identity, device security, permissions and data protection matter more than chasing every shiny AI setting.
May 56 min read
Blocking Bring Your Own Copilot (BYOC) on work documents
Blocking bring your own Copilot on work documents is something more organisations should be looking at. Microsoft allows multiple account access by default unless you explicitly block it, which means employees may be able to use personal Copilot entitlements on work files in supported Microsoft 365 apps. This post explains what BYOC is, why it matters, what Microsoft allows by default, what the risks look like, and how to block it if it does not fit your governance model.
Apr 287 min read
