add exercise units

Author: riswinto

learn-pr/wwl-sci/purview-implement-manage-retention/exercise-retention-labels.yml

@@ -0,0 +1,15 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.purview-implement-manage-retention.exercise-retention-labels
+title: Exercise - Configure retention labels for financial and HR content
+metadata:
+  title: Exercise - Configure retention labels for financial and HR content
+  description: "Exercise - Configure retention labels for financial and HR content."
+  ms.date: 07/02/2025
+  author: wwlpublish
+  ms.author: riswinto
+  ms.topic: unit
+azureSandbox: false
+labModal: false
+durationInMinutes: 15
+content: |
+  [!include[](includes/exercise-retention-labels.md)]

learn-pr/wwl-sci/purview-implement-manage-retention/exercise-retention-policies.yml

@@ -0,0 +1,15 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.purview-implement-manage-retention.exercise-retention-policies
+title: Exercise - Configure static and adaptive retention policies in Microsoft Purview
+metadata:
+  title: Exercise - Configure static and adaptive retention policies in Microsoft Purview
+  description: "Exercise - Configure static and adaptive retention policies in Microsoft Purview."
+  ms.date: 07/02/2025
+  author: wwlpublish
+  ms.author: riswinto
+  ms.topic: unit
+azureSandbox: false
+labModal: false
+durationInMinutes: 15
+content: |
+  [!include[](includes/exercise-retention-policies.md)]

learn-pr/wwl-sci/purview-implement-manage-retention/includes/exercise-retention-labels.md

@@ -0,0 +1,183 @@
+Retention labels give you more control over how long individual items are kept. They're useful when content needs to be managed differently based on type, department, or business need. You can publish labels so users can apply them manually or configure them to apply automatically based on conditions.
+
+In this exercise, you create two retention labels: one for financial content and one for HR content. You publish the financial label to make it available in email and SharePoint. Then you configure the HR label to auto-apply when sensitive content is detected. Last, you configure event-based retention so that retention starts based on specific events, like an employee leaving the organization.
+
+**Estimated time to complete**: 45–60 minutes
+
+> [!IMPORTANT]
+> To complete this exercise, you need access to Microsoft Purview features through one of these Microsoft 365 licenses:
+>
+> - A Microsoft 365 E3 license is required to create and publish retention labels.
+> - A Microsoft 365 E5 license, or the E5 Information Protection and Governance add-on, is required for event-based retention and auto-apply capabilities.
+>
+> If your tenant doesn't include these features, some tasks in the exercise might not be available. You can still follow the steps to understand how the configuration works or skip any unsupported tasks.
+>
+> If you don't have access to these features, you can join the [Microsoft 365 Developer Program](https://developer.microsoft.com/microsoft-365/dev-program). This program provides a free Microsoft 365 E5 developer subscription with access to many Purview capabilities.
+
+## Create and publish a retention label for financial content
+
+Start by creating a retention label that keeps financial content for seven years, then deletes it. After creating the label, publish it to make it available to users in Exchange and SharePoint.
+
+1. In the Microsoft Purview portal, go to **Solutions** > **Data Lifecycle Management**.
+1. Select **Retention labels**.
+1. Select **+ Create a label**.
+1. On the **Name your retention label** page, enter:
+
+   - **Name**: `Financial - 7 years`
+   - **Description for admins**: `Retains financial content for 7 years, then deletes.`
+   - **Description for users**: `Use for financial records that must be kept for 7 years.`
+
+1. Select **Next**.
+1. On the **Define label settings** page, select **Retain items forever or for a specific period**, then select **Next**.
+1. On the **Define the retention period** page:
+
+   - Set the retention period to **7 years**.
+   - Start retention based on **when items were created**.
+
+1. Select **Next**.
+1. On the **Choose what happens after the retention period** page, select **Delete items automatically**, then select **Next**.
+1. On the **Review and finish** page, confirm your settings, then select **Create label**.
+1. On the **Your retention label is created** page, select **Publish this label to Microsoft 365 locations**, then select **Done**.
+1. On the **Choose retention labels to publish** page, make sure the `Financial - 7 years` label is selected, then select **Next**.
+1. On the **Policy Scope** page, leave the default selected, then select **Next**.
+1. On the **Choose the type of retention policy to create​**, select **Static**.
+1. On the **Choose where to publish labels** page, select **All locations. Includes content in Exchange email, Office 365 groups, OneDrive and SharePoint documents.**
+1. Select **Next**.
+1. On the **Name your policy** page, enter:
+
+   - **Name**: `Financial label policy`
+   - **Description**: `Applies to all locations: Exchange, Microsoft 365 Groups, OneDrive, and SharePoint.`
+
+1. Select **Next**.
+
+1. On the **Finish** page, confirm your settings, then select **Submit**.
+1. After your policy is created, select **Done**.
+
+This label and policy now apply a seven-year retention period to financial content across email and SharePoint. Users can apply the label manually to ensure content is retained and deleted according to your organization’s policies.
+
+## Create an auto-apply retention label for HR content
+
+Now create a retention label for HR content that applies automatically when specific types of information are detected. This label will apply to content that contains U.S. Social Security Numbers (SSNs), helping ensure sensitive HR records are retained even if users don’t manually apply a label.
+
+1. In the Microsoft Purview portal, go to **Solutions** > **Data Lifecycle Management**.
+1. Select **Retention labels**, then select **+ Create a label**.
+1. On the **Name your retention label** page, enter:
+
+   - **Name**: `HR - 10 years`
+   - **Description for admins**: `Applies to HR content. Retains for 10 years, then deletes.`
+   - **Description for users**: `Use for HR records that need to be kept for 10 years.`
+
+1. Select **Next**.
+1. On the **Define label settings** page, select **Retain items forever or for a specific period**, then select **Next**.
+1. On the **Define the retention period** page:
+
+   - Set the retention period to **10 years**.
+   - Start retention based on **when items were created**.
+
+1. Select **Next**.
+1. On the **Choose what happens after the retention period** page, select **Delete items automatically**, then select **Next**.
+1. On the **Review and finish** page, confirm your settings, then select **Create label**.
+1. After the label is created, select **Auto-apply this label to content**, then select **Done**.
+1. On the **Let's get started** page, enter:
+
+   - **Name**: `Auto-apply HR - SSN`
+   - **Description**: `Automatically applies the HR label to content containing SSNs.`
+
+1. Select **Next**.
+1. On the **Choose how you want to apply labels to content** page, select **Apply label automatically based on sensitive info**, then select **Next**.
+1. On the **Content that contains sensitive info** page, select a **custom** category and regulation, then select **Next**.
+1. On the **Define content that contains sensitive info** page, in the **Content contains** section, enter `US SSN` as the group name, then select the **Add** > **Sensitive info types**.
+1. In the **Sensitive info types** types flyout, search for `SSN`, then select the **U.S. Social Security Number (SSN)**.
+1. Select **Add** at the bottom of the flyout, then select **Next** on the **Define content that contains sensitive info** page.
+1. On the **Policy Scope** page, leave the default selected, then select **Next**.
+1. On the **Choose the type of retention policy to create** page, select **Static**, then select **Next**.
+1. On the **Choose locations** page, select:
+
+    - **Exchange mailboxes**
+    - **SharePoint classic and communication sites**
+    - **OneDrive accounts**
+
+1. Select **Next**.
+1. On the **Choose a label to auto-apply** page, make sure the **HR - 10 years** label is selected, then select **Next**.
+1. On the **Decide whether to test or run your policy** page, select **Turn on policy**, then select **Next**.
+1. On the **Review and finish** page, confirm your settings, then select **Submit**.
+1. After your policy is created, select **Done**.
+
+This auto-labeling policy now applies the HR retention label to content that contains Social Security numbers. By automating label application, you help ensure that sensitive information is consistently protected without relying on users to apply labels manually.
+
+## Configure event-based retention
+
+For some content, retention needs to start based on a specific event, such as when an employee leaves the organization or a contract is finalized. Event-based retention labels allow you to trigger the retention period only after that event occurs.
+
+In this task, you configure an event-based retention label for employee files and create a new event type to support it. This setup ensures that retention for HR documents begins only after the employee offboarding process is complete.
+
+1. In the Microsoft Purview portal, go to **Solutions** > **Data Lifecycle Management**.
+1. Select **Retention labels**, then select **+ Create a label**.
+1. On the **Name your retention label** page, enter:
+
+   - **Name**: `Employee files - 7 years`
+   - **Description for admins**: `Starts retention when an employee leaves. Keeps content for 7 years, then deletes.`
+   - **Description for users**: `Use for employee files. Retention starts after the employee leaves.`
+
+1. Select **Next**.
+1. On the **Define label settings** page, select **Retain items forever or for a specific period**, then select **Next**.
+1. On the **Define the retention period** page:
+
+   - Set the retention period to **7 years**.
+   - In the **Start retention based on** section, select **+ Create new event type**.
+   - In the **Create event type** flyout, enter:
+
+      - **Name**: `Employee departure`
+      - **Description**: `Used to trigger retention for employee-related documents.`
+      - Select **Next**.
+      - On the **Summary** page, select **Submit**, then select **Done** once your event type is created.
+
+   - Back on the **Define the retention period** page, start the retention period based on **Employee departure**.
+
+1. Select **Next**.
+1. On the **Choose what happens after the retention period** page, select **Delete items automatically**, then select **Next**.
+1. On the **Review and finish** page, confirm your settings, then select **Create label**.
+1. On the **Your retention label is created** page, select **Publish this label to Microsoft 365 locations**, then select **Done**.
+1. On the **Choose labels to publish** page, make sure the **Employee files - 7 years** label is selected, then select **Next**.
+1. On the **Policy Scope** page, leave the default selected, then select **Next**.
+1. On the **Choose the type of retention policy to create​** page, select **Static**, then select **Next**.
+1. On the **Choose where to publish labels** page, select **All locations. Includes content in Exchange email, Office 365 groups, OneDrive and SharePoint documents.**
+1. Select **Next**.
+1. On the **Name your policy** page, enter:
+
+   - **Name**: `Employee files label policy`
+   - **Description for admins**: `Makes the Employee files label available in Exchange, Microsoft 365 Groups, OneDrive, and SharePoint.`
+
+1. Select **Next**.
+1. On the **Finish** page, confirm your settings, then select **Submit**.
+1. After your policy is created, select **Done**.
+
+This label is now available to users and will trigger retention only when the Employee departure event occurs. Event-based retention gives you more control over when retention starts, especially for documents tied to key lifecycle events.
+
+## Check your work
+
+Review the labels and policies you created to make sure they're configured as expected.
+
+1. Go to **Data Lifecycle Management** > **Retention labels**.
+1. Confirm these labels are listed:
+
+   - `Financial - 7 years`
+   - `HR - 10 years`
+   - `Employee files - 7 years`
+
+1. Open each label and check that the retention duration, trigger, and action after the retention period match what you configured.
+1. Go to **Retention policies** and confirm these policies are listed:
+
+   - `Financial label policy`
+   - `Auto-apply HR - SSN`
+   - `Employee files label policy`
+
+1. Open each policy and confirm:
+
+   - The correct label is included
+   - The right Microsoft 365 locations are selected
+   - The policy type (manual, auto-apply, or event-based) matches the label
+
+1. Go to **Event types** and confirm that `Employee departure` is listed
+
+These steps help verify that each label and policy works as intended. Confirming retention durations, triggers, and scopes now can help prevent misconfigured settings from affecting real data later.

learn-pr/wwl-sci/purview-implement-manage-retention/includes/exercise-retention-policies.md

@@ -0,0 +1,138 @@
+Retention policies let you manage how long content is kept across Microsoft 365 services. In some cases, a single policy might be enough to cover your organization's needs. In others, you might need different policies for different groups of users.
+
+In this exercise, you'll create one retention policy that applies broadly across the organization and another that targets specific departments. The first policy uses a static scope to apply to common workloads. The second uses an adaptive scope that targets users based on their department attribute.
+
+**Estimated time to complete**: 30-40 minutes
+
+> [!IMPORTANT]
+> To complete this exercise, you need access to Microsoft Purview features through one of these Microsoft 365 licenses:
+>
+> - A Microsoft 365 E3 license is required to create and manage static retention policies.
+> - A Microsoft 365 E5 license, or the E5 Information Protection and Governance add-on, is required to use adaptive scopes.
+>
+> If your tenant doesn't include these features, some tasks in the exercise might not be available. You can still follow the steps to understand how the configuration works or skip any unsupported tasks.
+>
+> If you don't have access to these features, you can join the [Microsoft 365 Developer Program](https://developer.microsoft.com/microsoft-365/dev-program). This program provides a free Microsoft 365 E5 developer subscription with access to many Purview capabilities.
+
+## Create a retention policy for all users
+
+Start by creating a retention policy that applies to the most commonly used Microsoft 365 locations. This policy uses a static scope and sets a consistent retention period across mail, files, and group content.
+
+1. Navigate to [Microsoft Purview](https://purview.microsoft.com) and sign in.
+1. Select **Solutions** > **Data lifecycle management**.
+1. Expand **Policies**, then select **Retention policies**.
+1. Select **+ New retention policy**.
+1. On the **Name your retention policy** page, enter:
+
+   - **Name**: `Core retention - 5 years`
+   - **Description**: `Retains content for 5 years, then deletes. Used to meet baseline compliance needs.`
+
+1. Select **Next**.
+1. On the **Policy Scope** page, leave the default selected, then select **Next**.
+1. On the **Choose the type of retention policy to create​** page, select **Static**, then select **Next**.
+1. On the **Choose where to apply this policy** page, select:
+
+   - **Exchange mailboxes**
+   - **SharePoint classic and communication sites**
+   - **OneDrive accounts**
+   - **Microsoft 365 Groups**
+
+1. Select **Next**.
+1. On the **Decide if you want to retain content, delete it, or both** page:
+
+   - Retain items for **5 years**
+   - Start the retention period based on **when items were last modified**.
+   - Delete items automatically at the end of the retention period.
+1. Select **Next**.
+1. On the **Review and finish** page, confirm your settings, then select **Submit**.
+1. After your policy is created, select **Done**.
+
+This policy now applies a five-year retention period across your organization's core workloads.
+
+## Create an adaptive scope for legal and HR departments
+
+Now create an adaptive scope that targets users in the Legal and HR departments. This scope lets you apply retention settings to those users automatically based on their Microsoft Entra ID attributes, without assigning accounts one by one.
+
+1. In the Microsoft Purview portal, go to **Settings**.
+1. Expand **Roles and scopes**, then select **Adaptive scopes**.
+1. Select **+ Create scope**.
+1. On the **Name your adaptive policy scope** page, enter:
+
+   - **Name**: `Legal and HR departments`
+   - **Description**: `Applies to users in the Legal and HR departments.`
+
+1. Select **Next**.
+1. On the **Assign admin unit** page, leave the default selected, then select **Next**.
+1. On the **What type of scope do you want to create?​** page, select **Users**, then select **Next**.
+1. On the **Create the query to define users** page, configure the query:
+
+   - **Attribute**: Department
+   - **Operator**: is equal to
+   - **Value**: Legal
+
+1. Select **+ Add attribute**, then add:
+
+   - **Query operator**: Or
+   - **Attribute**: Department
+   - **Operator**: is equal to
+   - **Value**: HR
+
+1. Select **Next**.
+
+1. On the **Review and finish** page, confirm your settings, then select **Submit**.
+1. After your adaptive scope is created, select **Done**.
+
+The adaptive scope now targets users in either the Legal or HR department based on their Microsoft Entra ID attributes.
+
+## Create a retention policy with an adaptive scope
+
+Use the adaptive scope you created to apply a targeted retention policy. This lets you enforce different retention settings for specific departments without applying them to all users.
+
+1. Return to **Data lifecycle management** in the Microsoft Purview portal.
+1. Select **Policies** > **Retention policies**, then select **+ New retention policy**.
+1. On the **Name your retention policy** page, enter:
+
+   - **Name**: `Legal data retention`
+   - **Description**: `Applies retention settings to Legal and HR departments.`
+
+1. Select **Next**.
+1. On the **Policy Scope** page, leave the default selected, then select **Next**.
+1. On the **Choose the type of retention policy to create​** page, select **Adaptive**, then select **Next**.
+1. On the **Choose adaptive policy scopes and locations** page:
+
+   - Select **+ Add scopes**, then choose the **Legal and HR departments** scope you created earlier.
+   - Select **Add**.
+   - Under **Choose locations**, enable:
+
+     - **Exchange mailboxes**
+     - **OneDrive accounts**
+1. Select **Next**.
+1. On the **Decide if you want to retain content, delete it, or both** page, configure the retention settings:
+
+   - Retain items for **7 years**.
+   - Start the retention period based on **when items were created**.
+   - Choose to **do nothing** at the end of the retention period.
+1. Select **Next**.
+1. On the **Review and finish** page, confirm your settings, then select **Submit**.
+1. After your policy is created, select **Done**.
+
+This policy now applies a seven-year retention period to mail and files for users in the Legal and HR departments only.
+
+## Check your work
+
+To make sure everything is configured correctly, review both the policies and the adaptive scope you created.
+
+1. In the Microsoft Purview portal, go to **Data lifecycle management**, then select **Policies** > **Retention policies**.
+1. Confirm that both of the following policies appear in the list:
+
+   - `Core retention - 5 years`
+   - `Legal data retention`
+
+1. Select each policy and review the settings:
+
+   - For the **Core retention - 5 years** policy, verify that it uses a static scope and includes all main locations.
+   - For the **Legal data retention** policy, confirm that it uses an adaptive scope and applies only to Exchange mailboxes and OneDrive accounts.
+1. Go to **Settings** > **Roles and scopes** > **Adaptive scopes**.
+1. Confirm that the adaptive scope named `Legal and HR` appears and includes the department filters for Legal and HR.
+
+If everything appears as expected, you've successfully applied retention policies using both static and adaptive scopes.