Skip to content

Commit f9294c6

Browse files
authored
Update New-DlpComplianceRule.md
1 parent 45e1715 commit f9294c6

File tree

1 file changed

+23
-0
lines changed

1 file changed

+23
-0
lines changed

exchange/exchange-ps/exchange/New-DlpComplianceRule.md

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,7 @@ New-DlpComplianceRule [-Name] <String> -Policy <PolicyIdParameter>
5656
[-EndpointDlpBrowserRestrictions <PswsHashtable[]>]
5757
[-EndpointDlpRestrictions <PswsHashtable[]>]
5858
[-EnforcePortalAccess <Boolean>]
59+
[-EvaluateRulePerComponent <Boolean>]
5960
[-ExceptIfAccessScope <Microsoft.Office.CompliancePolicy.Tasks.AccessScope>]
6061
[-ExceptIfAnyOfRecipientAddressContainsWords <MultiValuedProperty>]
6162
[-ExceptIfAnyOfRecipientAddressMatchesPatterns <MultiValuedProperty>]
@@ -996,6 +997,28 @@ Accept pipeline input: False
996997
Accept wildcard characters: False
997998
```
998999

1000+
### -EvaluateRulePerComponent
1001+
The EvaluateRulePerComponent parameter is a DLP rule level configuration that specifies whether DLP rule match (both conditions and exceptions) should happen in the "same" email component like email body or a specific attachment ($true) or against entire envelope ($false).
1002+
1003+
For example - If your DLP rule has been configured to block email if content contains 3 or more SSN, with this parameter enabled, the email will be blocked ONLY IF the entire rule matches for the same email component, like if a) there are 3 or more SSN in email body, or b) there are 3 or more SSN in a specific attachment. The rule will not match if there are 2 SSN in email body, 1 SSN in one attachment & 2 SSN in another attachment.
1004+
1005+
Note that this setting is supported by below DLP predicates only:
1006+
1007+
- Content contains
1008+
- Attachment contains
1009+
- Attachment is not labeled
1010+
- File extension is
1011+
1012+
```yaml
1013+
Type: Boolean
1014+
Required: False
1015+
Position: Named
1016+
Default value: False
1017+
Accept pipeline input: False
1018+
Accept wildcard characters: No
1019+
Applicable: Security & Compliance
1020+
```
1021+
9991022
### -ExceptIfAccessScope
10001023
The ExceptIfAccessScopeAccessScope parameter specifies an exception for the DLP rule that's based on the access scope of the content. The rule isn't applied to content that matches the specified access scope. Valid values are:
10011024

0 commit comments

Comments
 (0)