Відео

Hi @tc-cm5ml, I need to start taking note, my idea is start soon with some short videos covering different topics, showing quickly how to do some actions, and I have several topics to cover, like that one.

Hi @tc-cm5ml, Data Map is the solution to enroll your different Data Sources and get the information from all of them, with Data Catalog you can create a kind of big Data Dictionary, is thought to data management, where sensitive data is located, which are the different sources, and permit to reuse data sources in different projects, getting duplicate information.

@kazdemos great that makes sense

Hi @tc-cm5ml, normally once a month I'm doing Public Webinars, you can subscribe to my Distribution List adding your email in this form forms.microsoft.com/r/Ma6rQbmhsU Next webinar, will be on January 16 and I'll be talking about Endpoint DLP.

@kazdemos Thanks a lot!!

@@tc-cm5ml you're welcome, happy holidays.

@@kazdemos Happy holidays and a very happy new year!!

Hi @arindamnath1233 you can add your email in this form forms.microsoft.com/r/Ma6rQbmhsU I send an invitation every time that I have a new webinar.

@@kazdemos Thanks. I have added my email address. And by the way, the session is really in depth and insightful.

@@arindamnath1233 thanks a lot for the feedback, I hope next week set a new date on January for another Public session.

Please can you expand your idea?

@@kazdemos Hey, thanks for the response. Currently, I have Azure-based Tech Stack, in which I have registered the MSSQL database, Azure Blob Storages, Gen2 Storages, and Databricks Unity Catalog. Whenever a user wants read/write access to a data source, it can be a file in a storage account, a table within the database, an entire schema with the database, or a table inside the Databricks Unity Catalog. How can we take advantage of Purview and make this data access into an automated workflow? The data consumer will come to Purview and search for the desired data asset inside the Purview and request access within Purview. There are a couple of videos explaining this, but none of them have covered an end-to-end process for setting up this kind of workflow. Also, what changes need to be done at the end of Azure AD side, database ends to make this work, what will happen to the existing grants for the users that are already there in the database, and how one can revoke the access from Purview. Thanks :)

@@kazdemos Hey, thanks for the response. Currently, I have Azure-based Tech Stack, in which I have registered the MSSQL database, Azure Blob Storages, Gen2 Storages, and Databricks Unity Catalog. Whenever a user wants to read/write access to a data source, it can be a file in a storage account, a table within the MSSQL database, an entire schema with the MSSQL database, or a table inside the Databricks Unity Catalog. How can we take advantage of Purview and make this data access and automated workflow? The data consumer will come to Purview and search for the desired data asset inside the Purview and request access within Purview. There are a couple of videos explaining this, but none of them have covered an end-to-end process for setting up this kind of workflow. Also, what changes need to be done at the end of Azure AD side, database ends to make this work, what will happen to the existing grants for the users that are already there in the database, and how one can revoke the access from Purview. Thanks :)

Hi, thanks for reaching out to me about this, if you want formal training we can talk about it. In the current company where I work we offer that kind of service, let me know if you are interested and I can share my email.

Please share your email

@@vipuldabhi6971 Sebastian.zamorano@synergyadvisors.biz

@@kazdemos mail sent

Normally that kind of error can be related that some activity was not did it previously, or something is not available yet. After you saw the error, close the pop-up, and go to "Transform Data" menu, on the left go through all the tables to identify which one is the one with the issue, and the we can continue resolving. You can find me on LinkedIn and we can chat there, this is my profile www.linkedin.com/in/profesorkaz

1drv.ms/p/s!ApnygQKLKvF_qZ0XlpI0tELCy2jlGQ?e=5ApVK0 done

Thanks for the feedback, maybe a I need to open a Patreon or something similar, nevertheless, if you can share with others that can be awesome, that help me to reach more people.

Thanks for the patience, nevertheless, you can always find MPARR through any search engine using MPARR as a key. Here is the link github.com/microsoft/Microsoft-Purview-Advanced-Rich-Reports-MPARR-Collector And here another version for quick scan www.linkedin.com/posts/profesorkaz_microsoft365-m365-mparr-activity-7215129680960438272--fTs

Normally, to avoid that kind of behavior, when you share with organizations that are completely on-premises or use 3rd party Office solutions. The best solution that I find it is implement OTP and disable Social Sign-in, that is at OME configuration. That forces to end users connect to a captive web portal and see all the information there, that include protected attachments.

Can you validate if at least the scripts "MPARR-GetRMSData.ps1" and "MPARR-GetTrackingRMSData.ps1" are avaialble under the "ConfigFiles" folder? Additionally, more if you are using Windows Server, is recommended to sign the scripts.

@@kazdemos should we be running these scripts or what ?

Those scripts are called in background, happens that the RMS API doesn't support with PowerShell 7, for that same reason the main script MPARR_RMSData call the other 2 scripts running it using PowerShell 5 to call that API.

MPARR creates the tables when certain information is collected, in this case only if you have some DLP rule matches that table will get info and the table will be created.

@@kazdemos the issue is if no information in tenant and the table doesn’t create the template still looks for it then errors ?

Please open an issue through GitHub page to have the capability to share images.

Hi @samv5876 can you please extend in your requirements. In another session I explained how to build Power BI reports from scratch, you can see here ua-cam.com/video/sSbyTf4UXVU/v-deo.html

Hi Kaz, are you contactable via teams by chance ?

@@samv5876 you can find me on LinkedIn LinkedIn.com/in/profesorkaz

@@kazdemos got an error message with entra users i cant run the script on my demo tenant its fine but on a production environment it fails

Can you please open an issue under GitHub page to share a screenshot about the error.

Was a pleasure for me.

Thanks for the feedback, I´m sharing your message with Nabil.

@@kazdemos Also eagerly looking forward to your session on Endpoint DLP and other topics such as Data Lifecycle Management, Insider Risk Management, Communication Compliance, eDiscovery and Information Barriers. Your demos and from the field notes are gold mines!!!

Thank you for the feedback ! We will prepare something accordingly 👌🏼

Thanks for your feedback, much appreciated.

Thanks! 👍

I´m not totally clear with that name, nevertheless, if you can extend I can try to do my best to see if I have that with another name.

​@@kazdemos in 1:33.33 time in the video you open a dlp test form. for testing the DLP SIT.

On the same video at the begins I explain how to get that tool, it's a PowerShell module, you can install using: Install-Module -Name InformationProtectionHarness.PowershellGalleryModule Then you can call that PowerShell module in this way: Initialize-DlpHarness -Verbose The script will be required your credentials at least as a Compliance Administrator to connect.

@@kazdemos thanks 🙏

Thanks for the patience, let me share during this week some information that can be helpful in the same GitHub site. Are some easy ways to start understanding logs and how to use it.

Thanks for the patience please check this link github.com/microsoft/Microsoft-Purview-Advanced-Rich-Reports-MPARR-Collector/blob/main/Kusto%20Queries/HowToUseMPARRLogs.md

@@kazdemos sorry to bother you I need to filter logs before download to log analytics like there are multiple logs which I don’t want to be downloaded or export to log analytic to save costing and space

Please check this new documentation github.com/microsoft/Microsoft-Purview-Advanced-Rich-Reports-MPARR-Collector/blob/main/About%20MPARR/How%20to%20filter%20activities%20with%20MPARR.md

I'll add some additional information to share, next week for sure

@@kazdemos have you had a chance to upload them somewhere?

@@dlgross1 Hi Dean, let me check what can I find? I know that I was sharing past week the diagrams used in this session.

Thanks

Please open an issue or comment on the MPARR GitHub page to share some screenshots and follow this point with more details

Please contact me through GitHub to share a screenshot with the error. Https://aka.ms/MPARR-GitHub

@@kazdemos Hi, thank you. I have posted in the Discussion "Error installing MPARR #61". Please, let me know if you can see it.

1drv.ms/x/s!ApnygQKLKvF_qLEGobKMK95KCkK74g?e=81StzA done

@@kazdemos Thanks Kaz for prompt response.. is this the Microsoft official calculator or created by some third party ?

@@donniedarko4801 was created for the Product Group as a reference, are too many variables, nevertheless helps to have an idea.

@@kazdemos Thanks Mate

Yes, any time, you can contact me through LinkedIn

Thanks for the feedback, you can register to another session that we will do on May 16 you can register at aka.ms/KD-Events is about sensitivity labels

My pleasure.

Thanks we really appreciate your feedback.

If you want to be aware about new webinars, you can subscribe adding your email to this form forms.microsoft.com/r/Ma6rQbmhsU

When the reports are created exist a way to anonymize all the data, in that order of ideas and additional step will be required to accomplish that requirement.

Glad to share, thanks for the feedback.

Please contact me through the GitHub portal to see your case, you are the first with problems to implement.

I really appreciate that you liked

Are the original queries used to build the functions, I'll release soon a video explaining part of that.

When you use the MPARR application capturing the data, to consume from Power BI, not admin roles are needed. Exist 2 scripts that need elevated privileges to be executed, that permissions can be added to the Microsoft Entra App directly, or you need someone with Compliance Administrator role to execute those scripts, MPARR-LabelData.ps1 and MPARR-SITData.ps1. I'll share less privileges that can be used to execute those scripts.

Thanks and please share your experience.

Thanks

I'll check, thanks for letting me know.

Please check again, I just tested in another machine and is working fine 1drv.ms/b/s!ApnygQKLKvF_qKlGr1D8Eh2eZUIORw?e=SddinU

@@kazdemos, yes that link works. Its cutoff in the original description. Which Dynamics? CRM, BC, or F&O?

The old AIP Scanner was sending the data directly to Logs Analytics, that was deprecated, with MPARR we are taking the data from the Office 365 Management API where the data is located now, and we are sending back to Logs Analytics workspace.

@@kazdemos I just saw your GitHub repository. Thank you for that. Clients always complain about Scanner reports. Activity Explorer isn’t sufficient to show data owners about their data. I’m in a project where we have been importing the CSVs into PowerBI due to Activity Explorer does not show the last modified date for a Scanner file discovered. I will implement MPARR in my Dev Tenant. I’m excited about ingest the Log Analytics back again.

@@RenanBlancoLopes MPARR can works for you and simplify that activity

You can follow up at LinkedIn, aka.ms/MPARR-LinkedIn all the news are published there.