Create a new incident profile for Microsoft DLP integration

  • Freigeben Version: Australia
  • Aktualisiert 12. März 2026
  • 1 Minute Lesedauer

    • Create an incident profile in your  ServiceNow AI Platform instance to retrieve the data from the Microsoft Purview and add the data into the ServiceNow DLP IR incident table.

    Vorbereitungen

    Role required: sn_dlir.admin(Create, edit, and delete)

    sn_dlir.analyst - View (read-only)

    Warum und wann dieser Vorgang ausgeführt wird

    Configure the ServiceNow AI Platform® to retrieve the events from the Microsoft Purview. Store these events on the DLP IR Incident table on your ServiceNow® instance.

    Prozedur

    1. Navigate to Microsoft DLP integration > Incident Profile.
    2. Click New.
    3. On the form, fill the fields in the Name section.
      Tabelle : 1. Create a profile form
      Field Description
      Name Name of the profile. This field helps you to identify the profile.
      Hinweis:
      The name must be unique for each profile.
      Source The Microsoft DLP IR instance that you configured to ingest incidents. If you have multiple integration configurations, select the appropriate integration configuration record for the incident types that you are planning to ingest for the profile.
      Active Option to indicate if the profile is active. This field can only be enabled after you click the Finish field in the Scheduling section.

      When the profile is active, it implies that the  ServiceNow AI Platform is actively polling Microsoft DLP IR events based on the configuration defined in the profile.
      Order Order of the profile execution. The profile with the lowest order considered as the highest priority.

      By default, the value is 100.
      Description Unique description for the profile.

    Nächste Maßnahme

    To move to the Filtering section,  click Continue.