dlpCompliancePolicies

Data Loss Prevention Policies. DLP policies protecting sensitive content across workloads. The dlpCompliancePolicies entity set lives under /exchange/v1.0/dlpCompliancePolicies in the Governance & protection category.

Fact	Value
Path	`/exchange/v1.0/dlpCompliancePolicies`
Category	Governance & protection
Tier	Tier 5, Compliance
Read role	`Compliance.IPPS.Read.All` (Community)
Write role	none (read-only)
Backing cmdlets	Get-DlpCompliancePolicy, Set-DlpCompliancePolicy, New-DlpCompliancePolicy, Remove-DlpCompliancePolicy

Routes

Method	Path	Synopsis	Role	Plan
GET	`/exchange/v1.0/dlpCompliancePolicies`	List dlpCompliancePolicies entries.	`Compliance.IPPS.Read`	Community
GET	`/exchange/v1.0/dlpCompliancePolicies/{key}`	Get a single dlpCompliancePolicies entry by Identity (Name or GUID).	`Compliance.IPPS.Read`	Community

GET /exchange/v1.0/dlpCompliancePolicies

List dlpCompliancePolicies entries.

Backing cmdlet: Get-DlpCompliancePolicy. Role: Compliance.IPPS.Read (Community).

Parameter	In	Type	Description
`displayName`	query	string	Filter by exact DisplayName match.
`distributionDetail`	query	bool (switch)	Include per-location distribution detail. Slower; opt in only when needed.
`includeRulesMetadata`	query	bool (switch)	Embed per-policy rule metadata in the result (saves a follow-up call to /dlpComplianceRules).
`includeSimulationResults`	query	bool (switch)	Include simulation-mode results.
`summary`	query	bool (switch)	Return only a 1-row summary instead of full policy detail.
`includeExtendedProperties`	query	bool (switch)	Include extended properties in the result.

List Data Loss Prevention policies

Lists tenant-wide DLP policies via Get-DlpCompliancePolicy on the IPPS pool. Each policy is composed of one or more dlpComplianceRules that define detection + action logic. DLP spans Exchange, SharePoint, OneDrive, Teams, and Endpoint DLP workloads. Optional ?summary=true returns a 1-row count summary instead of full detail; ?includeRulesMetadata=true embeds rule metadata to save a follow-up call.

GET /exchange/v1.0/dlpCompliancePolicies HTTP/1.1
Authorization: Bearer {token}

HTTP/1.1 200 OK

{
  "@odata.context": "https://api.contoso.com/exchange/v1.0/$metadata#dlpCompliancePolicies(Id,Name,DisplayName,Mode,Enabled,Workload)",
  "value": [
    {
      "Id": "dlp-copilot-default",
      "Name": "Default DLP policy - Protect sensitive M365 Copilot interactions",
      "DisplayName": "Default DLP policy - Protect sensitive M365 Copilot interactions",
      "Enabled": true,
      "Mode": "TestWithNotifications",
      "Workload": "Exchange, SharePoint, OneDriveForBusiness, Applications"
    },
    {
      "Id": "dlp-devices-default",
      "Name": "Default policy for devices",
      "DisplayName": "Default policy for devices",
      "Enabled": true,
      "Mode": "Enable",
      "Workload": "Exchange, SharePoint, OneDriveForBusiness, EndpointDevices"
    }
  ]
}

GET /exchange/v1.0/dlpCompliancePolicies/{key}

Get a single dlpCompliancePolicies entry by Identity (Name or GUID).

Backing cmdlet: Get-DlpCompliancePolicy. Role: Compliance.IPPS.Read (Community).

Get a DLP compliance policy by key

Retrieve a single Data Loss Prevention compliance policy by its Identity (Name or distinguished name). Returns the policy’s mode, workload scope, priority, and location bindings.

GET /exchange/v1.0/dlpCompliancePolicies/{key} HTTP/1.1
Authorization: Bearer {token}

HTTP/1.1 200 OK

{
  "@odata.context": "http://localhost:5043/exchange/v1.0/$metadata#dlpCompliancePolicies/$entity",
  "Id": "FFO.extest.microsoft.com/Microsoft Exchange Hosted Organizations/contoso.onmicrosoft.com/Configuration/Default DLP policy - Protect sensitive M365 Copilot interactions",
  "Name": "Default DLP policy - Protect sensitive M365 Copilot interactions",
  "Identity": "FFO.extest.microsoft.com/Microsoft Exchange Hosted Organizations/contoso.onmicrosoft.com/Configuration/Default DLP policy - Protect sensitive M365 Copilot interactions",
  "DisplayName": "Default DLP policy - Protect sensitive M365 Copilot interactions",
  "Enabled": true,
  "Disabled": false,
  "Mode": "TestWithNotifications",
  "Workload": "Exchange, SharePoint, OneDriveForBusiness, Applications",
  "Priority": 2,
  "Comment": "Prevent data leakage and oversharing by restricting Microsoft 365 Copilot and agents from using sensitive info in Copilot interactions.",
  "CreatedBy": "",
  "LastModifiedBy": "",
  "ExchangeLocation": [],
  "SharePointLocation": [],
  "OneDriveLocation": [],
  "TeamsLocation": [],
  "EndpointDlpLocation": [],
  "WhenCreated": "2025-12-04T00:40:27+02:00",
  "WhenChanged": "2025-12-04T00:40:40+02:00"
}