How can I change the Endpoint DLP Notification for Purview

You can’t directly edit the local Endpoint DLP toast message in Purview—these are built into the client. You can only customize policy tips, email notifications, and templates from the Purview portal.

Hi Raven,
In Microsoft Purview Endpoint DLP, the local Windows toast notification only supports basic customization: you can change the Title, Content, and (optionally) configure a Hyperlink that appears as the built‑in “Get support” button. The button set and button labels aren’t customizable, so you can’t remove the “Email” button and you can’t rename “Get support” to “Learn more.” Instead, set the Hyperlink to your internal “Learn more” page and use the Title/Content text to instruct users to click Get support for learn‑more guidance.

No—Endpoint DLP toast allows only Title/Content + Get support URL; you can’t remove “Email” or rename “Get support.”
Microsoft references:

• Data Loss Prevention policy reference | Microsoft Learn — (Devices-only notification customization: title/content + hyperlink shown as “Get support”) Microsoft Learn [Data Loss...soft Learn | Learn.Microsoft.com], [Data Loss...soft Learn | Learn.Microsoft.com]
• Send email notifications and show policy tips for DLP policies | Microsoft Learn Microsoft Learn

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.

Please do not forget to "Accept Answer" and "up-vote" wherever the information provided helps you, as this can be beneficial to other community members.

Hello Raven,

For Endpoint DLP, basic customization is currently possible for the local device notification, refer to the screenshot below:

For other workloads (non‑device locations), such as Exchange, SharePoint, OneDrive, and Office apps, you can customize DLP policy tips and notification emails. You can find the available options and limitations documented here: Send email notifications and show policy tips for DLP policies | Microsoft Learn
Hope this helps!

If you found the information above helpful, please Click Yes. This will assist others in the community who encounter a similar issue, enabling them to quickly find the solution and benefit from the guidance provided.

The local toast-style notification shown on the endpoint can be customized in the Endpoint DLP policy settings in the Microsoft Purview portal.

To change that message:

1. Sign in to the Microsoft Purview portal.
2. Go to Data loss prevention > Policies.
3. Edit the Endpoint DLP policy (or rule) that is generating the notification.
4. In the rule configuration, go to the User notifications / Policy tips section for Devices.
5. Customize the notification title and content fields. These control the text that appears in the Endpoint DLP client notification on the user’s machine.
   • TITLE has a 120-character limit.
   • CONTENT has a 250-character limit.
   • You can also add a hyperlink that appears as a Get support button.
6. Optionally use parameters like %%FileName%%, %%ProcessName%%, and %%PolicyName%% in the content to make the message more specific.
7. Save and submit the policy. The updated text will appear the next time the rule is triggered on endpoints.

The email and classic policy tip text are configured separately; for the endpoint toast specifically, use the Devices-only customization described above.

References:

• Data Loss Prevention policy reference
• Configure endpoint data loss prevention settings
• Use Endpoint data loss prevention