Customize What Users See When DLP for Copilot Blocks Access to Content
Sometimes, it’s the finishing touches that make all the difference. That thought came to mind as I read message center notification MC1478467 (24 September 2026). The notification covers a small but important enhancement to the DLP policy for Microsoft 365 Copilot. The change is now available in tenants worldwide.
MC1478467 mentions Microsoft 365 Copilot data access messages. Despite the grand title, Microsoft 365 Copilot data access messages are simply the notifications Copilot displays when a DLP policy prevents access to content.
Table of Contents
Supporting Enterprise-Ready AI
Take the example shown in Figure 1 where a DLP rule blocks Copilot Chat from opening a document that’s needed to ground a prompt. DLP blocks access, and Copilot responds with a message explaining that some relevant content wasn’t included because of organizational policy.
The important thing here is the underlined hyperlink at the end of the message intended to direct users to a site to learn more about access restrictions. The new capability allows tenants to define the destination users see when they click the link. In Figure 1, the link points to an Office365ITPros.com article. Until now, tenants couldn’t change the link and users were brought to Microsoft’s public DLP documentation. Tenants cannot change the text displayed to users as this remains under Microsoft’s control.
I know it seems strange to consider such a small change to be important, but fit and finish is part of completing a job. Microsoft’s text explains: “This enhancement enables organizations to direct users to internal compliance guidance, data governance resources, or support content that is specific to their organization, while maintaining a consistent and localized user experience. This supports enterprise-ready AI by helping organizations provide policy-specific guidance when DLP policies restrict Copilot access to content.”
The custom link isn’t restricted to Copilot Chat. It works anywhere a Copilot integration or app displays a message about blocked content. A recent enhancement extends the DLP policy for Copilot beyond Microsoft 365 storage locations to cover Office files stored elsewhere.
It might be a small change, but it’s the kind of refinement that helps turn AI governance features into something users can actually understand and work with.
Adding a Custom Link to a DLP for Copilot Rule
Customizing DLP rules to display custom links in Copilot access messages is simple. The rule must be configured to display policy tips, and a new option under policy tips can be enabled to display a custom “compliance URL” (Figure 2).
Save the rule and the new link should become active within about 30 minutes. According to MC1317834, Microsoft has reduced DLP synchronization times within a tenant from roughly two hours to about 30 minutes. The change is currently in public preview and appears to be working in my tenant. General availability is scheduled for December 2026. Any attempt by Copilot to access blocked content after the updated rule becomes active results in an error message including the new link.
It’s possible that a Copilot action might generate several matches against DLP policies or rules. In this situation, Copilot displays the link from the “winning rule.” To avoid the potential for user confusion, it’s best if all DLP rules for Copilot display the same compliance information.
Delivering Good Advice to End Users
Obviously, this is an optional change. Tenants don’t have to update their DLP policies for Copilot if they are happy to have users directed to the Microsoft documentation. But it’s nice to be able to deliver focused advice that users will recognize and trust, and that’s why this is an important change.
The nice thing about generative AI tools is that they can generate information based on what’s gone before. The bad thing about generative AI tools is that they can’t create new thinking or insights about how technology works (or doesn’t). When we write the Microsoft 365 for IT Pros eBooks, we depend on hundreds of years of real-world experience, knowledge, and intuition to analyze and explain how Microsoft 365 really works. If you understand the basic principles about Purview Data Loss Prevention, you’ll be able to figure out the value of new features as Microsoft adds them to the platform. All for less than ten cups of black coffee.