Purview Starter Kit

A free planning tool for IT admins who need to set up Microsoft Purview sensitivity labels and DLP policies. Instead of starting from scratch in the Purview portal, you pick a pre-built starter kit (or build your own), get a deployment plan, and export PowerShell commands you can run immediately.

There are two paths. Quick path: Go to the Starter Kits tab, click ‘Use This Kit’ on any package, and you’ll land on the Deploy tab with a ready-made plan. Custom path: Go to Build Your Own, design your labels and toggle DLP scenarios, then click ‘View Deployment Plan’. The Deploy tab shows your PowerShell commands, rollout steps, change management emails, and licence requirements — regardless of which path you took.

Each kit bundles three things: sensitivity labels (with encryption and marking pre-configured), DLP rules (tailored to your org type), and a deployment plan. Click ‘See What’s Included’ on any kit card to preview the exact labels and DLP rules before selecting it. Kits range from Small Business (3 labels, 2 DLP rules, E3) to Zero Trust (8 labels, 8 DLP rules, E5 Compliance).

Two things. First, design custom sensitivity labels — each label has 5 decisions: name, colour, encrypt, mark content, and auto-apply. You can start from a kit template and customise, or build from scratch. The Office ribbon preview shows exactly what users will see. Second, toggle on DLP scenarios — 20 pre-written rules across 4 categories (Protect Data, File Sharing, Collaboration, Endpoint). Each toggle becomes a DLP policy in your deployment plan.

Everything you need to implement your plan: a 5-step rollout timeline (create labels → publish → test DLP → monitor → enforce), PowerShell commands you can copy or download as a .ps1 file, 3 email templates (user notification, DLP announcement, admin brief), a licence requirements summary grouped by E3/E5/E5 Compliance, and cross-links to related tools like CA Policy Builder and Licensing Simplifier.

Yes. Select a kit from the Starter Kits tab, then go to Build Your Own and toggle on additional DLP scenarios. The Deploy tab merges everything — your kit’s labels and DLP rules plus any extra scenarios you toggled. The plan name shows exactly what’s included (e.g. ‘Enterprise Kit + 3 extra DLP scenarios’).

The Purview portal is where you actually deploy policies — this tool helps you plan WHAT to deploy before you get there. We give you opinionated starter packages instead of blank forms, plain English instead of compliance jargon, and a PowerShell scaffold you can copy straight into your terminal.

Basic sensitivity labels and email DLP are included in Microsoft 365 E3. Teams DLP, endpoint DLP, and auto-labeling require E5 or E5 Compliance. Each starter kit shows its licence requirement upfront, and the Deploy tab groups features by licence tier so you know exactly what works with your current plan.

100% safe. This tool runs entirely in your browser — no data is sent to any server. Your selections are saved in your browser’s local storage so they persist between visits. The PowerShell commands are generated client-side. Standard site analytics (Google Analytics, Microsoft Clarity) apply site-wide but never capture your tool-specific inputs.

Yes! We’re refining the starter kits, adding new DLP scenarios, and improving the PowerShell export based on feedback. Visit our feedback page to share ideas and suggestions.