PurviewPostureAnalyzer

2.1.0

Read-only Microsoft Purview posture analyzer (modernized CAMP). Reads configuration metadata across Sensitivity Labels, DLP, Retention, Insider Risk, Audit, eDiscovery, Communication Compliance and DSPM for AI, and produces an HTML report (primary) plus a JSON export. Collectors call Get-* only; no tenant configuration is created, modified or deleted, and no content i
Read-only Microsoft Purview posture analyzer (modernized CAMP). Reads configuration metadata across Sensitivity Labels, DLP, Retention, Insider Risk, Audit, eDiscovery, Communication Compliance and DSPM for AI, and produces an HTML report (primary) plus a JSON export. Collectors call Get-* only; no tenant configuration is created, modified or deleted, and no content is collected. Requires the ExchangeOnlineManagement module for the two read-only sessions (Connect-IPPSSession and Connect-ExchangeOnline); without it, PPA stops before connecting.
Show more

Minimum PowerShell version

5.1

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name PurviewPostureAnalyzer

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name PurviewPostureAnalyzer

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

Licensed under the MIT License. Not an official Microsoft product.

Package Details

Author(s)

  • Yazar Myint

Tags

Microsoft365 Purview Compliance DLP ReadOnly CAMP Security

Functions

Connect-PurviewPostureSession Disconnect-PurviewPostureSession Invoke-PurviewPostureAnalyzer

Dependencies

This module has no dependencies.

Release Notes

v2.1.0: one-command runs via the opt-in -Connect / -Disconnect / -Show switches (-UserPrincipalName pre-fills the sign-in); client-branded reports via -LogoPath (image embedded as a base64 data URI, the report stays self-contained and offline); cross-tenant B2B guest assessments via -DelegatedOrganization with optional -AzureADAuthorizationEndpointUri; clearer findings - GUID references resolved to display names across sensitivity-label policies, retention rule references, and DSPM for AI label conditions. First PowerShell Gallery release.

FileList

Version History

Version Downloads Last updated
2.1.0 (current version) 10 7/13/2026