> For the complete documentation index, see [llms.txt](https://docs.trustlogix.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.trustlogix.io/release-notes/2026-q3-releases/sept-2026.md). # Sept 2026 This release welcomes Oracle as a newly supported data source for access policies, brings Microsoft 365 content under sensitivity-aware governance, and makes it far easier to secure AI agents across Salesforce, Slack, Atlassian, Confluence, and GitHub. It also introduces bulk policy import, richer audit visibility, and faster, more responsive policy enforcement across the platform. **Feature List** * Oracle RBAC Support * Microsoft 365 Governance with Purview Sensitivity Labels * Expanded MCP Integrations: Salesforce, Slack, Atlassian, Confluence & GitHub * CSV Bulk Import for Row Access & Masking Policies * Console Design Modernization * Power BI Import Mode Support * Detailed Policy Evaluation History * Reference User Attributes *** #### New Features & Enhancements **Oracle Support** RBAC Policies for Oracle: Discover Oracle databases, schemas, tables, users, and roles, then author role-based access policies at the database–multi-schema or schema–multi-object level. Oracle policies support the full lifecycle — create, review, publish, deploy, enable, and disable — with deployment directly to your Oracle environment. *** **Microsoft 365 Governance** Sensitivity-Aware Policies for Microsoft 365: Register SharePoint as a data source and create access policies driven by Microsoft Purview sensitivity labels. The policy condition builder now supports Purview metadata directly, so you can target SharePoint and OneDrive content by classification. Coverage Across Microsoft 365 Apps: Sensitivity-label-based enforcement now extends to AI agent access across Word, Excel, PowerPoint, and OneDrive — including tools that retrieve content through search queries — so agents only reach content they're entitled to see. Intent-Based Access Control for Microsoft 365: Intent-Based Access Control (IBAC) now covers SharePoint and Purview-managed content, and MCP server policies and Microsoft 365 data policies can be managed together in a single, unified flow. *** **Expanded MCP Integrations** Salesforce, Slack & Atlassian as Built-In Server Types: Salesforce, Slack, and Atlassian are now first-class MCP server types. Select one during registration and TrustLogix configures the server URL and authentication endpoints for you — no manual setup required. Confluence & GitHub Integrations: Register Confluence and GitHub MCP servers through dedicated setup flows. Atlassian and Confluence support automatic client registration for faster onboarding, and GitHub supports passthrough authentication. *** **Policy & Attribute Management** CSV Bulk Import for Row Access & Masking Policies: Upload a CSV to create row access and masking policies in bulk — with automated validation, conflict detection, per-row status tracking, and a full history of past imports. Rolling out hundreds of policies now takes a single upload instead of hours of manual setup. Reference User Attributes: In Attribute Management, create reference attributes that pull values directly from a configured table in your connected data source, link them to parent attributes, and filter by them on the attribute values page — enabling richer entitlement modeling with less manual upkeep. Detailed Policy Evaluation History: Policy Evaluation History for TrustApp now shows the exact input values, policy definition, and outcome behind every decision, giving you a clear, auditable record of why access was granted or denied. Expanded Snowflake Policy Conditions: Snowflake policies now support ARRAY\_OVERLAPS and ARRAY\_CONSTRUCT functions, and role session attributes support multi-value IN conditions. Schema-Level Policy Sync Filtering: Policy Sync now supports schema-level filtering for Snowflake, Databricks, and Dremio, so you can scope synchronization to exactly the objects you care about. Tag Reference APIs: New APIs let you manage Snowflake tag references externally for near-real-time policy synchronization. MCP Servers in Template Policies: Template Access Policies now support MCP server object types and privileges. *** **Power BI** Import Mode Support: Power BI data access policies now support Import mode alongside Direct Query for user attribute tables, configurable per account. Power BI support has also been expanded with workspace-level entitlement mapping. *** **Console Design Modernization** A Cleaner, More Consistent Console: The Data Sources, Applications, Data Domains, and AI Agents pages have been redesigned with standardized tables, clickable primary columns that take you straight to the details, clear status badges, and timestamps shown in your local time zone — making it faster to scan, find, and act on what you need. *** #### Improvements Performance & Enforcement * Faster AI Agent Authorization: Agents now receive authorization for all their MCP tools in a single request at startup, and server-level policies are applied automatically to tools without their own policy — reducing latency and redundant checks. * Near-Real-Time Policy Updates: Policy and attribute changes now reach enforcement in near real time, including for Azure-hosted deployments. * Faster Guardian Agent Queries: Guardian Agent query performance has been significantly improved, with noticeably lower response times. * Faster Snowflake Policy Reviews: Tag-based row-level security and masking policy reviews now load faster, with tag changes reflected in near real time. * Faster Dashboard Loading: The Overview dashboard now loads significantly faster. Usability * Role Search: Search for roles while creating policies — especially helpful for accounts with large numbers of roles. * Streamlined Microsoft 365 Registration: A new tile-based selector makes it easy to choose which Microsoft 365 services to connect. * Clearer MCP Registration: Token and authorization endpoints are now separate fields, improving compatibility with a wider range of OAuth providers. * Standardized Policy Details: Policy details and side panels now look and behave consistently across all application policy modules. * Improved Deploy Screens: The Grant/Deploy preview selector is now more prominent and easier to find. * Sync Results Context: On-demand sync results now show each policy's owner and creator. * Alerts Page Enhancements: Risk details are now visible on the Alerts page, with searchable IP addresses. Audit, Compliance & Safeguards * Richer AI Agent Audit Logs: Evaluation audit logs now include resource type details, support filtering by user, permission, audit type, and resource, and clearly distinguish "no policy" from "deny" outcomes. * Improved Compliance Reports: Compliance reports now feature bullet-point summaries, accurate severity tagging, detailed findings for medium and low violations, and multi-framework scheduling. * Compliance in Risk Summaries: Guardian Agent risk summaries now include compliance violation details directly in the executive summary table. * Snowflake Policy Safeguards: You're now warned proactively when a Snowflake policy uses UDF sub-query patterns known to cause runtime issues. * Dremio Hierarchical Policies: Dremio hierarchical policies now resolve default schemas correctly for row-level security and masking. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.trustlogix.io/release-notes/2026-q3-releases/sept-2026.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.