Endpoint Data Loss Prevention (DLP) permission (under **Data Security**) controls the policies and configurations that govern how sensitive data is handled when it moves across endpoints.
Endpoint DLP includes Data-in-motion rules, Endpoint Applications, Endpoint Application Groups, and Endpoint DLP settings.
* [data-in-motion-rules](data-security-endpoint-dlp-permissions/data-in-motion-rules "mention")
* [endpoint-applications](data-security-endpoint-dlp-permissions/endpoint-applications "mention")
* [endpoint-applications-groups](data-security-endpoint-dlp-permissions/endpoint-applications-groups "mention")
* [endpoint-dlp-settings](data-security-endpoint-dlp-permissions/endpoint-dlp-settings "mention")
### License
Requires the Data Loss Prevention (DLP) add-on plus Enterprise Runtime Security (XDR), Cortex XSIAM Enterprise, or Cortex XSIAM Premium license.