It's possible for content to match several rules in a DLP policy, but only the policy tip from the most restrictive, highest-priority rule will be shown. For example, a policy tip from a rule that blocks access to content will be shown over a policy tip from a rule that simply sends a notification. This prevents people from seeing a cascade of policy tips.
https://learn.microsoft.com/en-us/microsoft-365/compliance/use-notifications-and-policy- tips?view=o365-worldwide

Microsoft Purview Security Reader role group and also Insider Risk Management Investigators.
Note:
Permissions for Data Security Posture Management for AI
Members of your security and compliance teams who are responsible for managing AI apps in the Microsoft Purview Data Security Posture Management for AI need appropriate permissions when they sign in to the Microsoft Purview portal.
Permissions by activities

Note 2:
Roles and role groups that can view, create, and edit in Data Security Posture Management for AI:
Microsoft Entra Compliance Administrator role
Microsoft Entra Global Administrator role
Microsoft Purview Compliance Administrator role group
Roles and role groups that can view-only in Data Security Posture Management for AI:
*-> Microsoft Purview Security Reader role group
Purview Data Security AI Viewer role
AI Administrator role from Entra
Purview Data Security AI Content Viewer role for AI interactions only
Purview Data Security Content Explorer Content Viewer role for AI interactions and file details for data risk assessments only Reference:
https://learn.microsoft.com/en-us/purview/ai-microsoft-purview-permissions

Correct:
* OneDrive accounts
Incorrect:
* Microsoft Defender for Cloud Apps
* Microsoft Entra security groups
* on-premises repositories
* Teams channel messages
* Teams chats
Note:
A Microsoft 365 auto-labeling policy can be applied to Exchange mailboxes, SharePoint sites, and OneDrive accounts. It can also be applied to content within Teams and other Microsoft 365 Groups, as well as Azure services like Azure SQL and Azure Cosmos DB.
Exchange Online: Applies to emails in transit.
SharePoint: Applies to documents stored at rest in SharePoint sites.
OneDrive: Applies to documents stored at rest in OneDrive accounts.
Teams: Applies to documents stored in the SharePoint sites associated with a Team.
Azure and other data sources: Can be extended to apply to data stored in services like Azure SQL, Azure Cosmos DB, and more.
Reference:
https://learn.microsoft.com/en-us/purview/apply-sensitivity-label-automatically

* Content is shared from Microsoft 365
This rule will detect if one of your employees is sharing sensitive info outside of your organization.
* Content contains
Messages or documents that contain sensitive information as defined by Microsoft Purview Data Loss Prevention (DLP) policies.
Reference:
https://learn.microsoft.com/en-us/purview/dlp-exchange-conditions-and-actions

Explanation:
Box 1: Yes
Note: Key tasks of the SharePoint admin
Here are some of the key tasks users can do when they are assigned to the SharePoint admin role:
Create sites
Delete sites
Manage sharing settings at the organization level
Add and remove site admins
Manage site storage limits
Box 2: No
File1.text contains 3 IP addresses.
Box 3: Yes
File2.docx contains only 1 IP address.