diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json
index 999869d0ad57..ce60e7242802 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json
@@ -118,6 +118,9 @@
           "Get a Office ATP data connector": {
             "$ref": "./examples/dataConnectors/GetOffice365AdvancedThreatProtectionById.json"
           },
+          "Get a Office IRM data connector": {
+            "$ref": "./examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json"
+          },
           "Get a Dynamics365 data connector": {
             "$ref": "./examples/dataConnectors/GetDynamics365DataConnectorById.json"
           },
@@ -318,6 +321,9 @@
           "Check requirements for OfficeATP.": {
             "$ref": "./examples/dataConnectors/CheckRequirementsOfficeATP.json"
           },
+          "Check requirements for OfficeIRM.": {
+            "$ref": "./examples/dataConnectors/CheckRequirementsOfficeIRM.json"
+          },
           "Check requirements for Dynamics365.": {
             "$ref": "./examples/dataConnectors/CheckRequirementsDynamics365.json"
           },
@@ -475,7 +481,8 @@
       "properties": {
         "kind": {
           "$ref": "#/definitions/DataConnectorKind",
-          "description": "Describes the kind of connector to be checked."
+          "description": "Describes the kind of connector to be checked.",
+          "type": "string"
         }
       },
       "discriminator": "kind",
@@ -698,6 +705,32 @@
       "description": "OfficeATP (Office 365 Advanced Threat Protection) requirements check properties.",
       "type": "object"
     },
+    "OfficeIRMCheckRequirements": {
+      "allOf": [
+        {
+          "$ref": "#/definitions/DataConnectorsCheckRequirements"
+        }
+      ],
+      "description": "Represents OfficeIRM (Microsoft Insider Risk Management) requirements check request.",
+      "properties": {
+        "properties": {
+          "$ref": "#/definitions/OfficeIRMCheckRequirementsProperties",
+          "description": "OfficeIRM (Microsoft Insider Risk Management) requirements check properties.",
+          "x-ms-client-flatten": true
+        }
+      },
+      "type": "object",
+      "x-ms-discriminator-value": "OfficeIRM"
+    },
+    "OfficeIRMCheckRequirementsProperties": {
+      "allOf": [
+        {
+          "$ref": "#/definitions/DataConnectorTenantId"
+        }
+      ],
+      "description": "OfficeIRM (Microsoft Insider Risk Management) requirements check properties.",
+      "type": "object"
+    },
     "TICheckRequirements": {
       "allOf": [
         {
@@ -1122,7 +1155,8 @@
       "properties": {
         "kind": {
           "$ref": "#/definitions/DataConnectorKind",
-          "description": "The data connector kind"
+          "description": "The data connector kind",
+          "type": "string"
         }
       },
       "type": "object"
@@ -1168,6 +1202,7 @@
         "ThreatIntelligenceTaxii",
         "Office365",
         "OfficeATP",
+        "OfficeIRM",
         "AmazonWebServicesCloudTrail",
         "AmazonWebServicesS3",
         "AzureAdvancedThreatProtection",
@@ -1203,6 +1238,9 @@
           {
             "value": "OfficeATP"
           },
+          {
+            "value": "OfficeIRM"
+          },
           {
             "value": "AmazonWebServicesCloudTrail"
           },
@@ -1396,6 +1434,35 @@
       "description": "OfficeATP (Office 365 Advanced Threat Protection) data connector properties.",
       "type": "object"
     },
+    "OfficeIRMDataConnector": {
+      "allOf": [
+        {
+          "$ref": "#/definitions/DataConnector"
+        }
+      ],
+      "description": "Represents OfficeIRM (Microsoft Insider Risk Management) data connector.",
+      "properties": {
+        "properties": {
+          "$ref": "#/definitions/OfficeIRMDataConnectorProperties",
+          "description": "OfficeIRM (Microsoft Insider Risk Management) data connector properties.",
+          "x-ms-client-flatten": true
+        }
+      },
+      "type": "object",
+      "x-ms-discriminator-value": "OfficeIRM"
+    },
+    "OfficeIRMDataConnectorProperties": {
+      "allOf": [
+        {
+          "$ref": "#/definitions/DataConnectorTenantId"
+        },
+        {
+          "$ref": "#/definitions/DataConnectorWithAlertsProperties"
+        }
+      ],
+      "description": "OfficeIRM (Microsoft Insider Risk Management) data connector properties.",
+      "type": "object"
+    },
     "MDATPDataConnector": {
       "allOf": [
         {
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/CheckRequirementsOfficeIRM.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/CheckRequirementsOfficeIRM.json
new file mode 100644
index 000000000000..c0449a7f24f4
--- /dev/null
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/CheckRequirementsOfficeIRM.json
@@ -0,0 +1,23 @@
+{
+  "parameters": {
+    "api-version": "2021-09-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace",
+    "operationalInsightsResourceProvider": "Microsoft.OperationalInsights",
+    "DataConnectorsCheckRequirements": {
+      "kind": "OfficeIRM",
+      "properties": {
+        "tenantId": "2070ecc9-b4d5-4ae4-adaa-936fa1954fa8"
+      }
+    }
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "authorizationState": "Valid",
+        "licenseState": "Valid"
+      }
+    }
+  }
+}
diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json
new file mode 100644
index 000000000000..37c5cd7678c3
--- /dev/null
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/examples/dataConnectors/GetMicrosoftInsiderRiskManagementById.json
@@ -0,0 +1,29 @@
+{
+  "parameters": {
+    "api-version": "2021-09-01-preview",
+    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
+    "resourceGroupName": "myRg",
+    "workspaceName": "myWorkspace",
+    "operationalInsightsResourceProvider": "Microsoft.OperationalInsights",
+    "dataConnectorId": "3d3e955e-33eb-401d-89a7-251c81ddd660"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/dataConnectors/3d3e955e-33eb-401d-89a7-251c81ddd660",
+        "name": "3d3e955e-33eb-401d-89a7-251c81ddd660",
+        "type": "Microsoft.SecurityInsights/dataConnectors",
+        "kind": "OfficeIRM",
+        "etag": "\"0300bf09-0000-0000-0000-5c37296e0000\"",
+        "properties": {
+          "tenantId": "2070ecc9-b4d5-4ae4-adaa-936fa1954fa8",
+          "dataTypes": {
+            "alerts": {
+              "state": "Enabled"
+            }
+          }
+        }
+      }
+    }
+  }
+}