MicrosoftMicrosoftI'm validating sensitivity labels (containers), specifically, the "Control external sharing from labeled SharePoint sites:"
Has anyone been able to make this work?
I've created/published a 'groups and sites' label that prevents guest access and 'Control external sharing from labeled SharePoint sites' and set to 'only people in your organization'. It seems to work fine to prevent owners from adding guest users to the Teams site but, it is not preventing them from going to associated sharepoint site and share specific documents with external users.
Note; i'm not selecting 'files and emails' option when I create the above label.
I'm following instructions found here.
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide
I'm trying to create a process that.... When users created a teams site labeled 'Internal', members/owners of that site can't add guest or share files to external users.
Hope you can help.
thank you.
UPDATE: Noticed that when I go to sharepoint admin and look at the site associated with the Teams site, I see that sensitivity policy says None. If I click on edit and choose the policy that I created, then everything seems to work as expected. User is no longer able to share site/files externally from that site.
So... my question is.. why is the sensitivity label policy not being applied automatically to the associated Teams site? Hope someone can help.
