Forum Discussion
Auto-Apply Sensitivity Label
- Aug 04, 2025
_simon22 There are two ways to auto label content in Microsoft 365.
You have created a client-side auto-labeling for a specific sensitivity label. This will automatically apply a label based on the rules when the user creates or edits content after the auto-labeling is set up. It requires the user to interact with the content. For example, if you create a new document, edit an existing document, or send or forward an email, and it matches the rules, then it will be automatically labeled. If your file was created before auto-labeling was set up and you have not edited it since, the file is not labeled.
If you want to label content that is already saved (in SharePoint or OneDrive) or emailed (processed by Exchange Online), then you need to set up an auto-labelling policy. This does not need the user to interact with the file
Full details Automatically apply a sensitivity label to Microsoft 365 data | Microsoft Learn
Hi _simon22
The labelling configuration and condition looks good. To auto-apply the sensitivity labels based on the SIT detected (assuming the auto-labelling policy is also configured correctly), we need to take a look on the special factors on the locations where this sensitivity label is being applied.
SharePoint/OneDrive
- PDF's and Office docs (Word, PowerPoint and Excel) are supported
- Make sure that total number of auto-labelling policies in the tenant <100
- The location in which the document, you are trying to auto apply sensitivity label must be included in the auto-label policy. Verify if it's included in the location scope
- Ensure that there's no other policy that is running in conflict with the policy that applies your created label
Exchange
- If the document is present as mail attachment, the label won't be applied. If the attachment contains SIT, the label gets applied on the mail.
- Verify if that target document is already labelled manually. Auto-labelling policies can't override manual labels
- Check if there is any other label applied by other high priority label policy. If there's any, then change your label policy priority accordingly.
Hi SumanthSomireddy , thanks for replying.
I'm trying it out on sharepoint/onedrive and all the conditions you've mentioned are met.
I have two sensitivity labels. One is General and the other one is SOC- Confidential (highest priority)
Upon publishing it, the Sensitivity Label Policy holds the General Label where by default, files and emails will have this General label applied. While the SOC - Confidential (Automation Testing) Policy holds the SOC - Confidential Label and in this policy, no default sensitivity label is applied.
I forgot to mention that our license is E5 Security.
Do you think the reason why the auto applying of label is not working is due to the policies or is it because of the license requirements?