Forum Discussion
Auto-labelling does not support content marking
We’ve hit a limitation with service-side auto-labeling in Purview: when a sensitivity label is applied by an auto-labeling policy, any configured visual markings (headers, footers, watermarks) are not written into the document.
A further complication is that there is a requirement which includes a custom script that applies sensitivity labels at the folder level and relies on the service-side engine to cascade those labels down to the folder's contents. This means automation isn't just a 'nice to have' for scale — it is a core dependency of our labeling architecture. The inability to also apply visual markings through this same automated path creates a direct gap in our compliance posture and the MS solution.
For environments where visible classification is mandated by regulation, this effectively means we can’t rely on service-side auto-labeling alone, which is a big constraint.
I’d really appreciate:
- Any confirmed best practices/workarounds others are using, and
- Input from the product team on whether server-side visual markings tied to auto-labeling are being considered / and what to consider meeting this requirement as an alternative
No. Not with auto-labelling alone.
The MSFT service-side auto-labelling applies sensitivity labels to your files, but it won't add headers, footers, or watermarks. This is confirmed in Microsoft's own documentation: auto-labelling only handles metadata and encryption, leaving visual markings for later. There's a detailed explanation of why this happens: essentially, the service never actually opens your documents.
The critical thing here is that the document must be opened for the visual markings to get embedded into the file itself.
A potential workaround is to use Power Automate Desktop.
It can open files on desktop but the caveat is that you'll have to sync all the files in a local computer where PAD is installed then let it iterate through the documents.
Here's the reference to how to do that in Word:https://learn.microsoft.com/en-us/power-automate/desktop-flows/actions-reference/word.
And in Excel:https://learn.microsoft.com/en-us/power-automate/desktop-flows/actions-reference/excel
Alternatively, there are 3rd party solutions like Automation Anywhere (RPA) that can do this.
1 Reply
No. Not with auto-labelling alone.
The MSFT service-side auto-labelling applies sensitivity labels to your files, but it won't add headers, footers, or watermarks. This is confirmed in Microsoft's own documentation: auto-labelling only handles metadata and encryption, leaving visual markings for later. There's a detailed explanation of why this happens: essentially, the service never actually opens your documents.
The critical thing here is that the document must be opened for the visual markings to get embedded into the file itself.
A potential workaround is to use Power Automate Desktop.
It can open files on desktop but the caveat is that you'll have to sync all the files in a local computer where PAD is installed then let it iterate through the documents.
Here's the reference to how to do that in Word:https://learn.microsoft.com/en-us/power-automate/desktop-flows/actions-reference/word.
And in Excel:https://learn.microsoft.com/en-us/power-automate/desktop-flows/actions-reference/excel
Alternatively, there are 3rd party solutions like Automation Anywhere (RPA) that can do this.