Forum Discussion

DillonA2125's avatar
DillonA2125
Copper Contributor
Oct 25, 2024

Microsoft Purview - Sensitivity Auto-Label email attachments

I feel like this shouldn't be that hard. I have a shared mailbox, and all email attachments in/out of the mailbox need auto labeled. I have an auto-label policy/rule setup for email in/out of the mailbox, and it works like charm (email gets the label, but not attachment).

 

How (or is it possible) can I auto-label email attachments? I somehow cannot land on the right rule config for this.

Thanks for any direction!

  • IvanWilson's avatar
    IvanWilson
    Iron Contributor

    DillonA2125 do you mean that you want the attachments encrypted based on the email sensitivity label setting? This should be happening automatically for your Word, Excel, PowerPoint attachments.

     

    If you mean that you want the attachments to be assigned the same sensitivity label as the email, then that is different. There is a feature called "Encryption-based label matching for documents" which will apply a sensitivity label to an encrypted document if their encryption policies match and users are in the same tenant.


    If the email attachments are PDFs, you will need to run a PowerShell command Set-IRMConfiguration -EnablePdfEncryption

    • DillonA2125's avatar
      DillonA2125
      Copper Contributor

      IvanWilson Thanks for the response!  No encryption requirement, only sensitivity labels.  I would like received/sent email attachments to be automatically labeled.  I have the automatic label policy working for the email itself, but not the attachments. 

       

      For example, when the mailbox receives an email with a word document attached, the Word document should have a sensitivity label applied.  Same goes for sending a document as an attachment.

      • IvanWilson's avatar
        IvanWilson
        Iron Contributor
        As far as I know, that is not supported. The label would need to be assigned to the document before it is attached to the email or after the attachment has been downloaded.

        You can have emails inherit labels from attachments, but not the other way round.

Resources