Forum Discussion
Purview Label Permissions Priority
Hello If permissions are applied to all users and groups in the organization as 'Viewer' and to a group as 'Co-Author', What permissions will be granted to group members? The tests revealed that...
If a user is granted multiple permission entries for the same label, the highest level of rights from any of those entries applies.
So in your example:
- All users and groups → Viewer
- Specific group → Co-Author
Members of that specific group will end up with Co-Author rights, because that’s a superset of Viewer. The broader “Viewer” assignment doesn’t override or reduce the more permissive “Co-Author” assignment.
Microsoft documentation -
"When a user is granted multiple sets of rights, the user gets the union of those rights."
https://learn.microsoft.com/en-us/purview/encryption-sensitivity-labels#configure-encryption-settings-for-a-label
Please mark as resolved if this solves your issue.