Forum Discussion
Erik Wettergren
Jun 18, 2020Iron Contributor
How to share confidential files
Hi, not sure if this is the right channel please refer me to the rigth one if not. We would like to share a report (stored in our SharePoint Online) with specific people at one of our clients (who...
VasilMichev
Jun 19, 2020MVP
Protect the file via AIP/sensitivity label? The old IRM method is a bit outdated now...
Erik Wettergren
Jun 19, 2020Iron Contributor
Thanks Vasil, I Will look into AIP.
So, as I understand it, the method that is readily available for everyone is outdated and the preferred (aip) needs to be installed specifically for each user?
Could AIP handle our scenario:
* retain full control for all users in our org
* block all access for externals
* allow specific external users read access (But prevent them from sharing, copying, printing or taking screen shots)
* work well with sharing (so we don’t need to attach a copy)?
So, as I understand it, the method that is readily available for everyone is outdated and the preferred (aip) needs to be installed specifically for each user?
Could AIP handle our scenario:
* retain full control for all users in our org
* block all access for externals
* allow specific external users read access (But prevent them from sharing, copying, printing or taking screen shots)
* work well with sharing (so we don’t need to attach a copy)?
- Moe_KinaniJun 20, 2020Bronze ContributorMicrosoft Information Protection ( formerly AIP) should do the trick, you don’t have install AIP addin for each user as it’s part of O365 applications now. You just need to migrate your existing Labels from Azure Portal to Security Portal in O365 using Unified Labeling.
Hope this helps!
Moe
https://www.microsoft.com/en-us/us-partner-blog/2018/11/05/microsoft-information-protection-and-unified-labeling/
https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-migrate-labels- Erik WettergrenJun 20, 2020Iron ContributorThank you Moe, very helpful!
/Erik- Erik WettergrenJun 22, 2020Iron ContributorSo, I finally got to try using Microsoft Information Protection and got a test label in place.
It was completely hassle free to get it up and running and to be available in the Office Apps.
However, when actually sharing a protects file I must be doing something wrong because it is exactly the same terrible user experience for the receiver as before. A popup screen saying the file cannot be opened in the online version of Word because the file protected by IRM - and with no way to open it as it should be opened (in desktop apps).
I've worked together with MS support to do whatever is possible to ensure all docs are always opened directly in desktop apps wherever possible - but still this annoying "bug by design" occurs.