Forum Discussion

Steven_Turnbull's avatar
Steven_Turnbull
Copper Contributor
Mar 29, 2023

DLP Exception for outside my organisation

I have created a Sensitivity label and am using this as a condition in a DLP rule to say if we see this label, don't allow the content to go outside the tenant. It looks like this:

 

Main tenant being abc.com for example

 

Rule DLP Sensitivity Restrict SENSITIVE Content
Conditions
Content contains any of these sensitivity labels: SENSITIVE
And
Content is shared from Microsoft 365 with people outside my organization
Actions
Notify users with email and policy tips
Restrict access to the content for external users
Send alerts to Administrator
 
We have Mutiple tenants in M365 (abc.com & xyz.com), and I want an exception that will allow the SENSITIVE label to pass to xyz.com, and of course abc.com, but no others.
 
How would you configure this?
  • Steven_Turnbull 

     

    Found the solution, my issues was the level of control is only available if I'm targeting exchange, but I had SharePoint and OneDrive included. Removing those I can build the exceptions fine.

  • Steven_Turnbull's avatar
    Steven_Turnbull
    Copper Contributor

    Steven_Turnbull 

     

    Found the solution, my issues was the level of control is only available if I'm targeting exchange, but I had SharePoint and OneDrive included. Removing those I can build the exceptions fine.

Resources