Forum Discussion
How to Monitor Changes to Sensitivity Labels Used for Container Management
Sensitivity labels are an effective way to manage containers like Teams, Microsoft 365 Groups, and SharePoint sites. Microsoft doesn’t provide any way to track changes made to labels assigned to ...
It would be great if this was an out of the box feature. It's a bit of a chore for organizations that need to lock down every Team / SharePoint except for specified sites that get group access, and make it airtight. Maybe some day.
Using a scheduled job run in Azure Automation is a good way to track changes made to groups...
I agree, however for an organization with strict rules on guest access, that's unfortunately not an airtight solution. We need to ensure users can never add a guest to a Team unless the Team is approved for guest access.
- Use sensitivity labels to block guest access and apply the labels to the groups you want to keep guest-free. Then no one except an administrator can add a new member to those groups.
- That was my original plan after reading your articles - but can't group owners change sensitivity labels?