Forum Discussion
Solved
way to find out which sensitivity label policies are assigned to a specific user
Is there a way to find out which sensitivity label policies, the ones that distribute the label to the user, are assigned to a specific user?
franckma Try this:
Find Out Where Users Get Sensitivity Labels From
A question about finding out which sensitivity label policy makes a label available to a user requires some PowerShell to figure out the answer with some human-friendly results. The outcome is a script that analyzes sensitivity label policies to find where a user gets their labels from. It’s another example of how useful PowerShell can be.
https://office365itpros.com/2023/08/21/sensitivity-label-publishing/
You can get the info via the InPlaceHolds property, which contains a list of all policies (including retention and sensitivity label ones). For example:
Get-Mailbox vasil | select InPlaceHolds
If the policy is scoped to all users instead, you need to check the org-wide policies, via:
Get-OrganizationConfig | select InPlaceHolds
The output will look something like "mbx1a7ad8841fb042fb939bb94965b050ac:1" - you need to remove the prefix/suffix out of it and you can match it against a Policy GUID:
Get-LabelPolicy 1a7ad8841fb042fb939bb94965b050ac
Get-Mailbox vasil | select InPlaceHolds
If the policy is scoped to all users instead, you need to check the org-wide policies, via:
Get-OrganizationConfig | select InPlaceHolds
The output will look something like "mbx1a7ad8841fb042fb939bb94965b050ac:1" - you need to remove the prefix/suffix out of it and you can match it against a Policy GUID:
Get-LabelPolicy 1a7ad8841fb042fb939bb94965b050ac