Forum Discussion
AIP Policies - What determines the order fo the policies? Example?
You can move AIP policies up and down. So it seems the order matters. What is an example where I would need to pay attention to the order and what does it determine? For example my users would get 3...
Hi Franck1304
Great question! See this article here on AIP policies
https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-scope
The critical section here -
'Scoped policies, just like labels, are ordered in the Azure portal. If a user is configured for multiple scopes, an effective policy is computed for that user before it is downloaded. According to the order of the polices, the last policy setting is applied. The labels that the user sees are from the global policy and any additional labels from scoped policies that the user belongs to'
So it looks like you have it right insofar as first level is org (global), second level is department and third level is users in that department.
This article should help you to structure your policies according to your organisation.
Hope that answers your question.
Best, Chris
Great question! See this article here on AIP policies
https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-scope
The critical section here -
'Scoped policies, just like labels, are ordered in the Azure portal. If a user is configured for multiple scopes, an effective policy is computed for that user before it is downloaded. According to the order of the polices, the last policy setting is applied. The labels that the user sees are from the global policy and any additional labels from scoped policies that the user belongs to'
So it looks like you have it right insofar as first level is org (global), second level is department and third level is users in that department.
This article should help you to structure your policies according to your organisation.
Hope that answers your question.
Best, Chris