Forum Discussion
Can AIP be used for OneDrive for Business and SharePoint Online?
Hi,
AIP can protect Office 365 services includes SharePoint Online and OneDrive for Business. AIP provides encryption and permissions for files and you've three tiers of protection for data basic, sensitive and confidential.
Check the following information:
Eli.
Make sure that you read the "important notes" section in the articles above though, as you loose a lot of functionality if you protect files with AIP directly:
When Azure Information Protection encryption is applied to files stored in Office 365, the service cannot process the contents of these files. Co-authoring, eDiscovery, search, Delve, and other collaborative features do not work. Data Loss Prevention (DLP) policies can only work with the metadata (including Office 365 labels) but not the contents of these files (such as credit card numbers within files).
It's the good old "reasoning over data" problem, and it's about time the relevant teams at Microsoft sit together on the same table and give us a better solution...
Vasil,
So if AIP enabled in SharePoint Online then all the documents that are protected.
Will lose on:
"Co-authoring, eDiscovery, search, Delve, and other collaborative features do not work."
Is my understanding is correct?
If yes, well to stop it would be stop the entire AIP for SharePoint?
If you protect files individually with AIP and store them in a SPO location, then all the functionalities listed above will not work, as SPO cannot access the content of a protected file. You can use the IRM protection feature for document libraries instead, but unfortunately it's 10 years old and very limited.
