Custom labeling, permission

Hi ,

pls

1)where is stored information about permission if I use custom labeling ? In the file or is after select label with custom permission replicated to azure ?

2)exist account or permission which have permission to open all labeled documents ?

3) where is pls stored temp token to read document which is used for offline  reading ? It is certifikace in user profile ?

thanx