Forum Discussion
Sensitivity Labels - External Sharing in SharePoint
Hey CraigWatson,
For now, this is expected behaviour. The label settings don't apply to any content in the container, only the container. In the example of external sharing, you are prohibiting adding guests to the group or site, but not its files.
Last I checked, there is currently a private preview of applying sensitivity labels automatically to files in SPO.
Thank you for the response Ru, much appreciated 🙂
I am hoping this function in private preview prevents the file/folder that has the sensitivity label applied prevents it from being shared, regardless of the External Sharing setting on Sharepoint, as currently you CAN apply a sensitivity label to a file, but it does not prevent it from being shared
This would negate the need for a powershell script that identifies all Sharepoint Sites with an "Internal" sensitivity label and setting the SPOSharingCapability to "Disabled"
Lets see what the future brings - Thanks again!
- FYI: you can tag documents with labels automatically utilizing MCAS. Really nice to do it this way: https://docs.microsoft.com/en-us/cloud-app-security/use-case-information-protection
- Hey, no problem. There are better DLP experts than me who might have other ideas to help in the meantime, but you could try enabling 'sensitive by default' although it's tenant wide. For any file uploaded it won't let it be shared until DLP processes. Then it's just a case of making sure you have DLP in place to stop sharing on sites you don't want when it does process. Not sure how this works for folders though.
