Forum Discussion

skarunditu's avatar
skarunditu
Copper Contributor
Jul 29, 2021

Sensitivity Labels for a Team and SharePoint Site - Blocking a Team owner from removing the label

Hello, 

 

Hoping I can get a justification as to why sensitivity labels for a Team and SharePoint site can be easily removed without any justification or approval by a Microsoft/Office 365 group owner. 

 

For files there is a basic level of justification to remove a sensitivity label. But there is none for a SharePoint site or a Team.  a group owner, if frustrated with the conditional access controls on the site, could just remove the label and go about their day bypassing all the admin configured controls on the group. 

 

It is going to be possible, as a Teams admin, to block a user (group owner) from removing a sensitivity label from a SharePoint site or Team once it is applied. So if a user (group owner) wants to remove it, they have to open a support ticket with justification as to why it should be removed. Especially if the site does contain sensitive data that may be corrected labeled or not labeled correctly. 

 

Reference: https://docs.microsoft.com/en-us/microsoftteams/sensitivity-labels

"

A team owner can change the sensitivity label and the privacy setting of the team at any time by going to the team, and then click Edit team.

"

Thanks. 

 

2 Replies

  • Miike's avatar
    Miike
    Brass Contributor
    Chasing this as well, would like to ensure that only admins can remove/change assigned labels.