Forum Discussion
File or Access policy to restrict file downloads
Hi,
The only policies that are active in real time are access and session policies.
Session policies will give you control over download and other activities but it cannot redirect downloaded Files to OneDrive.
Could you explain the goal of the redirection?
If it is security related, you can label the files as they are downloaded via information protection labels and set permission as to which activities can be performed on the file once it is downloaded.
The files are encrypted in the same manner as application protection in intune.
Thx,
Shlomi
Thank you for the response. The need is; Data Loss Prevention. Looks like automatic labeling and classification is the way to go. But for some reason my MCAS is having trouble connecting with AIP and so there are NO labels showing up in my policy. I have a ticket open to get this resolved.
Hi James,
followed the steps here : https://docs.microsoft.com/en-us/cloud-app-security/azip-integration
make sure to click on grant access.
have you published the azure information protection labels?
do they appear in office apps?
Thx,
Shlomi
The labels are showing up on all office apps including admin.office.com BUT not on MCAS.
The grant permission step keeps going in a loop. Yes I am a GA and have logged in sessions in the browser where I am doing this.