Forum Discussion

  • Hi,

     

    AIP can protect Office 365 services includes SharePoint Online and OneDrive for Business. AIP provides encryption and permissions for files and you've three tiers of protection for data basic, sensitive and confidential.

    Check the following information:

    https://docs.microsoft.com/en-us/office365/securitycompliance/protect-sharepoint-online-files-with-azure-information-protection

    https://docs.microsoft.com/en-us/office365/securitycompliance/secure-sharepoint-online-sites-and-files 

     

    Eli.

    • VasilMichev's avatar
      VasilMichev
      MVP

      Make sure that you read the "important notes" section in the articles above though, as you loose a lot of functionality if you protect files with AIP directly:

       

      When Azure Information Protection encryption is applied to files stored in Office 365, the service cannot process the contents of these files. Co-authoring, eDiscovery, search, Delve, and other collaborative features do not work. Data Loss Prevention (DLP) policies can only work with the metadata (including Office 365 labels) but not the contents of these files (such as credit card numbers within files).

       

      It's the good old "reasoning over data" problem, and it's about time the relevant teams at Microsoft sit together on the same table and give us a better solution...

      • Admin O365's avatar
        Admin O365
        Brass Contributor

        Vasil,

         

        So if AIP enabled in SharePoint Online then all the documents that are protected.

        Will lose on:

        "Co-authoring, eDiscovery, search, Delve, and other collaborative features do not work."

         

        Is my understanding is correct?

        If yes, well to stop it would be stop the entire AIP for SharePoint?

         

         

  • Joaquin1225's avatar
    Joaquin1225
    Copper Contributor
    In SharePoint Online you can create a data loss prevention (DLP) policy to protect the sensitive documents using regular expression (RegEx) pattern matching. Can use RegEx defaults or customs.
    Is that correct?? THANKS

Resources