Forum Discussion
How to Solution Prevent User Downgrade Sensitivity Label is changed
Hi Everyone ,
Now I use Microsoft 365 E3 + Microsoft 365 E5 Information Protection and Governance. I am looking for a way to prevent User Downgrade Sensitivity Label from High to Low. I understand that before they change the label, they have to comment and they can change it.
Is there any solution that can block this or notify from the log?
- you can try automated labeling, which is based on a certain content type, either based on keywords, like a project name, or for specific sensitive info types.
it's automatic, so even if they change it back to low, the automated part will kick in... - Technically speaking, it's not possible. Just like what Oliwer mentioned. What's your use case for this? Why do you want to prevent the label from being downgraded? If your use case is that you want to protect data inside of the labeled data, (ex. only the C-Suite can edit the data that is labelled "Confidential - CxO" then you could potentially create a label that is only visible to the C-suite group. Then add an encryption that gives the C-Suite full access while only allowing the rest of the organisation with VIEW only rights (no downloading, printing, copying ,etc). Since the rest of the organisation will not be able edit the document, they won't be able to change the label of the document.
- Hello! namlovely201180
Sadly there is no way to completely block the possibility of downgrading to a lower sensitivity label.
However you can set up an alert policy for label changes and get notified that way.
Let me know if you need further information on this
Cheers
Oliwer
