Forum Discussion

TheOGWarren's avatar
TheOGWarren
Brass Contributor
Feb 17, 2021

MIP Document Sensitivity Labelling - Office Web Apps

Hi,

 

We have AIP enabled on our tenant and users are licenced (Azure Information Protection Premium P2) and we have enabled audit logging for AIP in Azure.

 

We have two scenarios, which we observe different logging behaviour and its perplexing.

 

  1. If we start a document within office desktop and apply a sensitivity label, we will see this event in the audit log.
  2. If we start a document within office web and apply a sensitivity label, we will not see this event in the audit log.

Is this behaviour by design that office web apps will not log label events to the audit log?  I cant find anything online that specifically speaks to office webapps (word/excel) having this issue.

 

Anyone have any ideas?

 

 

Answer: As per roadmap highlighted by mmancina auditing via office web apps isn't supported yet and is in development. Microsoft 365 Roadmap | Microsoft 365

 

 

 

 

 

  • mmancina's avatar
    mmancina
    Brass Contributor
    Hi Warren, not 100% sure, but I think audit log is part of the Labeling Client and therefore only available on office desktop.
    • TheOGWarren's avatar
      TheOGWarren
      Brass Contributor

      mmancina Yeah, that's what I was thinking also,  but decided I am being ridiculous, surely MS could not have missed this obvious "flaw".  If this is indeed the case, then there is major hole in audit logging sensitivity labelling if users don't use the desktop clients and just use the web clients, then no audit logging is available, seems a major oversight by MS.

       

      Hoping someone from MS will see this and correct us here.

Resources