Forum Discussion

  • micheleariis's avatar
    micheleariis
    Steel Contributor

    Curious_Kevin16 Here's a step-by-step guide on how to do this with the latest updates.

    Step-by-Step Guide to Enable Container Support in Microsoft Purview

     

    1. Prerequisites
    Make sure you have the following prerequisites in place:

    Microsoft 365 E5 license (or other licenses that include Microsoft Purview features).
    Global Admin or Compliance Admin permissions in the Microsoft 365 tenant.
    Appropriate licenses for SharePoint, Teams, and Office 365 Groups.

     

    2. Access Microsoft Purview Compliance Portal
    Navigate to the Microsoft Purview Compliance Portal: https://compliance.microsoft.com.
    Sign in with your Global Admin or Compliance Admin credentials.

     

    3. Configure Microsoft 365 Data Locations
    Before applying any container support features, ensure that all relevant services are properly configured for Microsoft Purview monitoring.

    Verify Data Location Configuration:

    From the Purview Compliance portal, go to Settings > Information Protection.
    Under Information protection, ensure that SharePoint Online, Teams, and Microsoft 365 Groups are included in the scope.
    Add SharePoint Sites, Teams, and Groups as Scoped Locations:

    In the Microsoft Purview portal, go to Settings > Scoped Locations.
    Add the specific SharePoint Online sites, Microsoft Teams, and Office 365 Groups you want to manage under the Purview compliance policies.


    4. Enable Container Support in Information Protection
    Microsoft Purview allows you to apply sensitivity labels and compliance policies to containers (like SharePoint Sites, Teams, and Groups).

    Create Sensitivity Labels for Containers:

    Go to Solutions > Information Protection > Labels.
    Click Create a label to start defining your label for containers.
    Set up label categories (like Confidential, Highly Confidential, etc.) based on your organization’s needs.
    When setting up labels, choose Settings for Groups & Sites:
    Enable Container Support for Teams, SharePoint Sites, and Groups by selecting options that apply labels to containers.
    Enable the protection of content by ensuring you apply the labels to SharePoint and OneDrive documents within these containers.
    Publish Sensitivity Labels:

    After creating the label, click Label policies.
    Publish the label to the relevant groups or entire organization to ensure it's applied.
    Ensure that Groups and Sites are selected as locations for label publishing.

     

    5. Configure Data Loss Prevention (DLP) for Containers
    If you're planning to apply DLP policies to SharePoint, Teams, or 365 Groups, follow these steps:

    Create a DLP Policy:

    In the Purview Compliance Portal, go to Data Loss Prevention > Policies.
    Click Create Policy and select Custom Policy (or use a template if applicable).
    Choose the types of sensitive information to detect (like financial data, PII, etc.).
    Define Locations for DLP:

    During the policy creation process, you can specify the locations where the policy will apply. Ensure that you select Teams chat and channel messages, SharePoint Online, OneDrive, and Microsoft 365 Groups as locations to enforce the policy.
    Specify Actions to Protect Data:

    Define actions (such as blocking, notifying, or restricting access) that will be enforced when sensitive data is detected in these containers.
    Configure notifications and incident reports for admins when a policy violation occurs.

     

    6. Monitor and Review Label and Policy Applications
    Once everything is set up:

    Monitor Policy Enforcement:

    Use the Activity Explorer and Content Explorer in the Microsoft Purview Compliance Portal to monitor how labels and policies are applied across containers like SharePoint sites and Teams.
    You can see activity related to the application of sensitivity labels and DLP rules.
    Review Compliance Reports:

    In the Reports section, review the labeling activity, policy matches, and other compliance data to ensure that your containers are properly protected.

     

    7. Optional: Enable Sensitivity Labels for Specific Sites or Teams
    If you want to enable sensitivity labels for specific SharePoint sites or Teams:

    Go to SharePoint Admin Center:

    In the Microsoft 365 Admin Center, go to Admin centers > SharePoint.
    Select Settings.
    Under Sensitivity labels, ensure that the option to use sensitivity labels for SharePoint and OneDrive content is enabled.

    Go to Teams Admin Center:
    In the Microsoft Teams Admin Center, go to Teams > Teams settings.
    Ensure that Sensitivity labeling is enabled for Teams creation and management.

     

    • SebastienPaulet's avatar
      SebastienPaulet
      MVP
      Great answer. Thank you Michele.
      I found nothing clear regarding licensing. Do you know if we need E5 (or IPG) licences for all users or just the admin who enable labels for containers?
      • micheleariis's avatar
        micheleariis
        Steel Contributor

        Hi SebastienPaulet to enable container labeling (for SharePoint Sites, Microsoft Teams, and Microsoft 365 Groups) in Microsoft Purview, all users interacting with the labeled containers will typically need appropriate licenses.
        If you're using sensitivity labels for containers (e.g., applying labels to Microsoft Teams, SharePoint Sites, or Microsoft 365 Groups), users interacting with those labeled containers need to have the appropriate licenses
        Microsoft 365 E5 or Microsoft 365 E5 Compliance licenses (or equivalent).

        Information Protection and Governance (IPG) licenses, which are part of the Microsoft 365 E5 Compliance add-on. This feature includes the ability to apply and enforce sensitivity labels for containers.
        This means all users who are members of or have access to labeled containers (like a SharePoint site or Teams group with a sensitivity label applied) need to be covered by these licenses, not just the admin who enables the feature.

         

Resources