Forum Discussion
Bhavpreet Bains
Dec 19, 2019Iron Contributor
Apply a label to items in this library
Hello, I have a library where the files will get created using a flow. I want to apply a sensitivity label to all the files that gets added in the library. So, I was thinking to use 'Apply a labe...
manfred765
Dec 15, 2022Copper Contributor
Hi all,
Finally it works in our environment to have a default sensitivity label for a Sharepoint site and auto-label all content. Here's my experience.
1. Where to find the labels - sensitivity vs. retention labels
First of all I was always expecting the sensitivity labels to show up in the menu "Library Settings > More library settings > Apply label to items in this list or library", which is wrong. This section seems to be for retention labels only, which I haven't verified so far. But it makes sense as in the compliance status of a document it shows the same "Label > None" and has the word retention in the page title. If AIP is enabled for Sharepoint (see 2. how to set it up), the sensitivity labels already show up when you click on "Library Settings". There should be a drop down box right below the description box. So, if there is no sensitivity drop down at first glance, it's definitely not configured (or there's no policy applied to that specific Sharepoint site).
2. How to configure AIP (sensitivity labels) for Sharepoint
Setting up MIP support in the AAD was not enough to make AIP work, which I had to learn on the long run. There is another setting on MSO which can be turned on as follows. Open a Powershell (as Admin) and run the following commands. Note, that you have to know the name of your production tenant to set up the feature on the proper tenant.
# load required modules (always confirm with y)
Install-Module -Name MSOnline
Install-Module -Name Microsoft.Online.SharePoint.PowerShell
# connect to the service
Connect-MsolService
# if you don’t know your tenant, use the following command to list all available tenants
get-msoldomain
# connect to SPO on the tenant on which you want to enable AIP
Connect-SPOService -url “https://YOURTENANTNAME-admin.sharepoint.com”
# enable AIP
Set-SPOTenant -EnableAIPIntegration $true
Now wait for up to 24 hours (it really took that long for me) for the label to be deployed. Activating AIP is one thing. To get it work you need to create a sensitivity label and apply it to the users and Sharepoint sites.
I hope my post was helpful. Let me know in the comments, if it worked out for you as described.
Best regards,
Manfred
Finally it works in our environment to have a default sensitivity label for a Sharepoint site and auto-label all content. Here's my experience.
1. Where to find the labels - sensitivity vs. retention labels
First of all I was always expecting the sensitivity labels to show up in the menu "Library Settings > More library settings > Apply label to items in this list or library", which is wrong. This section seems to be for retention labels only, which I haven't verified so far. But it makes sense as in the compliance status of a document it shows the same "Label > None" and has the word retention in the page title. If AIP is enabled for Sharepoint (see 2. how to set it up), the sensitivity labels already show up when you click on "Library Settings". There should be a drop down box right below the description box. So, if there is no sensitivity drop down at first glance, it's definitely not configured (or there's no policy applied to that specific Sharepoint site).
2. How to configure AIP (sensitivity labels) for Sharepoint
Setting up MIP support in the AAD was not enough to make AIP work, which I had to learn on the long run. There is another setting on MSO which can be turned on as follows. Open a Powershell (as Admin) and run the following commands. Note, that you have to know the name of your production tenant to set up the feature on the proper tenant.
# load required modules (always confirm with y)
Install-Module -Name MSOnline
Install-Module -Name Microsoft.Online.SharePoint.PowerShell
# connect to the service
Connect-MsolService
# if you don’t know your tenant, use the following command to list all available tenants
get-msoldomain
# connect to SPO on the tenant on which you want to enable AIP
Connect-SPOService -url “https://YOURTENANTNAME-admin.sharepoint.com”
# enable AIP
Set-SPOTenant -EnableAIPIntegration $true
Now wait for up to 24 hours (it really took that long for me) for the label to be deployed. Activating AIP is one thing. To get it work you need to create a sensitivity label and apply it to the users and Sharepoint sites.
I hope my post was helpful. Let me know in the comments, if it worked out for you as described.
Best regards,
Manfred
JG-Burke
Jun 21, 2023Brass Contributor
Thank you for taking the time to post a solution that will help others googling this issue.