Forum Discussion

Dean_Gross's avatar
Dean_Gross
Silver Contributor
Oct 24, 2019

Apply Sensitivity Label to Site

I am seeing the ability to assign a Sensitivity Label to a SharePoint site in the SPO Admin Center, on the Information Panel, but none of my labels are available for selection. Can anyone tell me how to enable this functionality. I can't find anything in the SPO or AIP docs.

Sites
    • nigelss's avatar
      nigelss
      Copper Contributor
      Oct 19, 2021

      SaraFennah, Dean_Gross , any luck getting this configured? 

       

      Do you need to use PowerShell such as Set-SPOSite -SensitivityLabel <guid> ?

       

      Cheers,

      Nigel 

      • nigelss's avatar
        nigelss
        Copper Contributor
        Oct 19, 2021

        It could be due to slow replication between Microsoft 365, AzureAD and SharePoint.

        https://github.com/MicrosoftDocs/microsoft-365-docs/issues/4611

        You can configure Labels on Teams / Office365 groups from the AzureAD Portal once the environment has been set up correctly.

         

        Import-Module ExchangeOnlineManagement
Connect-ExchangeOnline -UserPrincipalName <upn>
Test-IRMConfiguration -Sender <email> -Recipient <email>

Import-Module AIPService
Connect-AIPService
Set-AipServiceOnboardingControlPolicy -UseRmsUserLicense $True
Enable-AipService
Get-AipService

Import-Module ExchangeOnlineManagement
Connect-IPPSSession -UserPrincipalName <upn>
Get-Label | Select-Object -Property Name,GUID
Disconnect-ExchangeOnline

Import-Module AzureADPreview
Connect-AzureAD

$setting = (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ)
$template = Get-AzureADDirectorySettingTemplate -Id 62375ab9-6b52-47ed-826b-58e47e0e304b
$setting = $template.CreateDirectorySetting()
$Setting["EnableMIPLabels"] = "True"
New-AzureADDirectorySetting -DirectorySetting $setting

Execute-AzureAdLabelSync

Import-Module -Name Microsoft.Online.SharePoint.PowerShell
Connect-SPOService -Url https://<site>-admin.sharepoint.com -Credential <upn>
Set-SPOTenant -EnableAIPIntegration $true

         

        You also need to configure the Sensitivity Labels to be used in Groups/Teams, publish those labels, sync those labels, and potentially wait up for 24 hours for them to appear in AzureAD.

         

        Cheers,

        Nigel 

Resources