Forum Discussion
Apply Sensitivity Label to Site
I am seeing the ability to assign a Sensitivity Label to a SharePoint site in the SPO Admin Center, on the Information Panel, but none of my labels are available for selection. Can anyone tell me how...
SaraFennah, Dean_Gross , any luck getting this configured?
Do you need to use PowerShell such as Set-SPOSite -SensitivityLabel <guid> ?
Cheers,
Nigel
It could be due to slow replication between Microsoft 365, AzureAD and SharePoint.
https://github.com/MicrosoftDocs/microsoft-365-docs/issues/4611
You can configure Labels on Teams / Office365 groups from the AzureAD Portal once the environment has been set up correctly.
Import-Module ExchangeOnlineManagement
Connect-ExchangeOnline -UserPrincipalName <upn>
Test-IRMConfiguration -Sender <email> -Recipient <email>
Import-Module AIPService
Connect-AIPService
Set-AipServiceOnboardingControlPolicy -UseRmsUserLicense $True
Enable-AipService
Get-AipService
Import-Module ExchangeOnlineManagement
Connect-IPPSSession -UserPrincipalName <upn>
Get-Label | Select-Object -Property Name,GUID
Disconnect-ExchangeOnline
Import-Module AzureADPreview
Connect-AzureAD
$setting = (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ)
$template = Get-AzureADDirectorySettingTemplate -Id 62375ab9-6b52-47ed-826b-58e47e0e304b
$setting = $template.CreateDirectorySetting()
$Setting["EnableMIPLabels"] = "True"
New-AzureADDirectorySetting -DirectorySetting $setting
Execute-AzureAdLabelSync
Import-Module -Name Microsoft.Online.SharePoint.PowerShell
Connect-SPOService -Url https://<site>-admin.sharepoint.com -Credential <upn>
Set-SPOTenant -EnableAIPIntegration $true
You also need to configure the Sensitivity Labels to be used in Groups/Teams, publish those labels, sync those labels, and potentially wait up for 24 hours for them to appear in AzureAD.
Cheers,
Nigel
- Working for me now. As you commented. you do need to enable labels for groups & sites (lines 16-23 of the quoted script) and then sync them across Azure AD & Exchange with line 25 of the quoted script. Also make sure you have published the labels to the user accounts who are applying them
