Forum Discussion

Dean_Gross's avatar
Dean_Gross
Silver Contributor
Oct 24, 2019

Apply Sensitivity Label to Site

I am seeing the ability to assign a Sensitivity Label to a SharePoint site in the SPO Admin Center, on the Information Panel, but none of my labels are available for selection. Can anyone tell me how...
Sites
SaraFennah's avatar
SaraFennah
MVP
Nov 06, 2019

Dean_Gross - Me too.  Came here looking for answers.  Commenting to follow.

  • nigelss's avatar
    nigelss
    Copper Contributor
    Oct 19, 2021

    SaraFennah, Dean_Gross , any luck getting this configured? 

     

    Do you need to use PowerShell such as Set-SPOSite -SensitivityLabel <guid> ?

     

    Cheers,

    Nigel 

    • nigelss's avatar
      nigelss
      Copper Contributor
      Oct 19, 2021

      It could be due to slow replication between Microsoft 365, AzureAD and SharePoint.

      https://github.com/MicrosoftDocs/microsoft-365-docs/issues/4611

      You can configure Labels on Teams / Office365 groups from the AzureAD Portal once the environment has been set up correctly.

       

      Import-Module ExchangeOnlineManagement
Connect-ExchangeOnline -UserPrincipalName <upn>
Test-IRMConfiguration -Sender <email> -Recipient <email>

Import-Module AIPService
Connect-AIPService
Set-AipServiceOnboardingControlPolicy -UseRmsUserLicense $True
Enable-AipService
Get-AipService

Import-Module ExchangeOnlineManagement
Connect-IPPSSession -UserPrincipalName <upn>
Get-Label | Select-Object -Property Name,GUID
Disconnect-ExchangeOnline

Import-Module AzureADPreview
Connect-AzureAD

$setting = (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ)
$template = Get-AzureADDirectorySettingTemplate -Id 62375ab9-6b52-47ed-826b-58e47e0e304b
$setting = $template.CreateDirectorySetting()
$Setting["EnableMIPLabels"] = "True"
New-AzureADDirectorySetting -DirectorySetting $setting

Execute-AzureAdLabelSync

Import-Module -Name Microsoft.Online.SharePoint.PowerShell
Connect-SPOService -Url https://<site>-admin.sharepoint.com -Credential <upn>
Set-SPOTenant -EnableAIPIntegration $true

       

      You also need to configure the Sensitivity Labels to be used in Groups/Teams, publish those labels, sync those labels, and potentially wait up for 24 hours for them to appear in AzureAD.

       

      Cheers,

      Nigel 

      • SaraFennah's avatar
        SaraFennah
        MVP
        Oct 19, 2021
        Working for me now. As you commented. you do need to enable labels for groups & sites (lines 16-23 of the quoted script) and then sync them across Azure AD & Exchange with line 25 of the quoted script. Also make sure you have published the labels to the user accounts who are applying them

Resources