Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community
Updates to Advanced Data Governance: Unified labeling, analytics, file plan and long-term audit log
Published Sep 25 2018 06:12 AM 18.4K Views
Microsoft

This week at Ignite we are hearing more about how customers are approaching their growing data management challenge in a cloud first world. With the growing creation of data and evolving regulatory landscape data governance capabilities are top of mind for many organizations as they continue their digital transformation journey. With new capabilities to help with the classification and governance of data, organizations are building momentum in their use of Microsoft 365 for information governance and records management.

 

The unified labeling experience in Microsoft 365 is now generally available, providing organizations with a more integrated and consistent approach to creating, configuring and automatically applying comprehensive policies to protect and govern your data across devices, apps, cloud services and on-premises locations. This new approach gives customers a single destination to create and configure data sensitivity labels for both Azure Information Protection and Office 365, so you can set up protection and retention labels and policies in the same place.

 

Sensitivity and Retention labels are now available so that you can protect and govern the same piece of content.Sensitivity and Retention labels are now available so that you can protect and govern the same piece of content.

Now you can use the advanced data governance capabilities to auto-classify your Exchange content in addition to SharePoint content.  Use the same sensitive data types, keyword or query based conditions to classify and label the email content in your organization to ensure that important data has the proper management policies in place to meet your organizational and regulatory needs.

 

In addition, we now provide the ability to map content types to retention labels by using a content type as an autoclassification query to apply retention on a content type in SharePoint online. This will help organizations with signification investments in SharePoint content types to harness the new classification capabilities in advanced data governance to ensure data is classified properly. Learn more about auto-classification here.

 

Now use content types as an auto-classification condition to apply labels to your content.Now use content types as an auto-classification condition to apply labels to your content.

 

To provide you with more insights on your label usage, we are delivering enhancements to the label activity explorer, including the addition of Exchange content and expanded insights under a new Label Analytics dashboard in the Security & Compliance Center. This update enables validation and investigation of proper classification, protection and governance of your data across content and activities. This update will be available in public preview over the next few weeks.

 

Use label analytics to validate and investigate data classification in your organization.Use label analytics to validate and investigate data classification in your organization.

 

In addition, we now make it easier for you to configure complex record retention schedules for your departments, locations and categories with the new file plan capability, now coming to preview. This new feature allows you to import or export the retention plan as a template to review, add and edit labels in bulk, so you can have more granular controls on your record retention policies. 

Learn more about this update here.

 

Use file plan to manage complex retention schedules for your content.Use file plan to manage complex retention schedules for your content.

 

Finally, we are excited to announce that long term Audit & log analysis is now in rolling out to public preview for E5 customers. Organizations that need long term access to audit logs for regulatory or security purposes will now have access for one year. This update is now available in private preview for organizations with E5 or Advanced Compliance. Learn how to enroll here.

 

Be sure to watch the check out the Data Governance breakout session at Ignite for more information and additional insights into what is coming over the next few months: BRK3223 Data Explosion in your organization? Harness intelligence to implement a comprehensive information governance strategy

7 Comments
Copper Contributor

@Nick RobinsonIs it possible to get the details of the label applied in the file or user level using powershell or REST API?

 

I tried using graph API to see if it displays labels associated with a file but it didn't - https://graph.microsoft.com/v1.0/me/drive/root/children/test.txt

 

What are the other options to programmatically get the details?

 

Microsoft

Hi @madhantce you can use the client side object model, web services based API of SharePoint to get these item properties. 

Copper Contributor

Thanks @Nick Robinson will check

Copper Contributor

@Nick Robinson Any plans to allow a retention label to be applied to only a User's Email Online Archive mailbox or specific folders within a mailbox?  Our organization is trying to change their email retention policy and wants to limit the amount of content that could be stored for longer retention in a email mailbox.  They want to apply labels but limit those labels to specific folders within a mailbox or just the Archive Mailbox and limit the size (GB) of that mailbox or folder.  

 

Copper Contributor

Hi Nick (@Nick Robinson ),

 

How can I enable Unified Labeling to add metadata to on-premise files. 

 

I only want to add the metadata so I can track the different types of confidential information. I am not looking to add headers, footers, watermarks, etc. Only metadata, which is not noticeable to the end-user but is trackable for reporting and other purposes.

Microsoft

Hi Frank - adding my colleague @Adam Bell to help out here. 

Microsoft

Thanks @Nick Robinson .

 

Hi @Frankyd 

 

You can enable MIP and use automation / the scanner to apply labels for your data at rest without involving end users. You can then leverage the sensitivity labels metadata by your DLP/CASB solutions.

 

I would suggest checking out our resources published here on the tech community to get started: https://aka.ms/MIPC/CommunityResources 

 

Cheers,

Adam

Version history
Last update:
‎May 11 2021 02:07 PM
Updated by: