Azure Information Protection - How to identify and reassign ownership to files when staff leave?

[Gerry Morley]

Hi there - just implementing Azure information protection for the first time and I'm trying to find out the best way to deal with the scenario where a users leaves a company and the business/IT administrator wants to be able to find all the files that user had protected using AIP labels and that the ex employee was the sole owner of and then wishes to reassign the ownership of those files (either automatically or manually) to another user in the company.

I know the super user can be created who can take ownership of an AIP protected file however the problem is

(i) how do you identify all the files a particular person was the sole owner of across both an on premise file server (where scanner has been deployed) and SharePoint? 

(ii) how do then use the output from (i) and reassign ownership to all the relevant files.

Thanks

Gerry

[#2]

@Gerry Morley 

As an AIP superuser, you will be able to view all protected shares via https://track.azurerms.com/ but as far as I am aware there is no specific search mechanism to identify content which has been effectively orphaned by a departed user.

[#3]

@PeterRising Thanks for the reply.

I got told on answers.microsoft.com 

"you may use the below cmdlet to get label and protection status for all files in a folder, and export the result to a CSV file, then you can filter the RMSOwner and RMSIssuer in the CSV file.

Get-AIPFileStatus -Path \\***\***\ | Export-Csv C:\***\AIP-status.csv"

Though I haven't tested this  - it sounds like this may cover part (i)

So the next step, part (ii), would be then to figure out how to take that output and use it as input to a command to reassign ownership (if such is possible)?

[#4]

@PeterRising: Check this out: https://learn.microsoft.com/en-us/powershell/module/azureinformationprotection/get-aipfilestatus?vie...