Forum Discussion

badaz06's avatar
badaz06
Copper Contributor
Feb 28, 2024

Copilot Grayed out just in Windows Outlook if encryption label applied?

I have a few sensitivity labels in play (older AIP and newer labels with Unified Groups).  An odd behavior is that when I'm in Outlook on Windows 10-64 and using a label with no encryption, I can use...
badaz06's avatar
badaz06
Copper Contributor
Some additional updates: I was mistaken about it working on office.com....I realized that if I have one of the co-pilot functions started (like coaching or the re-writing function) and then enable the encryption, the Co-Pilot icon grays out yet the process continues.

So odd.
Chris_Ferraro's avatar
Chris_Ferraro
Steel Contributor
Mar 01, 2024
I believe it is the bottom of this section:
https://learn.microsoft.com/en-us/purview/ai-microsoft-purview#microsoft-purview-protection-without-sensitivity-labels

Some helpful areas to research are the overall page above as well as this:
https://learn.microsoft.com/en-us/purview/sensitivity-labels#sensitivity-labels-and-microsoft-copilot-for-microsoft-365

I believe boils down to the usage rights on the label. I am not sure it can have extract + view abilities in the label for an email as opposed to Word.

Not my area of expertise but some of the understanding I have from working with a security architect from a vendor my company is using to help with Copilot.
  • badaz06's avatar
    badaz06
    Copper Contributor
    Mar 01, 2024

    Chris_Ferraro 

    Appreciate the feedback, and just FYI I have a case open with MS as well.

     

    I saw the extract rights and such and verified that the label being applied does have this.  The other potential issue I verified was that UnifiedGroup was part of the label - in fact I created a new label and via powershell verified the UFG was there.  One of my concerns was the the initial encrypted label was created under AIP (before MIP existed) and was transformed to the new version...although there are differences that Support can't/hasn't told me what the differences are, even though via powershell I can plainly see differences.

    The issue occurs when I create a new email (we default to an internal "encrypted" label).  When I do so, CoPilot is gray.  When I change the label to Public, it turns back on.

    According to what Support has come back with so, this is normal.  They also stipulated that CoPilot works only on Windows Machines, which, having both a Mac and a Windows box, I have assured them that Copilot is indeed working quite fine on my Mac AND works with when the "encrypted" label is applied.

    If anyone has suggestions, I'm all ears, and will keep this post updated as I learn more.

    Thank you Chris!

    • badaz06's avatar
      badaz06
      Copper Contributor
      Mar 25, 2024
      Just as a follow-up, Support now agrees that what I am seeing is real. Essentially I've drawn the conclusion that outlook on a windows box applies the encryption immediately (disabling CoPilot) while on a Mac not until the email is transmitted. Support has said they're working to make the experience uniform...which I *HOPE* is to make the Mac experience available on Windows, and have asked, but have not been told anything definitive.

Resources