AIP Policies - What determines the order fo the policies? Example?

[Franck Marteaux]

You can move AIP policies up and down. So it seems the order matters. What is an example where I would need to pay attention to the order and what does it determine?

For example my users would get 3 policies:

- the standard (global) policies für all company users (e.g. public, internal, confidential, restricted (protected))

- a department policy (Sales Restricted (protected))

- a policy allowing some users customized protection

Would this also be the recommended order?

Thanks,
Franck

[#2]

Hi @Franck Marteaux

Great question! See this article here on AIP policies

https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-scope

The critical section here -

'Scoped policies, just like labels, are ordered in the Azure portal. If a user is configured for multiple scopes, an effective policy is computed for that user before it is downloaded. According to the order of the polices, the last policy setting is applied. The labels that the user sees are from the global policy and any additional labels from scoped policies that the user belongs to'

So it looks like you have it right insofar as first level is org (global), second level is department and third level is users in that department.

This article should help you to structure your policies according to your organisation.

Hope that answers your question.

Best, Chris