MCAS Protected Files and custom permission

%3CLINGO-SUB%20id%3D%22lingo-sub-782163%22%20slang%3D%22en-US%22%3EMCAS%20Protected%20Files%20and%20custom%20permission%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-782163%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20scenario-%20A%20job%20converts%20a%20excel%20doc%20to%20PDF%20and%20places%20them%20in%20a%20sharepoint%20site%20.%20Cloud%20app%20security%20encrypts%20them%20(attached%20a%20label)%20and%20when%20user%20downloads%20the%20PDF%20then%20user%20cannot%20protect%20with%20a%20'custom%20permission'.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20any%20way%20we%20can%20have%20this%20user%20do%20this%20without%20elevating%20the%20permission%20(all%20users%20are%20reviewers)%3FAny%20code%2FAPI%20exist%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20help%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3EJag%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-782163%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EData%20Protection%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-783888%22%20slang%3D%22en-US%22%3ERe%3A%20MCAS%20Protected%20Files%20and%20custom%20permission%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-783888%22%20slang%3D%22en-US%22%3EHi%20Jagadish%2C%3CBR%20%2F%3EOnce%20a%20label%20is%20applied%20by%20MCAS%20then%20MCAS%20is%20considered%20as%20the%20owner%20for%20the%20label%20(or%20the%20orgs%20superadmin).%3CBR%20%2F%3EThe%20only%20way%20to%20overcome%20this%20is%20to%20make%20sure%20the%20label%20itself%20has%20permission%20for%20the%20user%20to%20make%20changes%20after%20it%20was%20applied%2C%20through%20the%20label%20permission%20management.%3CBR%20%2F%3E%3CBR%20%2F%3ERegards%2C%3CBR%20%2F%3EDima%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi 

 

My scenario- A job converts a excel doc to PDF and places them in a sharepoint site . Cloud app security encrypts them (attached a label) and when user downloads the PDF then user cannot protect with a 'custom permission'.

 

Is there any way we can have this user do this without elevating the permission (all users are reviewers)?Any code/API exist ?

 

Please help

 

Thanks

Jag 

1 Reply
Highlighted
Hi Jagadish,
Once a label is applied by MCAS then MCAS is considered as the owner for the label (or the orgs superadmin).
The only way to overcome this is to make sure the label itself has permission for the user to make changes after it was applied, through the label permission management.

Regards,
Dima