SOLVED

Monitoring Unifiled labeling change

%3CLINGO-SUB%20id%3D%22lingo-sub-1462509%22%20slang%3D%22en-US%22%3EMonitoring%20Unifiled%20labeling%20change%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1462509%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3EIs%20there%20any%20way%20to%20monitor%20and%20notify%20if%20a%20user%20degrades%20the%20label%20classification%20or%20removes%20the%20label%20form%20a%20document.%3C%2FP%3E%3CP%3EAlso%2C%20is%20there%20any%20way%20to%20stop%20user%20from%20removing%20label%20from%20a%20file%3F%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1462509%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EData%20Protection%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1467215%22%20slang%3D%22en-US%22%3ERe%3A%20Monitoring%20Unifiled%20labeling%20change%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1467215%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F410218%22%20target%3D%22_blank%22%3E%40Nip17%3C%2FA%3E%26nbsp%3BYou%20can%20check%20that%20in%20the%26nbsp%3B%3CSPAN%3ESecurity%20%26amp%3B%20Compliance%20Center.%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22msedge_QfRW5Bi1kV.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F198994i118B6C3BDD870212%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22msedge_QfRW5Bi1kV.png%22%20alt%3D%22msedge_QfRW5Bi1kV.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22msedge_Pl919QJeEv.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F198990i529790BBF81B1913%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22msedge_Pl919QJeEv.png%22%20alt%3D%22msedge_Pl919QJeEv.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3ERead%20more%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fview-label-activity-for-documents%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fview-label-activity-for-documents%3Fview%3Do365-worldwide%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20also%20integrate%20AIP%20with%20MCAS%20and%20set%20alerts%3A%26nbsp%3B-ERR%3AREF-NOT-FOUND-%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fazip-integration%23control-file-exposure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fazip-integration%23control-file-exposure%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ETo%20prevent%20users%20from%20removing%20or%20changing%20a%20label%2C%20the%20content%20must%20already%20be%20protected%20and%20the%20protection%20permissions%20do%20not%20grant%20the%20user%20the%20Export%20or%20Full%20Control%26nbsp%3B%3C%2FSPAN%3E-ERR%3AREF-NOT-FOUND-usage%20right%3CSPAN%3E.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EHope%20that%20helps!%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi All,

Is there any way to monitor and notify if a user degrades the label classification or removes the label form a document.

Also, is there any way to stop user from removing label from a file? 

Thanks. 

1 Reply
Best Response confirmed by Nip17 (Contributor)
Solution

@Nip17 You can check that in the Security & Compliance Center. msedge_QfRW5Bi1kV.png

 

msedge_Pl919QJeEv.png

 

Read more:

https://docs.microsoft.com/en-us/microsoft-365/compliance/view-label-activity-for-documents?view=o36...

 

You can also integrate AIP with MCAS and set alerts: https://docs.microsoft.com/en-us/cloud-app-security/azip-integration#control-file-exposure

 

To prevent users from removing or changing a label, the content must already be protected and the protection permissions do not grant the user the Export or Full Control usage right.

 

Hope that helps!