Forum Discussion

Greg_C_Gilbert's avatar
Greg_C_Gilbert
Iron Contributor
Oct 23, 2019

Is it possible for CAS to remove AIP labels on upload to SharePoint?

I'm thinking I can probably do this by triggering a Flow on upload to SharePoint, but wanted to see if anyone else has done it.  

 

Assuming I'm not missing some other functionality, I've posted the following to UserVoice and would welcome upvotes.

 

https://microsoftsecurity.uservoice.com/forums/905161-cloud-app-security/suggestions/38875237-ability-for-cas-to-remove-aip-labels-on-upload-to

 

Ability for CAS to remove AIP labels on upload to SharePoint

Office files offline, we have implemented a CAS policy to apply a Sensitivity Label on download so the Guest only has Reviewer access. We'd like the Guest to be able to edit the file then upload it back to the site. When the file gets uploaded, we'd like to remove the label so the protections don't prevent online collaborative editing and autosave.

Cloud App Security
Data Protection

2 Replies

    • Greg_C_Gilbert's avatar
      Greg_C_Gilbert
      Iron Contributor
      Oct 24, 2019

      Thanks, Philip Büchler, I'm testing removing the classification label as you suggested with a File Policy, but that seems to take a very long time since I assume it only triggers once the file is scanned at some point in the future after it has been uploaded.  My download policy that applies the label is a Session Policy which does it on demand.  I was hoping there was a way to use those same File Policy Governance actions in a Session Policy so it would trigger immediately.  

       

      Any other thoughts on how this might be done closer to real-time?