Microsoft Secure Tech Accelerator
Apr 13 2023, 07:00 AM - 12:00 PM (PDT)
Microsoft Tech Community

MCAS Protected Files and custom permission

Occasional Contributor



My scenario- A job converts a excel doc to PDF and places them in a sharepoint site . Cloud app security encrypts them (attached a label) and when user downloads the PDF then user cannot protect with a 'custom permission'.


Is there any way we can have this user do this without elevating the permission (all users are reviewers)?Any code/API exist ?


Please help




1 Reply
Hi Jagadish,
Once a label is applied by MCAS then MCAS is considered as the owner for the label (or the orgs superadmin).
The only way to overcome this is to make sure the label itself has permission for the user to make changes after it was applied, through the label permission management.