We're trying to use MCAS to solve for a customer's requirement with default sensitivity labels in Office 365 (primarily in SharePoint and OneDrive). I pulled the following diagram together to highlight the specific requirements:
- We need the ability to apply a general default label of ‘Internal Use’ to the customer's SharePoint and OneDrive environment.
- We need the ability to apply a different default label to certain sites. In the case of HR, the default label would be ‘Confidential’.
- We need the ability to apply a different default label to certain document libraries. In the case of HR, the default label for one of the document libraries would be ‘Restricted’
- We need the ability to auto-apply these labels to the documents at rest. We have 400K+ documents and coming up with a solution that requires the document to be opened and saved to apply the label will not work.
Is this something that MCAS can support? Thus far we see the ability to apply default labels at the folder level - but nothing higher in terms of Document Libraries or Sites. The customer has hundreds of folders, so configuring and managing things at the folder level doesn't seem sustainable.
Any guidance you can provide is appreciated!
Hi @Seth Weddon,
In order to retrieve Labels from Office 365 into MCAS, you need to configure Unified Labeling in Azure Information Protection. Once enabled, you would be able to satisfy use cases 1 and 4. For use case 4, I recommend to first setup a file policy in monitoring mode to understand how many SharePoint and OneDrive files will need the Internal Use Label before setting the governance action.
For use cases 2 and 3 you can use the native Office365 DLP where you are able to create and publish Office365 sensitivity labels to SharePoint sites / document libraries. By creating a label in the console you can then automatically apply a label by again enabling Unified Labeling with AIP.
