Document Access Permissions (outside of own M365 environment)

[Luke_Michael_Fisher]

Can Purview be leveraged to revoke access to a document from our M365 environment that was inadvertently shared to another organization and now resides in their M365 environment? I believe sensitivity labels follow a document in the metadata but not sure if the ability to manage access crosses organizational boundaries? If that makes sense?

Thanks!

Luke F. 

[#2]

@Luke_Michael_Fisher 

I recommend checking out this article. This would the labels apply encryption but you can revoke access, even if it is another tenants storage. Your organization, because your label set the rights management on the file through the labels encryption settings, still own the rights management settings on the file and you can revoke access to the file.

Track and revoke access - Azure Information Protection | Microsoft Learn

There's also a web portal to track and revoke.

AIP Document Tracking (azurerms.com)

[#3]

Thanks for these links and the information! Very helpful Mike.