Block labelled file upload in Teams (AIP)

[dtcheng]

Hello community,

I am using Azure Information Protection to label files and documents. I would like to forbid my users to share (inside and outside my organization) files in Teams with label "Super Secret".

I know that I can block channel messages containing credit card number and other things using DLP. And I would like to do the same with files based on AIP labels.

The final goal is to prevent files containing super secret data being upload to the cloud.

Regards,

[#2 · Accepted solution]

Hi @dtcheng

Using sensitivity labels as conditions in DLP policies is now in preview. See here

https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-sensitivity-label-as-condition?view=o3...

I would give this a go and hopefully, it does what you need.

Hope that answers your question

Best, Chris

[#3]

@dtcheng  multiple options ie you can block the file upload/downloading in OneDrive online / SharePoint or other apps  using Microsoft Defender for Cloud Apps / Microsoft Defender for Cloud Apps and the user will be notified with custom messages

[#4]

good alternative options @abdulrehman_binaltaf they could certainly scope them alongside sensitivity labels and see which one suits them.

Best, Chris