SOLVED

Block labelled file upload in Teams (AIP)

%3CLINGO-SUB%20id%3D%22lingo-sub-1854111%22%20slang%3D%22en-US%22%3EBlock%20labelled%20file%20upload%20in%20Teams%20(AIP)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1854111%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20community%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20using%20Azure%20Information%20Protection%20to%20label%20files%20and%20documents.%20I%20would%20like%20to%20forbid%20my%20users%20to%20share%20(inside%20and%20outside%20my%20organization)%20files%20in%20Teams%20with%20label%20%22Super%20Secret%22.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20know%20that%20I%20can%20block%20channel%20messages%20containing%20credit%20card%20number%20and%20other%20things%20using%20DLP.%20And%20I%20would%20like%20to%20do%20the%20same%20with%20files%20based%20on%20AIP%20labels.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20final%20goal%20is%20to%20prevent%20files%20containing%20super%20secret%20data%20being%20upload%20to%20the%20cloud.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3ERegards%2C%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1854111%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAIP%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20Information%20Protection%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ETeams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1867512%22%20slang%3D%22en-US%22%3ERe%3A%20Block%20labelled%20file%20upload%20in%20Teams%20(AIP)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1867512%22%20slang%3D%22en-US%22%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F857604%22%20target%3D%22_blank%22%3E%40dtcheng%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EUsing%20sensitivity%20labels%20as%20conditions%20in%20DLP%20policies%20is%20now%20in%20preview.%20See%20here%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fdlp-sensitivity-label-as-condition%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fdlp-sensitivity-label-as-condition%3Fview%3Do365-worldwide%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EI%20would%20give%20this%20a%20go%20and%20hopefully%2C%20it%20does%20what%20you%20need.%20%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20answers%20your%20question%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E
Highlighted
Occasional Visitor

Hello community,

 

I am using Azure Information Protection to label files and documents. I would like to forbid my users to share (inside and outside my organization) files in Teams with label "Super Secret".

 

I know that I can block channel messages containing credit card number and other things using DLP. And I would like to do the same with files based on AIP labels.

 

The final goal is to prevent files containing super secret data being upload to the cloud.


Regards,

1 Reply
Highlighted
Best Response confirmed by adam deltinger (MVP)
Solution
Hi @dtcheng

Using sensitivity labels as conditions in DLP policies is now in preview. See here

https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-sensitivity-label-as-condition?view=o3...

I would give this a go and hopefully, it does what you need.

Hope that answers your question

Best, Chris