Azure AIP, Sensitivity labels.

%3CLINGO-SUB%20id%3D%22lingo-sub-1765809%22%20slang%3D%22en-US%22%3EAzure%20AIP%2C%20Sensitivity%20labels.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1765809%22%20slang%3D%22en-US%22%3E%3CP%3EHey%20Team%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20doing%20some%20research%20on%20implementing%20Sensitivity%20Labels%20with%20Office%20365.%20So%20far%20i%20have%20created%20my%20labels%2C%20and%20label%20policies.%20However%20as%20part%20of%20my%20Project%20i%20need%20to%20configure%20Azure%20Super%20User%20rights%20so%20that%20if%20for%20example%20a%20user%20name%20Frank%20Sam%20decides%20to%20encrypt%20a%20large%20number%20of%20emails%2C%20and%20then%20that%20user%20decides%20to%20leave%2C%20someone%20else%20can%20go%20back%20and%20un-encrypt%20them.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20far%20so%20good.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%20and%20as%20part%20of%20this%20documentation%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Finformation-protection%2Fconfigure-super-users%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Finformation-protection%2Fconfigure-super-users%3C%2FA%3E%26nbsp%3Bi%20checked%20the%20current%20status%20of%20the%20AIP%20and%20noticed%20this%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EFunctionalState%20%3A%20Disabled%3C%2FSTRONG%3E%3CBR%20%2F%3ESuperUsersEnabled%20%3A%20Disabled%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20above%20is%20from%20the%26nbsp%3BGet-AipServiceConfiguration%20command.%20Now%20my%20question%20is%20this%3A%20If%20my%20FunctionalState%20is%20set%20to%20disabled%2C%20then%20how%20is%20it%20that%20my%20sensitivity%20labels%20are%20setup%20and%20running%20correctly%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EI%20was%20expecting%20to%20see%20%22FunctionalState%20%3A%20Enabled%22%20and%20not%20disabled.%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20Ideas%3F%20I%20was%20hoping%20someone%20could%20assist%20with%20this%20question!!%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance!!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERobert%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1765809%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ehybrid%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Frequent Contributor

Hey Team, 

 

I am doing some research on implementing Sensitivity Labels with Office 365. So far i have created my labels, and label policies. However as part of my Project i need to configure Azure Super User rights so that if for example a user name Frank Sam decides to encrypt a large number of emails, and then that user decides to leave, someone else can go back and un-encrypt them. 

 

So far so good. 

 

However and as part of this documentation here: https://docs.microsoft.com/en-us/azure/information-protection/configure-super-users i checked the current status of the AIP and noticed this: 

 

FunctionalState : Disabled
SuperUsersEnabled : Disabled

 

The above is from the Get-AipServiceConfiguration command. Now my question is this: If my FunctionalState is set to disabled, then how is it that my sensitivity labels are setup and running correctly? 

 

I was expecting to see "FunctionalState : Enabled" and not disabled. 

 

Any Ideas? I was hoping someone could assist with this question!! 

 

Thanks in advance!!

 

Robert 

 

 

 

0 Replies