Oct 22 2018
- last edited on
May 24 2021
I understand AIP can be used for MIcrosoft Office compatible document extenstions.
However, cannot find if it overall protect OneDrive for business & SharePoint Online?
Oct 22 2018 09:11 PM
AIP can protect Office 365 services includes SharePoint Online and OneDrive for Business. AIP provides encryption and permissions for files and you've three tiers of protection for data basic, sensitive and confidential.
Check the following information:
Oct 22 2018 11:42 PM
Make sure that you read the "important notes" section in the articles above though, as you loose a lot of functionality if you protect files with AIP directly:
When Azure Information Protection encryption is applied to files stored in Office 365, the service cannot process the contents of these files. Co-authoring, eDiscovery, search, Delve, and other collaborative features do not work. Data Loss Prevention (DLP) policies can only work with the metadata (including Office 365 labels) but not the contents of these files (such as credit card numbers within files).
It's the good old "reasoning over data" problem, and it's about time the relevant teams at Microsoft sit together on the same table and give us a better solution...
Oct 23 2018 06:42 PM
So if AIP enabled in SharePoint Online then all the documents that are protected.
Will lose on:
"Co-authoring, eDiscovery, search, Delve, and other collaborative features do not work."
Is my understanding is correct?
If yes, well to stop it would be stop the entire AIP for SharePoint?
Oct 23 2018 08:34 PM
Not exact, with AIP on SharePoint you run only the encryption with IRM options, in such a way that you do not cause implications for the encryption of the files and not causing the process with the contents such as Co-authoring, eDiscovery etc.
Oct 23 2018 11:14 PM
If you protect files individually with AIP and store them in a SPO location, then all the functionalities listed above will not work, as SPO cannot access the content of a protected file. You can use the IRM protection feature for document libraries instead, but unfortunately it's 10 years old and very limited.
Oct 24 2018 11:16 AM
Vasil, In general documented using AIP will be stored in SharePoint Online or One Drive for Business for easy sharing.
What I`m getting is to apply AIP classification on a document only once its the final copy?
As Co-Authoring is such an important feature while the document is in draft stage.
Hope my understanding is correct.
Oct 25 2018 01:39 AM
It sounds OK, just wanted to make sure you understand the implications of protecting a file.