MIP Document Sensitivity Labelling - Office Web Apps

[Warren Patterson]

Hi,

We have AIP enabled on our tenant and users are licenced (Azure Information Protection Premium P2) and we have enabled audit logging for AIP in Azure.

We have two scenarios, which we observe different logging behaviour and its perplexing.

1. If we start a document within office desktop and apply a sensitivity label, we will see this event in the audit log.
2. If we start a document within office web and apply a sensitivity label, we will not see this event in the audit log.

Is this behaviour by design that office web apps will not log label events to the audit log?  I cant find anything online that specifically speaks to office webapps (word/excel) having this issue.

Anyone have any ideas?

Answer: As per roadmap highlighted by @mmancina auditing via office web apps isn't supported yet and is in development. Microsoft 365 Roadmap | Microsoft 365

[#2]

Hi Warren, not 100% sure, but I think audit log is part of the Labeling Client and therefore only available on office desktop.

[#3]

@mmancina Yeah, that's what I was thinking also,  but decided I am being ridiculous, surely MS could not have missed this obvious "flaw".  If this is indeed the case, then there is major hole in audit logging sensitivity labelling if users don't use the desktop clients and just use the web clients, then no audit logging is available, seems a major oversight by MS.

Hoping someone from MS will see this and correct us here.

[#4 · Accepted solution]

https://www.microsoft.com/de-at/microsoft-365/roadmap?featureid=70542 check this out. Seems like this feature is already in development.

[#5]

@mmancina geez, thanks!  we did search the roadmap, but clearly need to sharpen my searching skills :)

So its definitely not yet supported, this is good to know.

Thanks, I will update my post above to indicate this.