Dec 02 2021 10:25 AM
Dec 02 2021 10:25 AM
I am trying to understand the process for enabling the sensitivity button in Office Web Apps (Word, Excel, PowerPoint). The following is confirmed.
I do not see the label in Word Online, nor do I see a sensitivity button. I do now that the SIT was detected because the file is protected with a DLP policy.
What I don't get is why the sensitivity button and corresponding labels aren't in the web app if the integration is set to true. After reading this ( https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view...) and this (https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-sharepoint-onedrive-fil...) many times, I think that the set-spotenant is only required for the web apps integration. However, if this step is required along with other configuration for integrating labels with groups and sites. Correct?
I feel I am missing something obvious here but I cannot find it. All I need at the moment is the Office Web Apps integration.
Dec 02 2021 01:07 PM
Dec 02 2021 01:18 PM
Thanks for the reply and the confirmation that I only need the set-spotenant command. I wish the docs delineated this more.
So I am currently testing in a demo Contoso tenant. The labels were already published to the user and I republished them about 1.5 hrs before your response (about an hour after I posted the question). Perhaps I am in the requisite 24hr waiting period (I did not change any labels)?
Dec 03 2021 12:47 PM
Dec 03 2021 01:01 PM
Dec 03 2021 11:38 PM - edited Dec 04 2021 12:42 PM
Hi, the process is really straightforward so agree there must be something else if you waited over 24 hours. You don't have to install the UL client as the sensitivity button appears anyway in Office desktop apps. Kind of makes me think of the prerequisites again.
I believe I know too little about your environment to assist here, so instead of giving your org. config to me I suggest you reach out to the official support with a ticket.
@Paul Saldanha Out of curiosity, what licensing do you have? You only say "Have the correct licensing."
Dec 06 2021 02:57 AM
@ChristianJBergstrom I am also facing the same issue I have applied the same command Set-SPOTenant -EnableAIPIntegration $true. it's been more than 24 hours but still can't see the button. I am using a demo tenant with an M365 E5 license.
Dec 06 2021 03:32 AM - edited Dec 06 2021 04:18 AM
@Mitul_Pansuriya Hello, so I had to test this with a test tenant again to see if there's something going on but I have no issue disabling the integration (make the button go away) and enabling (make the button appear again). Are the labels published too? Have a look at the docs and if that's not helpful I suggest reaching out to the official support with a ticket.
Dec 06 2021 08:26 AM
I am also using the demo environment. The users all have EMS E5 or the full compliance suite licensed.
I agree that the documented process is super simple so it is unclear why this is not working as expected. Is there any special way to get support for these demo tenants?
@Mitul_Pansuriya thankfully you are having the same issues. At least I know it might be something other than my incompetence...
Dec 06 2021 08:40 AM
Dec 17 2021 10:12 AM
Have you ever found a solution to this?
I'm facing the same issue. Can see the button and my labels in desktop apps, but nada in web apps.
i can't also see the sensitivity label in the sensitivity column in SharePoint so this could be part of that problem. I followed the same Microsoft guides.
Dec 17 2021 10:53 AM
Dec 17 2021 11:10 AM
The issues is that labels are not published to the site. Not to SharePoint at all. I don't even get the 'Sensitivity' field when i create a new site or edit existing sites.
i tried setting the SensitivityLabel using Set-SPOSite, but when I ran Get-SPOSite, it's still blank.
I can only publish labels to Users and Groups. Should i be able to publish to Sites?
Dec 18 2021 02:31 AM - edited Dec 18 2021 02:42 AM
Hello, well it seems as your MIP settings is configured OK according to your dumps. And it look as it should as when you publish from the GUI those are the options, e.g. what users or group members do you want to publish to (i.e. they will have the option to select that label). You don't have to publish the created sensitivity label if you choose to use PowerShell for adding it to the site. But bear in mind that there are some propagation time.
Just for confirmation I set up a new container label, without publishing it, yesterday and it took quite some time before I could publish/add that to my site using PowerShell with Set-SPOSite -Identity xxx -Sensitivitylabel <put label guid here>
Dec 20 2021 07:27 AM
I checked it today again, and I saw that I could select the sensitivity label In SharePoint Admin center for each of my sites.
I hadn't changed anything since my first post and it turned out to be some kind of propagation on Microsoft side. Annoying, but very happy that I hadn't done anything wrong :)
Thanks for your help and quick response.
Dec 22 2021 01:41 PMSolution
Sorry for the radio silence. Dealing with a family emergency.
After banging my head on the wall a few things happened:
Mar 04 2022 09:44 AM - edited Mar 04 2022 10:57 AM
Although this specific question was answered, there is solid guidance in the Microsoft 365 Admin Center on the general topic of MIP deployment, including configuration of Sensitivity Labels so that they work for Office Web Apps.
If you are an IT Admin with access to the Admin Center, and you are planning or deploying Microsoft Information Protection (MIP) (or would like to review your deployment), be sure to check-out the MIP setup guide.
The setup guide simplifies MIP deployment, with steps in chronological order, including automating some deployment steps.
If you do not have access to the Admin Center, similar content (with less automation) can be found at the MIP setup guide, located at the assistants.microsoft.com M365 Deployment site.
Jul 31 2023 03:27 AM
Hi@Paul Saldanha ,
There may be some commands that you try to run but they fail, giving you errors like "term not recognized," "object not found," or "command cannot be executed because running script is disabled."
In this case, just use the below command to get around the running script and run the instructions.
1> Verify that the user has the necessary licenses for AIP by checking their licenses.
2> Typically, this occurs when AIP is not connected to SPO (Sharepint Online). In this situation, you must enable AIP and SPO integration. To do this, follow the procedures below:
On your computer, launch a Windows PowerShell window. with administrative rights
Execute these commands:
- Install-Module -Name Microsoft.Online.SharePoint.PowerShell -Scope CurrentUser
- Update-Module -Name Microsoft.Online.SharePoint.PowerShell
- Connect-SPOService -Url https://msdxXXXXX-admin.sharepoint.com -Credential email address removed for privacy reasons
(Here Url: yoursharepointlink-admin.sharepoint.com , Credentials: credential of global admin)
( Eg: Contoso- admin.sharepoint.com , Credential: email address removed for privacy reasons)
- Set-SPOTenant -EnableAIPIntegration $true
Once this command has been executed, AIP and SPO Integration is enabled.
You can check here to see if EnableAIPIntegration is now true.