AIP - Levels inheritance

Copper Contributor

We are currently on a group-wide tenant, with potentially some differences between our classification levels (for example not the same labels descriptions, or not the same protection behind). Thus we would want to have different configurations, only scoped, no "global" policy.

 

We've spotted that there might (no documentation found on that topic) be only inheritance from the global policy, and not between scoped policies... even if those policies apply on the same Azure AD groups.

 

1) Is this a good way to proceed (i.e. no global policy, only scoped policies per group branches) to have separate classification levels within the same tenant ?

2) How to benefit from classification level inheritance among the scoped policies ?

1 Reply

Hi @Philippe Perrault, I'd recommend askin this in the AIP Yammer network, where all the MS folks lurk: https://www.yammer.com/askipteam/

 

Personally, I dont see any problem with having only scoped policies, but best ask on Yammer to get a direct answer from the team.