To provide a unified and streamlined customer experience, the Azure Information Protection labeling and policy management in the Azure Portal, and the AIP classic client, will be deprecated on March 31st, 2021as announced in our previous blog.
We highly recommend customers on classic AIP labeling to migrate to unified labeling before this sunset timeline for a seamless transition to unified labeling.
Note: This deprecation does not apply in the following scenarios:
The deprecation does not affect the Azure Information Protection areas in the Azure portal related to the on-premises scanner and analytics. AIP analytics is still available in the Azure Portal, but we encourage customers to start using the Microsoft 365 Compliance center Activity Explorer.
After deprecation, editing labels and policies in the Azure portal will no longer be available. The only admin action that will still be available after deprecation is to activate unified labeling. Classic client will continue to function as configured; however, no further support is provided, and maintenance versions will no longer be released for the classic client.
This blog lists key admin components that will be deprecated and describes how this impacts the admin. For details on migration, see the previous communications on UL migration steps.
Fig 1: Home > Azure Information Protection > Labels
Fig 2: Home > Azure Information Protection > Labels > Label Name
Fig 3a: Home > Azure Information Protection > Labels > Label Name > Configure Condition
Fig 3b: Home > Azure Information Protection > Labels > Label Name > Configure Condition
Fig 4: Home > Azure Information Protection > Policies > Policy
Fig 5: Home > Azure Information Protection > Policies > Policy
Fig 6a: Home > Azure Information Protection > Policies > Policy >
Fig 6b: Home > Azure Information Protection > Policies > Policy > Select which users or groups get this policy.
Fig 7: Home > Azure Information Protection > Policies > Policy > Advanced Settings
Fig 8: Home > Azure Information Protection > Protection Activation
For customers that are working with protection templates instead of labels, Admins could manage the protection templates from the portal. Moving forward:
Fig 9: Home > Azure Information Protection > Labels
Fig 10: Home > Azure Information Protection > Labels > Label Name > Protection Settings
Fig 11: Home > Azure Information Protection > Languages
Fig 12a: Home > Azure Information Protection > Unified Labeling > Activate
Fig 12b: Home > Azure Information Protection > Unified Labeling >
Fig 14a: Microsoft 365 compliance > Solutions > Information Protection > Labels >
After you activate and migrate to unified labeling, your labels will be available in the Microsoft 365 Compliance center.
Fig 14b: Microsoft 365 compliance > Solutions > Information Protection > Label policies >
# |
Admin |
Not Impacted |
Impacted |
1 |
Admin tries to add a new label.
|
--- |
Admin will not be able to add a new label. Admin will not have the shortcuts or any right-click options. |
2 |
Admin tries to edit a label |
Admin will be able to view a label in read-only mode.
|
Admin will not be able to edit or delete label content and settings |
3 |
Admin tries to edit label conditions |
Admin will be able to view conditions in read-only mode. |
Admin will not be able to edit conditions |
4 |
Admin tries to edit policy |
Admin will be able to only view policy |
Admin will not be able to save or delete a policy. |
5 |
Admin tries to edit policies (export, advance settings) |
Admin will be able to select the ellipsis and right-click options to manage each policy. Admins will be able to select Export and Advanced settings buttons. |
Admin will not be able to add new policy. In the shortcut, the link will not have move up/down or delete options. |
6 |
Admin tries to add user |
Admin will be able to view users |
Admin will not be able to add a user or remove a user |
7 |
Admin tries to edit advanced settings |
Admin will be able to view settings in read-only mode. |
Admin will not be able to add new settings or remove settings |
8 |
Admin tries to activate protection |
Admin will be able to see the status (activated / deactivated) |
Admin will not be able to activate / or deactivate |
9 |
Admin tries to edit protection templates in the AIP portal |
Admins will be able to view protection templates in read-only mode. Admins can use AIP PowerShell cmdlets to edit protection.
|
Admins will not be able to edit / change protection settings in the AIP Portal. Admin will not be able to convert templates to labels using the portal but can still use PowerShell command |
10 |
Admin tries to edit protection |
Admin will be able to view protection in read-only mode. |
Admin will not be able to edit protection |
11 |
Admin tries to add, import, delete language |
Admin will be able to only export |
Admin will not be able to add, import, delete |
12 |
Admin tries to activate unified labeling |
Admin will be able to activate and copy the policy |
Admin will not be able to publish labels in the AIP portal |
13 |
End users using classic client |
Users will be able to apply labels and protection and to consume protected files |
AIP classic is out of support. Maintenance versions will not be released. |
14 |
AIP labels in Microsoft Cloud App Security |
--- |
AIP labels will not be supported. Only unified labels will be supported. |
Who should I contact regarding migration questions?
Will the AIP Classic client work after the deprecation?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.