GCC-H AIP Manual Migration

Published 03-05-2021 02:00 PM 1,104 Views
Microsoft

Azure Information Protection (AIP) unified labeling in Microsoft 365 provides organizations an integrated and consistent approach to creating, configuring, and applying labels and policies to protect information worker data across all locations. Workloads that can leverage unified labeling such as AIP unified labeling client and scanner, Office 365 apps, Office for web, SharePoint, OneDrive, MCAS and many more can apply these policies in a consistent manner. The AIP classic client and label management in the AIP Portal will be deprecated for sovereign clouds on September 30, 2021, therefore it is highly encouraged that administrators move their environment to unified labeling.

 

AIP unified labeling is generally available to Government Community Cloud High (GCC-H) environments and this release brings data discovery, classification, and protection capabilities to government Microsoft 365 instances.  

 

Activating unified labeling for GCC-H is quite different from commercial and regular GCC environments. Commercial and regular GCC environments require administrators to navigate to the AIP blade in the Azure Portal to activate unified labeling. “Activating unified labeling” is not relevant to GCC-H tenants. All GCC-H tenants are already enabled for unified labeling; therefore, this step is not required.

 

Once unified labeling is enabled, commercial and GCC clouds can migrate their AIP classic client labels directly to the Security and Compliance Center, whereas this is not applicable to GCC-H tenants. GCC-H tenants require a manual migration of their AIP labels and protection templates to the Security and Compliance Center.  

 

The benefits of migrating your labels from one portal to the next provides continuity and consistency of labels from your AIP classic environment to your Microsoft Information Protection ecosystem. Ideally, your end users will be using the same label name, label template and (optionally) protection template.

 

This blog gives an end-to-end use case example on how a GCC-H admin can migrate their parent label and sublabel with its corresponding protection template from the AIP Portal to the Security and Compliance Center. Additional information about label migration can be found in our official documentation.

 

Note: For new GCC-H tenants, label migration is not applicable. Please create new labels directly in the Security and Compliance Center.

 

Label Migration at a High Level

 

At a high level, below are the following steps to migrate AIP labels from the AIP Portal to the Security and Compliance Center:

 

1. Retrieve label(s) properties from the AIP Portal
2. Migrate label(s) from the AIP Classic Portal to the Security Compliance Center
3. Verify labels has been migrated to the Security and Compliance Center

Retrieve Label Properties from the AIP Portal

 

In this exercise, we will be migrating the parent label “Highly Confidential” with its corresponding sub label “All Employees”. First, we will retrieve the label properties and settings from the AIP Portal.

 

Note: When doing this exercise, administrators can retrieve all labels policies at one time.

 

Instructions:

  1. Navigate to the AIP Management Page within the Azure Portal
  2. Under Classifications, select “Labels”
  3. Select the parent label that you want to migrate. In this example we are migrating the label “Highly Confidential”

 

alsteele_0-1614876204876.png

Figure 1: Selecting parent label to migrate

 

  1. Document parent label properties and settings using a spreadsheet, notepad, etc. This information will be used later in PowerShell

alsteele_1-1614876204890.png

Figure 2: Parent label properties and settings

 

Parent Label Property

Value

Name (internal name; must be unique)

Highly Confidential

Tooltip

Very sensitive business data that would cause damage to the business if it was shared with unauthorized people. Examples include employee and customer information, passwords, source code, and pre-announced financial reports.

Display Name (displayed to end users)

Highly Confidential

Identity

06960349-c5b2-465e-8d31-1652e5969da4

Parent ID

 

EncryptionEnabled

 

EncryptionProtectionType

 

EncryptionTemplateId

 

EncryptionAipTemplateScopes

 

Table 1: Parent label settings and properties

 

  1. Under Classifications, select “Labels” again
  2. Select the sub label that you want to migrate. In this example we are migrating sub label “All Employees”

 

alsteele_2-1614876204901.png

Figure 3: Selecting sub label to migrate

 

  1. Document sub label properties and settings using a spreadsheet, notepad, etc. This information will be used later for PowerShell

 

 

alsteele_3-1614876204910.png

Figure 4: Sub label properties and settings

 

  1. (Optional) If your sub label has encryption, you will need to get the protection ID. Select Protection in your sub label properties.  

 

alsteele_4-1614876204914.png

Figure 5: Sub label protection selection

 

 

  1. (Optional) Document sub label protection template ID using a spreadsheet, notepad, etc. This information will be used later for PowerShell.

 

alsteele_5-1614876204919.png

Figure 5: Sub label protection template ID

 

Sub Label Property

Value

Name (internal name; must be unique)

All Employees

Tooltip

Highly confidential data that allows all employees view, edit, and reply permissions to this content. Data owners can track and revoke content.

Display Name (displayed to end users)

All Employees

Identity

d90363e7-f9a6-43b6-b83f-ac66df2c3c01

Parent ID

06960349-c5b2-465e-8d31-1652e5969da4

EncryptionEnabled

True

EncryptionProtectionType

Template

EncryptionTemplateId

19989161-dacd-409c-ab97-48d1433e1de7

EncryptionAipTemplateScopes

allcompany@contoso.onmicrosoft.com

Table 2: Parent label settings and properties

 

Migrate AIP Labels to the Security and Compliance Center

 

In this section, we will be connecting to the Security and Compliance Center PowerShell module to migrate our AIP labels to the new management portal. 

 

  1. Open PowerShell in administrative mode
  2. Import Security and Compliance PowerShell Module

 

Import-Module ExchangeOnlineManagement

 

  1. Connect to Security and Compliance Center for GCC-H

 

Connect-IPPSSession -UserPrincipalName -ConnectionUri https://ps.compliance.protection.office365.us/powershell-liveid/

 

Example:

 

Connect-IPPSSession -admin@contoso.onmicrosoft.com -ConnectionUri https://ps.compliance.protection.office365.us/powershell-liveid/

 

  1. Migrate parent Label from Azure Portal to Security and Compliance Center using New-Label cmdlt in PowerShell  

 

New-Label -Name 'aipscopetest' -Tooltip 'aipscopetest' -Comment 'admin notes' -DisplayName 'aipscopetest' -Identity 'b342447b-eab9-ea11-8360-001a7dda7113'

 

Example: Migrate parent label “Highly Confidential” from Azure Portal to Compliance Center using the parent label properties.

 

Parent Label Property

Value

Name (internal name; must be unique)

Highly Confidential

Tooltip

Very sensitive business data that would cause damage to the business if it was shared with unauthorized people. Examples include employee and customer information, passwords, source code, and pre-announced financial reports.

Comment

Highly Confidential Parent Label

Display Name (displayed to end users)

Highly Confidential

Identity

06960349-c5b2-465e-8d31-1652e5969da4

Parent ID

 

EncryptionEnabled

 

EncryptionProtectionType

 

EncryptionTemplateId

 

EncryptionAipTemplateScopes

 

 

New-Label -Name 'Highly Confidential' -Tooltip 'Very sensitive business data that would cause damage to the business if it was shared with unauthorized people. Examples include employee and customer information, passwords, source code, and pre-announced financial reports.' -Comment 'High Confidential Parent Label' -DisplayName 'Highly Confidential' -Identity ‘06960349-c5b2-465e-8d31-1652e5969da4'

 

  1. Migrate sub label from Azure Portal to Security and Compliance Center using ‘New-Label’ cmdlt in PowerShell

 

New-Label -Name 'aipscopetest' -Tooltip 'aipscopetest' -Comment 'admin notes' -DisplayName 'aipscopetest' -Identity 'b342447b-eab9-ea11-8360-001a7dda7113' -EncryptionEnabled $true -EncryptionProtectionType 'template' -EncryptionTemplateId 'a32027d7-ea77-4ba8-b2a9-7101a4e44d89' -EncryptionAipTemplateScopes "['allcompany@labelaction.onmicrosoft.com','admin@labelaction.onmicrosoft.com']"

 

Example: Migrate sub label “All Employees” from Azure Portal to Compliance Center using the sub label properties.

 

Property

Value

Name (internal name; must be unique)

All Employees

Tooltip

Highly confidential data that allows all employees view, edit, and reply permissions to this content. Data owners can track and revoke content.

Comment

Highly Confidential All Employees sub label

Display Name (displayed to end users)

All Employees

Identity

d90363e7-f9a6-43b6-b83f-ac66df2c3c01

ParentID

06960349-c5b2-465e-8d31-1652e5969da4

EncryptionEnabled

True

EncryptionProtectionType

Template

EncryptionTemplateId

19989161-dacd-409c-ab97-48d1433e1de7

EncryptionAipTemplateScopes

contoso@contoso.onmicrosoft.com

 

New-Label -Name 'Highly Confidential All Employees' -Tooltip ' Highly confidential data that allows all employees view, edit, and reply permissions to this content. Data owners can track and revoke content.' -Comment 'Highly Confidential All Employees sub label' -DisplayName 'All Employees' -Identity 'b342447b-eab9-ea11-8360-001a7dda7113'-ParentId ‘06960349-c5b2-465e-8d31-1652e5969da4’ -EncryptionEnabled $true -EncryptionProtectionType 'template' -EncryptionTemplateId ‘19989161-dacd-409c-ab97-48d1433e1de7' -EncryptionAipTemplateScopes "['allcompany@contoso.onmicrosoft.com']"

 

 

Verify labels has been migrated to the Security and Compliance Center

 

Finally, we will verify that our labels have been migrated from the AIP Portal by navigating to the new label management portal, the Security and Compliance Center.

 

  1. Sign in to the Security and Compliance Center for GCC-H
  2. Go to your Information Protection tab
  3. Verify your new labels has been created
 

alsteele_8-1614876638214.png

 

Figure 6: Security and Compliance Center label management

 

Note: Policies are not migrated from the AIP Portal to the Security and Compliance Center. Administrators will have to create new label policies in the Security and Compliance Center.  

 

Sunsetting Label Management in the Azure Portal and AIP client (classic)

 

We have a plan to sunset label management in Azure Portal and AIP client (classic) for Government Cloud Customers.  Meanwhile, Government Cloud Customers who own licenses for AIP will receive continued support for the classic client for 12 months after the general availability of unified labeling for Government Cloud. Government Cloud Customers who may need features that are not yet in the latest release of the unified labeling client can ask for additional extended support for the classic client here before September 30, 2021.

 

Azure Information Protection's classic client and Label Management in the Azure Portal will be deprecated on September 30, 2021 for Government Community Cloud customers. For information on admin experience post deprecation date, check out this blog.

 

Note: AIP UL scanner management will still be available on AIP portal and will not be deprecated.

 

%3CLINGO-SUB%20id%3D%22lingo-sub-2185328%22%20slang%3D%22en-US%22%3EGCC-H%20AIP%20Manual%20Migration%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2185328%22%20slang%3D%22en-US%22%3E%3CP%3EAzure%20Information%20Protection%20(AIP)%20unified%20labeling%20in%20Microsoft%20365%20provides%20organizations%20an%20integrated%20and%20consistent%20approach%20to%20creating%2C%20configuring%2C%20and%20applying%20labels%20and%20policies%20to%20protect%20information%20worker%20data%20across%20all%20locations.%20Workloads%20that%20can%20leverage%20unified%20labeling%20such%20as%20AIP%20unified%20labeling%20client%20and%20scanner%2C%20Office%20365%20apps%2C%20Office%20for%20web%2C%20SharePoint%2C%20OneDrive%2C%20MCAS%20and%20many%20more%20can%20apply%20these%20policies%20in%20a%20consistent%20manner.%20The%20AIP%20classic%20client%20and%20label%20management%20in%20the%20AIP%20Portal%20will%20be%20deprecated%20for%20sovereign%20clouds%20on%20September%2030%2C%202021%2C%20therefore%20it%20is%20highly%20encouraged%20that%20administrators%20move%20their%20environment%20to%20unified%20labeling.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAIP%20unified%20labeling%20is%20generally%20available%20to%20Government%20Community%20Cloud%20High%20(GCC-H)%20environments%20and%20this%20release%20brings%20data%20discovery%2C%20classification%2C%20and%20protection%20capabilities%20to%20government%20Microsoft%20365%20instances.%20%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EActivating%20unified%20labeling%20for%20GCC-H%20is%20quite%20different%20from%20commercial%20and%20regular%20GCC%20environments.%20Commercial%20and%20regular%20GCC%20environments%20require%20administrators%20to%20navigate%20to%20the%20AIP%20blade%20in%20the%20Azure%20Portal%20to%20activate%20unified%20labeling.%20%E2%80%9CActivating%20unified%20labeling%E2%80%9D%20is%20not%20relevant%20to%20GCC-H%20tenants.%20%3CU%3EAll%20GCC-H%20tenants%3C%2FU%3E%20are%20already%20enabled%20for%20unified%20labeling%3B%20therefore%2C%20this%20step%20is%20not%20required.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnce%20unified%20labeling%20is%20enabled%2C%20commercial%20and%20GCC%20clouds%20can%20migrate%20their%20AIP%20classic%20client%20labels%20directly%20to%20the%20Security%20and%20Compliance%20Center%2C%20whereas%20this%20is%20not%20applicable%20to%20GCC-H%20tenants.%20GCC-H%20tenants%20require%20a%20%3CU%3Emanual%20migration%3C%2FU%3E%20of%20their%20AIP%20labels%20and%20protection%20templates%20to%20the%20Security%20and%20Compliance%20Center.%20%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20benefits%20of%20migrating%20your%20labels%20from%20one%20portal%20to%20the%20next%20provides%20continuity%20and%20consistency%20of%20labels%20from%20your%20AIP%20classic%20environment%20to%20your%20Microsoft%20Information%20Protection%20ecosystem.%20Ideally%2C%20your%20end%20users%20will%20be%20using%20the%20same%20label%20name%2C%20label%20template%20and%20(optionally)%20protection%20template.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20blog%20gives%20an%20end-to-end%20%3CU%3Euse%20case%20example%3C%2FU%3E%20on%20how%20a%20GCC-H%20admin%20can%20migrate%20their%20parent%20label%20and%20sublabel%20with%20its%20corresponding%20protection%20template%20from%20the%20AIP%20Portal%20to%20the%20Security%20and%20Compliance%20Center.%20Additional%20information%20about%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fenterprise-mobility-security%2Fsolutions%2Fems-aip-premium-govt-service-description%23label-migration%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Elabel%20migration%3C%2FA%3E%20can%20be%20found%20in%20our%20official%20documentation.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3ENote%3A%20For%20new%20GCC-H%20tenants%2C%20label%20migration%20is%20not%20applicable.%20Please%20create%20new%20labels%20directly%20in%20the%20Security%20and%20Compliance%20Center.%20%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--521305446%22%20id%3D%22toc-hId--521422627%22%3E%3CSTRONG%3ELabel%20Migration%20at%20a%20High%20Level%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAt%20a%20high%20level%2C%20below%20are%20the%20following%20steps%20to%20migrate%20AIP%20labels%20from%20the%20AIP%20Portal%20to%20the%20Security%20and%20Compliance%20Center%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E1.%20Retrieve%20label(s)%20properties%20from%20the%20AIP%20Portal%3CBR%20%2F%3E2.%20Migrate%20label(s)%20from%20the%20AIP%20Classic%20Portal%20to%20the%20Security%20Compliance%20Center%3CBR%20%2F%3E3.%20Verify%20labels%20has%20been%20migrated%20to%20the%20Security%20and%20Compliance%20Center%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1966207387%22%20id%3D%22toc-hId-1966090206%22%3E%3CSTRONG%3ERetrieve%20Label%20Properties%20from%20the%20AIP%20Portal%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20this%20exercise%2C%20we%20will%20be%20migrating%20the%20parent%20label%20%E2%80%9CHighly%20Confidential%E2%80%9D%20with%20its%20corresponding%20sub%20label%20%E2%80%9CAll%20Employees%E2%80%9D.%20First%2C%20we%20will%20retrieve%20the%20label%20properties%20and%20settings%20from%20the%20AIP%20Portal.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3ENote%3A%20When%20doing%20this%20exercise%2C%20administrators%20can%20retrieve%20all%20labels%20policies%20at%20one%20time.%20%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EInstructions%3A%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%3CSTRONG%3ENavigate%3C%2FSTRONG%3E%20to%20the%20%3CSTRONG%3EAIP%20Management%3C%2FSTRONG%3E%20Page%20within%20the%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Faipconsole%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Portal%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3EUnder%20Classifications%2C%20select%20%3CSTRONG%3E%E2%80%9CLabels%E2%80%9D%3C%2FSTRONG%3E%3C%2FLI%3E%0A%3CLI%3E%3CSTRONG%3ESelect%20%3C%2FSTRONG%3Ethe%20%3CSTRONG%3Eparent%20label%3C%2FSTRONG%3E%20that%20you%20want%20to%20migrate.%20In%20this%20example%20we%20are%20migrating%20the%20label%20%3CSTRONG%3E%E2%80%9CHighly%20Confidential%E2%80%9D%3C%2FSTRONG%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22alsteele_0-1614876204876.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F260888i4700834C0C47F47D%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22alsteele_0-1614876204876.png%22%20alt%3D%22alsteele_0-1614876204876.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CEM%3EFigure%201%3A%20Selecting%20parent%20label%20to%20migrate%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%224%22%3E%0A%3CLI%3E%3CSTRONG%3EDocument%20parent%20label%20properties%20and%20settings%3C%2FSTRONG%3E%20using%20a%20spreadsheet%2C%20notepad%2C%20etc.%20This%20information%20will%20be%20used%20later%20in%20PowerShell%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22alsteele_1-1614876204890.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F260889i66DF0391CDE4337D%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22alsteele_1-1614876204890.png%22%20alt%3D%22alsteele_1-1614876204890.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CEM%3EFigure%202%3A%20Parent%20label%20properties%20and%20settings%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22288%22%3E%3CP%3EParent%20Label%20Property%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EValue%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22288%22%3E%3CP%3EName%20(internal%20name%3B%20must%20be%20unique)%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EHighly%20Confidential%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22288%22%3E%3CP%3ETooltip%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EVery%20sensitive%20business%20data%20that%20would%20cause%20damage%20to%20the%20business%20if%20it%20was%20shared%20with%20unauthorized%20people.%20Examples%20include%20employee%20and%20customer%20information%2C%20passwords%2C%20source%20code%2C%20and%20pre-announced%20financial%20reports.%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22288%22%3E%3CP%3EDisplay%20Name%20(displayed%20to%20end%20users)%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EHighly%20Confidential%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22288%22%3E%3CP%3EIdentity%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E06960349-c5b2-465e-8d31-1652e5969da4%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22288%22%3E%3CP%3EParent%20ID%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22288%22%3E%3CP%3EEncryptionEnabled%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22288%22%3E%3CP%3EEncryptionProtectionType%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22288%22%3E%3CP%3EEncryptionTemplateId%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22288%22%3E%3CP%3EEncryptionAipTemplateScopes%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%3CEM%3ETable%201%3A%20Parent%20label%20settings%20and%20properties%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%225%22%3E%0A%3CLI%3EUnder%20Classifications%2C%20select%20%3CSTRONG%3E%E2%80%9CLabels%E2%80%9D%20%3C%2FSTRONG%3Eagain%3C%2FLI%3E%0A%3CLI%3E%3CSTRONG%3ESelect%20%3C%2FSTRONG%3Ethe%20%3CSTRONG%3Esub%20label%3C%2FSTRONG%3E%20that%20you%20want%20to%20migrate.%20In%20this%20example%20we%20are%20migrating%20sub%20label%20%3CSTRONG%3E%E2%80%9CAll%20Employees%E2%80%9D%20%3C%2FSTRONG%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22alsteele_2-1614876204901.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F260890iC59540F223FED916%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22alsteele_2-1614876204901.png%22%20alt%3D%22alsteele_2-1614876204901.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CEM%3EFigure%203%3A%20Selecting%20sub%20label%20to%20migrate%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%227%22%3E%0A%3CLI%3E%3CSTRONG%3EDocument%20sub%20label%20properties%20and%20settings%3C%2FSTRONG%3E%20using%20a%20spreadsheet%2C%20notepad%2C%20etc.%20This%20information%20will%20be%20used%20later%20for%20PowerShell%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22alsteele_3-1614876204910.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F260894i177CE213A95A78A7%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22alsteele_3-1614876204910.png%22%20alt%3D%22alsteele_3-1614876204910.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CEM%3EFigure%204%3A%20Sub%20label%20properties%20and%20settings%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%3CEM%3E%26nbsp%3B%3C%2FEM%3E%3C%2FP%3E%0A%3COL%20start%3D%228%22%3E%0A%3CLI%3E(Optional)%20If%20your%20sub%20label%20has%20encryption%2C%20you%20will%20need%20to%20get%20the%20protection%20ID.%20%3CSTRONG%3ESelect%3C%2FSTRONG%3E%20%3CSTRONG%3EProtection%20%3C%2FSTRONG%3Ein%20your%20sub%20label%20properties.%20%3CSTRONG%3E%26nbsp%3B%3C%2FSTRONG%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22alsteele_4-1614876204914.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F260892i0FD1EC3AE70F8A31%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22alsteele_4-1614876204914.png%22%20alt%3D%22alsteele_4-1614876204914.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CEM%3EFigure%205%3A%20Sub%20label%20protection%20selection%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%229%22%3E%0A%3CLI%3E(Optional)%20%3CSTRONG%3EDocument%20sub%20label%20protection%20template%20ID%3C%2FSTRONG%3E%20using%20a%20spreadsheet%2C%20notepad%2C%20etc.%20This%20information%20will%20be%20used%20later%20for%20PowerShell.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22alsteele_5-1614876204919.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F260893i7CEA25E5BC5CAE53%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22alsteele_5-1614876204919.png%22%20alt%3D%22alsteele_5-1614876204919.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CEM%3EFigure%205%3A%20Sub%20label%20protection%20template%20ID%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22300%22%3E%3CP%3ESub%20Label%20Property%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EValue%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22300%22%3E%3CP%3EName%20(internal%20name%3B%20must%20be%20unique)%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EAll%20Employees%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22300%22%3E%3CP%3ETooltip%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EHighly%20confidential%20data%20that%20allows%20all%20employees%20view%2C%20edit%2C%20and%20reply%20permissions%20to%20this%20content.%20Data%20owners%20can%20track%20and%20revoke%20content.%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22300%22%3E%3CP%3EDisplay%20Name%20(displayed%20to%20end%20users)%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EAll%20Employees%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22300%22%3E%3CP%3EIdentity%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3Ed90363e7-f9a6-43b6-b83f-ac66df2c3c01%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22300%22%3E%3CP%3EParent%20ID%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E06960349-c5b2-465e-8d31-1652e5969da4%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22300%22%3E%3CP%3EEncryptionEnabled%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3ETrue%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22300%22%3E%3CP%3EEncryptionProtectionType%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3ETemplate%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22300%22%3E%3CP%3EEncryptionTemplateId%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E19989161-dacd-409c-ab97-48d1433e1de7%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22300%22%3E%3CP%3EEncryptionAipTemplateScopes%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E%3CA%20href%3D%22mailto%3Aallcompany%40contoso.onmicrosoft.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Eallcompany%40contoso.onmicrosoft.com%3C%2FA%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%3CEM%3ETable%202%3A%20Parent%20label%20settings%20and%20properties%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-158752924%22%20id%3D%22toc-hId-158635743%22%3E%3CSTRONG%3EMigrate%20AIP%20Labels%20to%20the%20Security%20and%20Compliance%20Center%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20this%20section%2C%20we%20will%20be%20connecting%20to%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fexchange%2Fconnect-to-scc-powershell%3Fview%3Dexchange-ps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESecurity%20and%20Compliance%20Center%20PowerShell%20module%3C%2FA%3E%20to%20migrate%20our%20AIP%20labels%20to%20the%20new%20management%20portal.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%3CSTRONG%3EOpen%20PowerShell%3C%2FSTRONG%3E%20in%20%3CSTRONG%3Eadministrative%20mode%3C%2FSTRONG%3E%3C%2FLI%3E%0A%3CLI%3E%3CSTRONG%3EImport%3C%2FSTRONG%3E%20%3CSTRONG%3ESecurity%20and%20Compliance%20PowerShell%20Module%3C%2FSTRONG%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3EImport-Module%20ExchangeOnlineManagement%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%223%22%3E%0A%3CLI%3E%3CSTRONG%3EConnect%20to%20Security%20and%20Compliance%20Center%20for%20GCC-H%3C%2FSTRONG%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3EConnect-IPPSSession%20-UserPrincipalName%20-ConnectionUri%20https%3A%2F%2Fps.compliance.protection.office365.us%2Fpowershell-liveid%2F%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EExample%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3EConnect-IPPSSession%20-admin%40contoso.onmicrosoft.com%20-ConnectionUri%20https%3A%2F%2Fps.compliance.protection.office365.us%2Fpowershell-liveid%2F%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%224%22%3E%0A%3CLI%3E%3CSTRONG%3EMigrate%20parent%20Label%3C%2FSTRONG%3E%20from%20Azure%20Portal%20to%20Security%20and%20Compliance%20Center%20using%20%3CSTRONG%3E%E2%80%98%3C%2FSTRONG%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fexchange%2Fnew-label%3Fview%3Dexchange-ps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSTRONG%3ENew-Label%3C%2FSTRONG%3E%3C%2FA%3E%3CSTRONG%3E%E2%80%99%3C%2FSTRONG%3E%20cmdlt%20in%20PowerShell%26nbsp%3B%26nbsp%3B%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3ENew-Label%20-Name%20'aipscopetest'%20-Tooltip%20'aipscopetest'%20-Comment%20'admin%20notes'%20-DisplayName%20'aipscopetest'%20-Identity%20'b342447b-eab9-ea11-8360-001a7dda7113'%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EExample%3A%20Migrate%20parent%20label%20%E2%80%9CHighly%20Confidential%E2%80%9D%20from%20Azure%20Portal%20to%20Compliance%20Center%20using%20the%20parent%20label%20properties.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22294%22%3E%3CP%3EParent%20Label%20Property%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EValue%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22294%22%3E%3CP%3EName%20(internal%20name%3B%20must%20be%20unique)%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EHighly%20Confidential%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22294%22%3E%3CP%3ETooltip%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EVery%20sensitive%20business%20data%20that%20would%20cause%20damage%20to%20the%20business%20if%20it%20was%20shared%20with%20unauthorized%20people.%20Examples%20include%20employee%20and%20customer%20information%2C%20passwords%2C%20source%20code%2C%20and%20pre-announced%20financial%20reports.%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22294%22%3E%3CP%3EComment%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EHighly%20Confidential%20Parent%20Label%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22294%22%3E%3CP%3EDisplay%20Name%20(displayed%20to%20end%20users)%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3EHighly%20Confidential%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22294%22%3E%3CP%3EIdentity%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E06960349-c5b2-465e-8d31-1652e5969da4%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22294%22%3E%3CP%3EParent%20ID%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22294%22%3E%3CP%3EEncryptionEnabled%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22294%22%3E%3CP%3EEncryptionProtectionType%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22294%22%3E%3CP%3EEncryptionTemplateId%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22294%22%3E%3CP%3EEncryptionAipTemplateScopes%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3ENew-Label%20-Name%20'Highly%20Confidential'%20-Tooltip%20'Very%20sensitive%20business%20data%20that%20would%20cause%20damage%20to%20the%20business%20if%20it%20was%20shared%20with%20unauthorized%20people.%20Examples%20include%20employee%20and%20customer%20information%2C%20passwords%2C%20source%20code%2C%20and%20pre-announced%20financial%20reports.'%20-Comment%20'High%20Confidential%20Parent%20Label'%20-DisplayName%20'Highly%20Confidential'%20-Identity%20%E2%80%9806960349-c5b2-465e-8d31-1652e5969da4'%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%225%22%3E%0A%3CLI%3E%3CSTRONG%3EMigrate%20sub%20label%3C%2FSTRONG%3E%20from%20Azure%20Portal%20to%20Security%20and%20Compliance%20Center%20using%20%3CSTRONG%3E%E2%80%98New-Label%E2%80%99%3C%2FSTRONG%3E%20cmdlt%20in%20PowerShell%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3ENew-Label%20-Name%20'aipscopetest'%20-Tooltip%20'aipscopetest'%20-Comment%20'admin%20notes'%20-DisplayName%20'aipscopetest'%20-Identity%20'b342447b-eab9-ea11-8360-001a7dda7113'%20-EncryptionEnabled%20%24true%20-EncryptionProtectionType%20'template'%20-EncryptionTemplateId%20'a32027d7-ea77-4ba8-b2a9-7101a4e44d89'%20-EncryptionAipTemplateScopes%20%22%5B'allcompany%40labelaction.onmicrosoft.com'%2C'admin%40labelaction.onmicrosoft.com'%5D%22%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EExample%3A%20Migrate%20sub%20label%20%E2%80%9CAll%20Employees%E2%80%9D%20from%20Azure%20Portal%20to%20Compliance%20Center%20using%20the%20sub%20label%20properties.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22287.42px%22%20height%3D%2230px%22%3E%3CP%3EProperty%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22313.549px%22%20height%3D%2230px%22%3E%3CP%3EValue%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22287.42px%22%20height%3D%2230px%22%3E%3CP%3EName%20(internal%20name%3B%20must%20be%20unique)%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22313.549px%22%20height%3D%2230px%22%3E%3CP%3EAll%20Employees%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22287.42px%22%20height%3D%22111px%22%3E%3CP%3ETooltip%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22313.549px%22%20height%3D%22111px%22%3E%3CP%3EHighly%20confidential%20data%20that%20allows%20all%20employees%20view%2C%20edit%2C%20and%20reply%20permissions%20to%20this%20content.%20Data%20owners%20can%20track%20and%20revoke%20content.%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22287.42px%22%20height%3D%2257px%22%3E%3CP%3EComment%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22313.549px%22%20height%3D%2257px%22%3E%3CP%3EHighly%20Confidential%20All%20Employees%20sub%20label%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22287.42px%22%20height%3D%2230px%22%3E%3CP%3EDisplay%20Name%20(displayed%20to%20end%20users)%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22313.549px%22%20height%3D%2230px%22%3E%3CP%3EAll%20Employees%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22287.42px%22%20height%3D%2230px%22%3E%3CP%3EIdentity%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22313.549px%22%20height%3D%2230px%22%3E%3CP%3Ed90363e7-f9a6-43b6-b83f-ac66df2c3c01%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22287.42px%22%20height%3D%2230px%22%3E%3CP%3EParentID%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22313.549px%22%20height%3D%2230px%22%3E%3CP%3E06960349-c5b2-465e-8d31-1652e5969da4%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22287.42px%22%20height%3D%2230px%22%3E%3CP%3EEncryptionEnabled%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22313.549px%22%20height%3D%2230px%22%3E%3CP%3ETrue%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22287.42px%22%20height%3D%2230px%22%3E%3CP%3EEncryptionProtectionType%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22313.549px%22%20height%3D%2230px%22%3E%3CP%3ETemplate%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22287.42px%22%20height%3D%2230px%22%3E%3CP%3EEncryptionTemplateId%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22313.549px%22%20height%3D%2230px%22%3E%3CP%3E19989161-dacd-409c-ab97-48d1433e1de7%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22287.42px%22%20height%3D%2230px%22%3E%3CP%3EEncryptionAipTemplateScopes%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22313.549px%22%20height%3D%2230px%22%3E%3CP%3Econtoso%40contoso.onmicrosoft.com%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3ENew-Label%20-Name%20'Highly%20Confidential%20All%20Employees'%20-Tooltip%20'%20Highly%20confidential%20data%20that%20allows%20all%20employees%20view%2C%20edit%2C%20and%20reply%20permissions%20to%20this%20content.%20Data%20owners%20can%20track%20and%20revoke%20content.'%20-Comment%20'Highly%20Confidential%20All%20Employees%20sub%20label'%20-DisplayName%20'All%20Employees'%20-Identity%20'b342447b-eab9-ea11-8360-001a7dda7113'-ParentId%20%E2%80%9806960349-c5b2-465e-8d31-1652e5969da4%E2%80%99%20-EncryptionEnabled%20%24true%20-EncryptionProtectionType%20'template'%20-EncryptionTemplateId%20%E2%80%9819989161-dacd-409c-ab97-48d1433e1de7'%20-EncryptionAipTemplateScopes%20%22%5B'allcompany%40contoso.onmicrosoft.com'%5D%22%0A%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1648701539%22%20id%3D%22toc-hId--1648818720%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20id%3D%22toc-hId-838811294%22%20id%3D%22toc-hId-838694113%22%3E%3CSTRONG%3EVerify%20labels%20has%20been%20migrated%20to%20the%20Security%20and%20Compliance%20Center%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFinally%2C%20we%20will%20verify%20that%20our%20labels%20have%20been%20migrated%20from%20the%20AIP%20Portal%20by%20navigating%20to%20the%20new%20label%20management%20portal%2C%20the%20Security%20and%20Compliance%20Center.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%3CSTRONG%3ESign%20in%3C%2FSTRONG%3E%20to%20the%20%3CA%20href%3D%22https%3A%2F%2Fcompliance.microsoft.us%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3E%3CSTRONG%3ESecurity%20and%20Compliance%20Center%3C%2FSTRONG%3E%3C%2FA%3E%20for%20GCC-H%3C%2FLI%3E%0A%3CLI%3E%3CSTRONG%3EGo%20to%3C%2FSTRONG%3E%20your%20%3CSTRONG%3EInformation%20Protection%3C%2FSTRONG%3E%20tab%3C%2FLI%3E%0A%3CLI%3E%3CSTRONG%3EVerify%3C%2FSTRONG%3E%20your%20new%20labels%20has%20been%20created%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CDIV%20id%3D%22tinyMceEditoralsteele_7%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22alsteele_8-1614876638214.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F260901i7302CAF741166D84%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22alsteele_8-1614876638214.png%22%20alt%3D%22alsteele_8-1614876638214.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3EFigure%206%3A%20Security%20and%20Compliance%20Center%20label%20management%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3ENote%3A%20Policies%20are%20not%20migrated%20from%20the%20AIP%20Portal%20to%20the%20Security%20and%20Compliance%20Center.%20Administrators%20will%20have%20to%20create%20new%20label%20policies%20in%20the%20Security%20and%20Compliance%20Center.%20%26nbsp%3B%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--968643169%22%20id%3D%22toc-hId--968760350%22%3E%3CSTRONG%3ESunsetting%20Label%20Management%20in%20the%20Azure%20Portal%20and%20AIP%20client%20(classic)%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3E%3CSTRONG%3E%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EWe%20have%20a%20plan%20to%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Ftechcommunity.microsoft.com%252Ft5%252Fazure-information-protection%252Fannouncing-timelines-for-sunsetting-label-management-in-the%252Fba-p%252F1226179%26amp%3Bdata%3D02%257C01%257Cv-harame%2540microsoft.com%257Cd1d02bd1c2364952d98c08d80c90dea7%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637273163690662805%26amp%3Bsdata%3DOvleZyHNTz8U0n7FK5G%252Fq7fpG1HnnRQplxEV0pcJ%252BRE%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Esunset%20label%20management%3C%2FA%3E%26nbsp%3Bin%20Azure%20Portal%20and%20AIP%20client%20(classic)%20for%20Government%20Cloud%20Customers.%26nbsp%3B%20Meanwhile%2C%20Government%20Cloud%20Customers%20who%20own%20licenses%20for%20AIP%20will%20receive%20continued%20support%20for%20the%20classic%20client%20for%2012%20months%20after%20the%20general%20availability%20of%20unified%20labeling%20for%20Government%20Cloud.%20Government%20Cloud%20Customers%20who%20may%20need%20features%20that%20are%20not%20yet%20in%20the%20latest%20release%20of%20the%20unified%20labeling%20client%20can%20ask%20for%20additional%20extended%20support%20for%20the%20classic%20client%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fforms.office.com%252FPages%252FResponsePage.aspx%253Fid%253Dv4j5cvGGr0GRqy180BHbR-FyDNJLXCVMtCmIMVS2sZZUM09EOEZTU1dIT04ySDhFMFRNVUFBVTZTWi4u%26amp%3Bdata%3D02%257C01%257Cv-harame%2540microsoft.com%257Cd1d02bd1c2364952d98c08d80c90dea7%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637273163690672800%26amp%3Bsdata%3DnxRM6dYRyeLHeJg4jrGTnlGtKawpaAMxC3XluCMEI3U%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehere%3C%2FA%3E%26nbsp%3Bbefore%20September%2030%2C%202021.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAzure%20Information%20Protection's%20classic%20client%20and%20Label%20Management%20in%20the%20Azure%20Portal%20will%20be%20deprecated%20on%26nbsp%3B%3CSTRONG%3ESeptember%2030%2C%202021%3C%2FSTRONG%3E%26nbsp%3Bfor%20Government%20Community%20Cloud%20customers.%20For%20information%20on%20admin%20experience%20post%20deprecation%20date%2C%20check%20out%20this%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-security-and%2Fazure-aip-portal-label-amp-policy-management-admin-experience%2Fba-p%2F2182678%22%20target%3D%22_blank%22%3Eblog%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENote%3A%20AIP%20UL%20scanner%20management%20will%20still%20be%20available%20on%20AIP%20portal%20and%20will%20not%20be%20deprecated.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2185328%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EInformation%20Protection%20%26amp%3B%20Governance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20365%20Compliance%20Center%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Information%20Protection%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Co-Authors
Version history
Last update:
‎Mar 04 2021 09:20 AM
Updated by: