need to create an auto-label policy for all sharepoint and onedrive

%3CLINGO-SUB%20id%3D%22lingo-sub-1511947%22%20slang%3D%22en-US%22%3Eneed%20to%20create%20an%20auto-label%20policy%20for%20all%20sharepoint%20and%20onedrive%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1511947%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20just%20starting%20to%20test%20data%20classification.%20I'm%20creating%20a%20auto-label%20policy%20that%20I%20want%20to%20apply%20to%20all%20sharepoint%20and%20onedrive%20sites.%20But%20it%20looks%20like%20I%20need%20to%20add%20a%20URL%20for%20each%20sharepoint%20site%20or%20onedrive%20site%20I%20want%20the%20policy%20apply%20to.%20When%20I%20create%20a%20DLP%20there%20is%20an%20easy%20option%20to%20apply%20to%20all%2C%20I%20don't%20see%20that%20with%20the%20auto-label.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAm%20I%20missing%20something%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%3C%2FP%3E%3CP%3Ejb%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1511947%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EInformation%20Protection%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1512434%22%20slang%3D%22en-US%22%3ERe%3A%20need%20to%20create%20an%20auto-label%20policy%20for%20all%20sharepoint%20and%20onedrive%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1512434%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F606641%22%20target%3D%22_blank%22%3E%40Jason_B1025%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWith%20auto-labelling%2C%20you%20only%20have%20the%20option%20to%20apply%20as%20shown%20below%2C%20and%20then%20selecting%20the%20SP%20sites%20you%20want%20to%20target%2C%20or%20the%20OneDrive%20Sites.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot%202020-07-09%20at%2018.14.04.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F204445iAF3BABE73F71A0BB%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Screenshot%202020-07-09%20at%2018.14.04.png%22%20alt%3D%22Screenshot%202020-07-09%20at%2018.14.04.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20may%20change%20over%20time%2C%20but%20for%20the%20time%20being%2C%20this%20is%20the%20way%20it%20is.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1512763%22%20slang%3D%22en-US%22%3ERe%3A%20need%20to%20create%20an%20auto-label%20policy%20for%20all%20sharepoint%20and%20onedrive%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1512763%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3BSo%20if%20I%20want%20all%20onedrive%20sites%20in%20the%20company%20included.%20I%20have%20to%20add%20each%20induvial%20one%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1512877%22%20slang%3D%22en-US%22%3ERe%3A%20need%20to%20create%20an%20auto-label%20policy%20for%20all%20sharepoint%20and%20onedrive%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1512877%22%20slang%3D%22en-US%22%3EThe%20other%20option%20(if%20you%20have%20it)%20is%20to%20apply%20file%20access%20policies%20that%20apply%20a%20classification%20as%20a%20governance%20action%20in%20Cloud%20App%20Security.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1596271%22%20slang%3D%22en-US%22%3ERe%3A%20need%20to%20create%20an%20auto-label%20policy%20for%20all%20sharepoint%20and%20onedrive%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1596271%22%20slang%3D%22en-US%22%3EThanks%20I'll%20have%20to%20check%20that%20out.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2012575%22%20slang%3D%22en-US%22%3ERe%3A%20need%20to%20create%20an%20auto-label%20policy%20for%20all%20sharepoint%20and%20onedrive%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2012575%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F606641%22%20target%3D%22_blank%22%3E%40Jason_B1025%3C%2FA%3E%26nbsp%3BI%20believe%20in%20the%20future%2C%20there%20will%20be%20a%20Private%20Preview%20for%20an%20%22all%22%20option.%20From%20my%20understanding%2C%20they%20are%20going%20to%20get%20this%20more%20looking%20like%20a%20DLP%20policy%20where%20you%20have%20the%20option%20to%20just%20select%20%22all.%22%20Because%2C%20to%20your%20point%2C%20it%20is%20unrealistic%20to%20expect%20an%20admin%20to%20type%20in%20thousands%20of%20URLs%20to%20include%20every%20SP%20site%20and%2For%20every%20OD%20URL%20in%20their%20org.%20My%20company%20has%20over%2085%2C000%20employees%2C%20so%20we%20kinda%20laughed%20at%20the%20notion%20that%20we%20would%20have%20to%20type%20in%20every%20single%20one%20of%20those.%20You%20may%20contact%20and%20confirm%20this%20roadmap%20item%20with%20someone%20from%20Microsoft%2C%20but%20as%20I%20say%2C%20that%20is%20our%20understanding%20based%20on%20some%20recent%20meetings.%20For%20the%20time%20being%2C%20they'll%20suggest%20you%20look%20at%20your%20Content%20Explorer%20in%20the%20Compliance%20Center%20to%20see%20where%20your%20most%20sensitive%20sites%20are%20(aka%20the%20ones%20that%20house%20the%20most%20sensitive%20information%20or%20whatever)%20and%20just%20add%20those%20URLs.%20Sort%20of%20taking%20care%20of%20the%20biggest%20fish%20within%20the%20fewest%20amount%20of%20URLs.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

I'm just starting to test data classification. I'm creating a auto-label policy that I want to apply to all sharepoint and onedrive sites. But it looks like I need to add a URL for each sharepoint site or onedrive site I want the policy apply to. When I create a DLP there is an easy option to apply to all, I don't see that with the auto-label.

 

Am I missing something?

 

Thank you

jb

5 Replies

@Jason_B1025 

 

With auto-labelling, you only have the option to apply as shown below, and then selecting the SP sites you want to target, or the OneDrive Sites.

 

Screenshot 2020-07-09 at 18.14.04.png

 

This may change over time, but for the time being, this is the way it is.

@PeterRising So if I want all onedrive sites in the company included. I have to add each induvial one?

 

The other option (if you have it) is to apply file access policies that apply a classification as a governance action in Cloud App Security.
Thanks I'll have to check that out.

@Jason_B1025 I believe in the future, there will be a Private Preview for an "all" option. From my understanding, they are going to get this more looking like a DLP policy where you have the option to just select "all." Because, to your point, it is unrealistic to expect an admin to type in thousands of URLs to include every SP site and/or every OD URL in their org. My company has over 85,000 employees, so we kinda laughed at the notion that we would have to type in every single one of those. You may contact and confirm this roadmap item with someone from Microsoft, but as I say, that is our understanding based on some recent meetings. For the time being, they'll suggest you look at your Content Explorer in the Compliance Center to see where your most sensitive sites are (aka the ones that house the most sensitive information or whatever) and just add those URLs. Sort of taking care of the biggest fish within the fewest amount of URLs.