Prevent saving documents categorized as " Confidential " in sharepoint and onedrive

%3CLINGO-SUB%20id%3D%22lingo-sub-921626%22%20slang%3D%22en-US%22%3EPrevent%20saving%20documents%20categorized%20as%20%22%20Confidential%20%22%20in%20sharepoint%20and%20onedrive%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-921626%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%0A%3CP%3EIs%20there%20a%20method%20to%20prevent%20saving%20any%20document%26nbsp%3B%3CEM%3E(word%2C%20excel%2C..)%20c%3C%2FEM%3Eategorized%20as%3CSTRONG%3E%20confidential%3C%2FSTRONG%3E%20using%20%3CSTRONG%3EAIP%20plan%202%3C%2FSTRONG%3E%20in%20Microsoft%20cloud%20(SharePoint%20et%20One%20drive)%3F%3C%2FP%3E%0A%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-921626%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EInformation%20Protection%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ERights%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1027887%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20saving%20documents%20categorized%20as%20%22%20Confidential%20%22%20in%20sharepoint%20and%20onedrive%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1027887%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F196809%22%20target%3D%22_blank%22%3E%40Karim%20Hossam%3C%2FA%3E%26nbsp%3BI'm%20pretty%20sure%20you%20can%20do%20it%20using%20MCAS%2C%20if%20you're%20licensed%20for%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1036946%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20saving%20documents%20categorized%20as%20%22%20Confidential%20%22%20in%20sharepoint%20and%20onedrive%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1036946%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F196809%22%20target%3D%22_blank%22%3E%40Karim%20Hossam%3C%2FA%3E%26nbsp%3BAIP%20P2%20along%20can't%20do%20this.%20You%20need%20MCAS%20from%20EMS%20E5%20or%20M365%20E5%20security%20SKU.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1.%20Use%20conditional%20access%20app%20control%20to%20route%20SharePoint%20online%20traffic%20over%20to%20MCAS%3C%2FP%3E%3CP%3E2.%20Configure%20MCAS%20session%20policy%20using%20%22Block%20upload%20using%20real-time%20content%20inspection%22%20template%3C%2FP%3E%3CP%3E3.%20Add%20AIP%20label%20as%20a%20file%20filter%20in%20the%20session%20policy%3C%2FP%3E%3CP%3E4.%20Choose%20to%20block%3C%2FP%3E%3C%2FLINGO-BODY%3E
Microsoft

Hello,

Is there a method to prevent saving any document (word, excel,..) categorized as confidential using AIP plan 2 in Microsoft cloud (SharePoint et One drive)?

Thanks

2 Replies

@Karim Hossam I'm pretty sure you can do it using MCAS, if you're licensed for it.

@Karim Hossam AIP P2 along can't do this. You need MCAS from EMS E5 or M365 E5 security SKU. 

 

1. Use conditional access app control to route SharePoint online traffic over to MCAS

2. Configure MCAS session policy using "Block upload using real-time content inspection" template

3. Add AIP label as a file filter in the session policy

4. Choose to block