Sensitivity labels and DLP for SharePoint

%3CLINGO-SUB%20id%3D%22lingo-sub-1378566%22%20slang%3D%22en-US%22%3ERe%3A%20Sensitivity%20labels%20and%20DLP%20for%20SharePoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1378566%22%20slang%3D%22en-US%22%3EIf%20you%20run%20this%20PowerShell%20command%20then%20the%20files%20should%20be%20searchable%3CBR%20%2F%3ESet-SPOTenant%20-EnableAIPIntegration%20%24true%3CBR%20%2F%3EReference%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fsensitivity-labels-sharepoint-onedrive-files%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fsensitivity-labels-sharepoint-onedrive-files%3Fview%3Do365-worldwide%3C%2FA%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1378701%22%20slang%3D%22en-US%22%3ERe%3A%20Sensitivity%20labels%20and%20DLP%20for%20SharePoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1378701%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F5941%22%20target%3D%22_blank%22%3E%40Joe%20Stocker%3C%2FA%3EY%3CFONT%3Eep...we%20have%20done%20that%20already%20but%20no%20luck.%20None%20of%20the%20sensitivity%20labels%20related%20properties%20are%20showing%20in%20SharePoint%20search%20index.%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1346204%22%20slang%3D%22en-US%22%3ESensitivity%20labels%20and%20DLP%20for%20SharePoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1346204%22%20slang%3D%22en-US%22%3E%3CP%3EI%20know%20there%20is%20currently%20no%20support%20to%20use%20'Sensitivity%20labels'%20in%20Office%20365%20DLP.%20There%20are%20workarounds%20available%20like%20creating%20a%20DLP%20policy%20that%20uses%20the%20label%20value%20for%20Document%20property%20e.g.%26nbsp%3BMSIP_Label_%3CGUID%3E_Enabled%3Atrue.%3C%2FGUID%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOne%20workaround%20has%20been%20used%20for%20SharePoint%20%3CA%20href%3D%22https%3A%2F%2Fjoannecklein.com%2F2018%2F01%2F22%2Fuse-aip-labels-in-dlp-policy-rules%2F%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Elike%20this%20one%3C%2FA%3E%20which%20is%20based%20on%20search%20index.%20I%20note%20this%20workaround%20uses%20AIP%20labels.%20%3CFONT%20color%3D%22%23FF0000%22%3E%3CSTRONG%3EI%20have%20found%20that%20sensitivity%20labels%20don't%20appear%20in%20SharePoint%20search%20index.%26nbsp%3B%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHas%20someone%20out%20there%20tried%20configuring%20Office%20365%20DLP%20policies%20that%20use%20sensitivity%20labels%20to%20protect%20documents%20in%20SharePoint%20as%20mentioned%20above.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1346204%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EData%20Loss%20Prevention%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Office%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Frequent Contributor

I know there is currently no support to use 'Sensitivity labels' in Office 365 DLP. There are workarounds available like creating a DLP policy that uses the label value for Document property e.g. MSIP_Label_<guid>_Enabled:true.

 

One workaround has been used for SharePoint like this one which is based on search index. I note this workaround uses AIP labels. I have found that sensitivity labels don't appear in SharePoint search index. 

 

Has someone out there tried configuring Office 365 DLP policies that use sensitivity labels to protect documents in SharePoint as mentioned above.

2 Replies
If you run this PowerShell command then the files should be searchable
Set-SPOTenant -EnableAIPIntegration $true
Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-sharepoint-onedrive-fil...

@Joe StockerYep...we have done that already but no luck. None of the sensitivity labels related properties are showing in SharePoint search index.