Apply Sensitivity Label to Site

[Dean Gross]

I am seeing the ability to assign a Sensitivity Label to a SharePoint site in the SPO Admin Center, on the Information Panel, but none of my labels are available for selection. Can anyone tell me how to enable this functionality. I can't find anything in the SPO or AIP docs.

[#2]

@Dean Gross - Me too.  Came here looking for answers.  Commenting to follow.

[#3]

@Sara Fennah, @Dean Gross , any luck getting this configured? 

Do you need to use PowerShell such as Set-SPOSite -SensitivityLabel <guid> ?

Cheers,

Nigel 

[#4]

It could be due to slow replication between Microsoft 365, AzureAD and SharePoint.

https://github.com/MicrosoftDocs/microsoft-365-docs/issues/4611

You can configure Labels on Teams / Office365 groups from the AzureAD Portal once the environment has been set up correctly.

Import-Module ExchangeOnlineManagement
Connect-ExchangeOnline -UserPrincipalName <upn>
Test-IRMConfiguration -Sender <email> -Recipient <email>

Import-Module AIPService
Connect-AIPService
Set-AipServiceOnboardingControlPolicy -UseRmsUserLicense $True
Enable-AipService
Get-AipService

Import-Module ExchangeOnlineManagement
Connect-IPPSSession -UserPrincipalName <upn>
Get-Label | Select-Object -Property Name,GUID
Disconnect-ExchangeOnline

Import-Module AzureADPreview
Connect-AzureAD

$setting = (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ)
$template = Get-AzureADDirectorySettingTemplate -Id 62375ab9-6b52-47ed-826b-58e47e0e304b
$setting = $template.CreateDirectorySetting()
$Setting["EnableMIPLabels"] = "True"
New-AzureADDirectorySetting -DirectorySetting $setting

Execute-AzureAdLabelSync

Import-Module -Name Microsoft.Online.SharePoint.PowerShell
Connect-SPOService -Url https://<site>-admin.sharepoint.com -Credential <upn>
Set-SPOTenant -EnableAIPIntegration $true

You also need to configure the Sensitivity Labels to be used in Groups/Teams, publish those labels, sync those labels, and potentially wait up for 24 hours for them to appear in AzureAD.

Cheers,

Nigel 

[#5]

Working for me now. As you commented. you do need to enable labels for groups & sites (lines 16-23 of the quoted script) and then sync them across Azure AD & Exchange with line 25 of the quoted script. Also make sure you have published the labels to the user accounts who are applying them