Forum Discussion
using sensitivity labels to control guest access - but Yammer . . .
We are looking into using sensitivity labels to control guest access in Teams and SPO. We have things configured so when you create a new Team, SPO site, Planner, O365 group in Office, you are requir...
I also asked Microsoft Support about this same issue. It's a very interesting marketing dilemma by Microsoft. It says several times on this page that you can use sensitivity labels to control guest access to INDIVIDUAL yammer communities:
https://learn.microsoft.com/en-us/yammer/get-started-with-yammer/azure-ad-b2b-guests-yammer#:~:text=This%20setting%20is%20a%20Yammer%20network%2Dwide%20setting.%20Enabling%20guest%20access%20here%20allows%20community%20admins%20to%20add%20guests%20to%20any%20Yammer%20community%20in%20the%20network.%20You%20can%20control%20guest%20access%20to%20individual%20Yammer%20communities%20by%20using%20sensitivity%20labels.
However, on this page it says sensitivity labels are not currently supported in Yammer:
https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide#:~:text=The%20following%20apps%20and%20services%20don%27t,My%20Apps%20portal
When I contacted Microsoft support and we tested it, we were able to manually set the sensitivity label on the connected SharePoint site but it only restricted external access at the site level...not at the M365 group level associated with the community. When we tried to set the sensitivity label at the M365 group level, you were still able to give external access to guests. So, I would also agree that it is a "Bug" or the development of "Sensitivity Labels" is not finished yet. The support tech also agreed and was not able to provide any projected date as to when that would work in Yammer. Thus, Yammer is all or nothing. You enable Guest access for ALL communities or NONE. Until they fix that, we can't enable it for any communities. Now users are creating private Facebook groups. What a shame.
https://learn.microsoft.com/en-us/yammer/get-started-with-yammer/azure-ad-b2b-guests-yammer#:~:text=This%20setting%20is%20a%20Yammer%20network%2Dwide%20setting.%20Enabling%20guest%20access%20here%20allows%20community%20admins%20to%20add%20guests%20to%20any%20Yammer%20community%20in%20the%20network.%20You%20can%20control%20guest%20access%20to%20individual%20Yammer%20communities%20by%20using%20sensitivity%20labels.
However, on this page it says sensitivity labels are not currently supported in Yammer:
https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide#:~:text=The%20following%20apps%20and%20services%20don%27t,My%20Apps%20portal
When I contacted Microsoft support and we tested it, we were able to manually set the sensitivity label on the connected SharePoint site but it only restricted external access at the site level...not at the M365 group level associated with the community. When we tried to set the sensitivity label at the M365 group level, you were still able to give external access to guests. So, I would also agree that it is a "Bug" or the development of "Sensitivity Labels" is not finished yet. The support tech also agreed and was not able to provide any projected date as to when that would work in Yammer. Thus, Yammer is all or nothing. You enable Guest access for ALL communities or NONE. Until they fix that, we can't enable it for any communities. Now users are creating private Facebook groups. What a shame.