Sensitivity Labels
22 TopicsEncrypting a SharePoint List
Hi We are developing a solution that will save sensitive info on a SharePoint List. Thinking to use Sensitivity labels to encrypt the info. It is possible to: Encrypt certain columns? if not Certain List Certain site... Where can I find some instructions on how to achieve this? I assume a form in MS forms is not encrypted? ThanksSolved8KViews0likes3CommentsSensitivity labels
Hi all, I have a question(s) related to sensitivity label(s) limitations: 1.) are there limitations on how many sensitivity labels can I create for 1 organization? If yes, what are they? 2.) "auto-labelling policies" - are there any limitations on that? If yes, what are they? KR DTLDSolved5.3KViews0likes2CommentsMultilingual sensitivity labels in SharePoint Sites, Office Web and MS Team groups
I configured multilingual sensitivity labels (the new unified labels). In the Office Client Apps the language detection is fine, the labels are displayed in German. But in SharePoint Sites, Office Web and MS Team groups the sensitivity labels are still in the default language. The preferredlanguage attribute of the user account is fine (de-de). The language change is more than 36 hours ago. Someone an idea how or when the label languages will be changed in other M365 services? Thanks for some hints. Tobias4.8KViews1like5CommentsCan you prevent the downgrade of a sensitivity label?
I know you can require a justification to downgrade a label to a less restrictive label, but can you prevent it? It seems a logical extension of this capability but I cannot find any articles to suggest this is possible. The only thing I can think of is to encrypt the label, and don't allow the "Edit rights". I am going to be testing this, but I was wondering if there is another (better) way.3.2KViews0likes2CommentsIdentifying Sensitivity labels using Purview APIs
Appreciate any inputs on the below: 1. I created a sensitivity label in the MS Compliance center following steps in https://docs.microsoft.com/en-us/azure/purview/how-to-automatically-label-your-content#create-or-extend-existing-sensitivity-labels-to-azure-purview 2. Now when I scan a file in Purview, it does apply the label for one of the files satisfying the criteria (has SSN data) 3. Now when I use the GET Entity by guid REST API, I get the below classification section indicating the label details This has no reference to the sensitivity label name nor indicates that is a sensitivity label. Given that this is in the 'classification' section, how do we differentiate this from other classifications. How do we match it with the name?Solved3.1KViews0likes1CommentDefault Sensitivity (Information Protection) Labels in a SharePoint Online Document Library
I am currently in the process of implementing information protection in a new SharePoint Online architecture that I am building to replace our one classic site (to rule them all), but I am experiencing an issue when trying to assign a default sensitivity label to an existing or new document library. When accessing the basic library settings for any existing document library, I get two grey boxes that look like they are loading in, but never load where the default sensitivity label settings should be. When creating a new document library, I can see the default sensitivity label setting, but there are no labels available. For some context, I have created four sensitivity labels so far, and have created a test label policy that has assigned all four labels to my own account for testing. For licensing, I have the following: Office 365 E3 Enterprise Mobility + Security E5 Microsoft Defender for Office 365 (Plan 2) Microsoft 365 E5 Compliance This Licensing structure came out cheaper than M365 E5 and I was under the assumption that it had all of the functionality that my organisation requires at this point in time. I have raised this issue with Microsoft support on the April 25th and still have not yet had a proper consultation let alone a resolution, so I am hoping the community here would be a bit more responsive. Let me know if there is any more information that might be of help.2.5KViews0likes6CommentsExport MDCA policy matches information via web console or API
Hi Everyone, This is my maiden post and thought this community to be able to give me guidance and help on my situation. I have created a policy to detect file violations using defender for cloud apps (previously MCAS), and the total count has reached approx. 1.2 million for specific Azure Info Protection (AIP) labels that matches the files stored on OneDrive and SharePoint Online. I'd like to export the records in an efficient manner, and I've explored: 1) via website, which limits to 5,000 records onto csv file 2) via Graph API which limits to 100 records every 2-seconds based on API calls limit imposed system wide Both are not working out, as (1) I can't live with 5,000 records, and the work around would be to implement an RPA via say PowerAutomate desktop or UI Path to do some form of web-scraping to download records and changing the advanced filters to a modified date range... even then, I am not quite sure how to do this yet, and if someone out there knows it, do let me know so that I can attempt to figure out via self-learning. Option (2) which is the method I've attempted, is futile as the process is inconsistent and I am continuously facing errors every time I execute scripts to download the records and export them onto the csv file. I'd like to know if anyone in the community has a better way/approach for me to deal with this situation. I tried to segregate my policy by the year of detection (2020, 2021 and 2022), and I am seeing 500k records for 2022, and 300k records for 2021, likely another 400k records for 2020 and before. I am quite stuck at the moment and would appreciate if anyone have any ideas on how to deal with exporting the information captured in the policy which I've created to detect file violations on the tenant. Caroline_Lee GershonLevitz-MSFT for visibility and recommendations.. 🙂Default Sensitivity Label to be added to migrated files (from Local Network Server)
Hi Experts, We are migrating our file-sharing services from a local network file server to MS Teams/SPO. The requirement is to enable and give default sensitivity labels from the migrated files. Manually assigning sensitivity labels in over a TB of files is hectic and could be prone to error as well. MS Purview MIP labels and label policies are configured, however, at present, only new documents and/or revised files are only having the sensitivity labels assigned. Any suggestions, guide, and tips will be highly appreciated. Thanks, Rhey918Views1like5CommentsMicrosoft Purview Best Practices
Microsoft Purview is a solution that helps organizations manage data and compliance. It also uses AI to classify data, monitor compliance, and identify risks. Key features include data discovery, classification, governence, retention, compliance management, encryption, and access controls. Purview ensures data security, prevents insider threats, and helps implement data loss prevention policies to meet compliance requirements. Hello everyone - This is just a short introduction, I am Dogan Colak. I have been working as an M365 Consultant for about 5 years, holding certifications such as MCT, SC-100, SC-200, SC-300, and MS-102, with a focus on Security & Compliance. This year, I am excited to share what I have learned with the Microsoft Technology Community. In the coming days, I will be publishing videos and articles based on the training agenda I have created. I will also share these articles on LinkedIn, so feel free to follow me there. I am always open to feedback and suggestions. See you soon!900Views2likes1Comment