Forum Discussion
How to Monitor Changes to Sensitivity Labels Used for Container Management
Sensitivity labels are an effective way to manage containers like Teams, Microsoft 365 Groups, and SharePoint sites. Microsoft doesn’t provide any way to track changes made to labels assigned to ...
Using a scheduled job run in Azure Automation is a good way to track changes made to groups...
I agree, however for an organization with strict rules on guest access, that's unfortunately not an airtight solution. We need to ensure users can never add a guest to a Team unless the Team is approved for guest access.
- Use sensitivity labels to block guest access and apply the labels to the groups you want to keep guest-free. Then no one except an administrator can add a new member to those groups.
- That was my original plan after reading your articles - but can't group owners change sensitivity labels?
- And the thing is, if a group owner keeps on changing the label assigned to a group with the intention of adding guests to a team that discusses confidential information, isn't that an opportunity for HR to flex their muscles and acquaint said owner with the wonders of a disciplinary process?