To configure Sensitivity Labels in ProvisionPoint the Labels must already exist in your tenant.
Go to M365 Admin Centre > Purview > Solutions > Information Protection
Collect Label ID and Order/Priority
When a Sensitivity Label is created an order/priority is defined and a unique ID is assigned. These details are required to configure ProvisionPoint.
To collect the details there are multiple options or endpoints that can be used via PowerShell, below are a few examples:
Connect via Microsoft Graph
Below is a script that demonstrates how to retrieve sensitivity label information using the Microsoft Graph API and PowerShell.
Prerequisites
Microsoft Graph PowerShell SDK: Ensure you have the Microsoft Graph PowerShell SDK installed. You can install it using:
Install-Module Microsoft.Graph -Scope CurrentUser
Permissions: Ensure you have the necessary permissions to access sensitivity labels in your Microsoft 365 environment.
Script to Collect Sensitivity Label Details
# Connect to Microsoft Graph
Connect-MgGraph -Scopes "SecurityEvents.Read.All"
# Retrieve sensitivity labels
$sensitivityLabels = Get-MgInformationProtectionSensitivityLabel
# Display sensitivity label details
foreach ($label in $sensitivityLabels) {
Write-Output "Label ID: $($label.Id)"
Write-Output "Label Name: $($label.DisplayName)"
Write-Output "Description: $($label.Description)"
Write-Output "Is Active: $($label.IsActive)"
Write-Output "-----------------------------"
}
# Disconnect from Microsoft Graph
Disconnect-MgGraph
Explanation
-
Connect-MgGraph: This cmdlet connects to Microsoft Graph with the specified permissions.
-
Get-MgInformationProtectionSensitivityLabel: This cmdlet retrieves the sensitivity labels from Microsoft 365.
-
foreach loop: Iterates through each sensitivity label and outputs its details.
Notes
You might need to consent to the required permissions the first time you run the script.
Connect via Security & Compliance PowerShell
To get these connect to Security & Compliance Center PowerShell
First Import the EXO V2 module
-
Import-Module ExchangeOnlineManagement
Then define credentials
-
$UserCredential = Get-Credential
Then connects to Security & Compliance Center PowerShell
-
Connect-IPPSSession -Credential $UserCredential
Note these instructions will vary when connecting using MFA or certain datacenters.
Once connected run the following command to list the Labels and associated Ids.
-
Get-Label |ft DisplayName, Guid, Priority, ContentType
