Sensitivity Labels in Microsoft
Sensitivity labels in Microsoft 365 help classify and protect your organization's data, ensuring that user productivity and collaboration are not hindered. Here's a summary of how they work for containers and documents:
For Containers (e.g., Teams, Groups, SharePoint Sites)
- Privacy Settings: Labels can define whether a container is public or private.
- External User Access: Control access for external users.
- External Sharing: Manage sharing settings for SharePoint sites.
- Access from Unmanaged Devices: Restrict access from devices not managed by your organization.
- Authentication Contexts: Integrate with Conditional Access policies.
- Discovery and Sharing: Control the discoverability of private teams and default sharing links
For Documents (e.g., Office Files, PDFs)
- Label Application: Users can apply sensitivity labels directly in Office apps, SharePoint, and OneDrive.
- Encryption: Labels can enforce encryption, ensuring that only authorized users can access the content.
- Content Markings: Labels can add watermarks, headers, or footers to documents.
- Automatic Labeling: Automatically apply labels based on content or user actions.
- Collaboration: Encrypted documents can still be co-authored and shared with external users if permissions allow
By using sensitivity labels, organizations can ensure that sensitive information is appropriately protected while maintaining flexibility and ease of use for end-users.
Why is this important?
The two types of Sensitivity Labels are not linked, if you apply a Sensitivity label to a container, it does not mean all documents will by default have the same label applied to them.
How Default Sensitivity Labels Work in SharePoint Lists or Libraries
A default sensitivity label in a SharePoint list or library helps ensure that all new items or documents added to the library are automatically labeled with a specific sensitivity label.
Here's how it works:
- Automatic Labeling: When you configure a default sensitivity label for a SharePoint document library, any new files uploaded to that library or existing files edited in the library will have that label applied if they don't already have a sensitivity label.
- Priority Handling: If a file already has a sensitivity label with a lower priority, the default label will override it. However, if the file has a manually applied label or a higher priority label, the default label will not override it.
- Location-Based Labeling: This feature provides a baseline level of protection and acts as a form of automatic labeling without content inspection
What can ProvisionPoint do with Sensitivity Labels?
- Apply a container label to the Teams, Groups and SharePoint Sites that are created through or Imported in to ProvisionPoint.
- Change the Sensitivity Label via Actions
- Apply a default Sensitivity Label to SharePoint Lists & libraries
The same label can be added to the container and set as the default for the Documents library and any new libraries that are created through our app.