Encrypt SharePoint Document Libraries using Sensitivity Labels and MCAS!
Вставка
- Опубліковано 6 сер 2024
- You may have a requirement to apply a Microsoft 365 Sensitivity Label (formerly Azure Information Protection) to all files in a document library. I'm going to show you how to do this automatically with Microsoft Cloud App Security. Don’t forget to use those filters!
More information: docs.microsoft.com/en-us/clou...
Table of Contents:
00:00:00 Intro
00:00:43 Enable AIP Integration
00:01:10 Create File Policy
00:02:34 Demo of Auto Apply Label - Наука та технологія
Hi Matt; thanks for the video, I have created a couple of Team sites in SPO with some folders in the Document section of each one but when I trying to apply the filter choosing "selected folder"->Add folders I am not able to see the folders created from my new Team sites. Am I missing something else? I have followed the steps in your video and wait for at least 24 hrs and nothing happened, any additional thoughts? Thanks in advance!
Hi Matt, is my understanding correct that this gives you more granular control over labelling doc libraries in a sharpening site where as auto labelling a share point site does every file in every doc library?
Great video, thank you! How does this differ from the service level auto-labeling in the S&C center? Is it just another method of doing this? If so, I know the auto-labeling has some limitations around the number of policies and sites you can classify would this be a way around that limitation.
The service level can only apply based on sensitive information type, trainable classifier etc but cannot apply to a document library in SPO
Hey Matt. How are you doing? I am having a little problem but not sure this is a limitation of the product or just not configuring it correctly. What I am trying to do is apply a label to a site collection. With in that site collection any document in the document library must have a label applied to it. I am good up to that part. The problem I am running into is when i have a label where the 'let users assign permissions when they apply the label.' The label is not an option that shows up in SharePoint when trying to select it. Any other label without user defined permissions is available. Is this because of its design or something else. Thank you.
I managed to enable it, but when I go to add files nothing appears in the sharepoint list, as in your video
Hi Matt, thank you for the great video. a litle question. Will this also do for new added files?
Yes for new files that haven't been previously assigned a label.
Is there a way to do this without cloud app security? I mean, is there a way to apply a label on multiple folders/files at a time or a document library via an alternate route? Thanks
The option has been moved to compliance portal. Can you show where can we do it now?
Will this also work with emails and pdfs?
Hi, I have just got onto this to try apply the labels to various documents within SharePoint however I this has changed. Is there still a way to do this?
Hi Matt, Great video!
I have just tested this with a sharepoint folder. Unfortunately, documents labeled with MCAS cannot be opened in Office for Web (same error like you). However, manually labeled documents are working as desired.
I confirm: if documents are labeled and encrypted using MCAS they cannot be opened in any Office for Web clients nor in Teams. It’s very annoying!
Great catch guys, thank you! I'll add a blurb in the video description. Also from the docs: "files labeled by Cloud App Security and uploaded to SharePoint or OneDrive and the label applied encryption by using an account from a service principal name, the files can't be opened in Office on the web."docs.microsoft.com/en-us/cloud-app-security/azip-integration
@@MattSoseman so, how do we actually use a service principal name to make this useful. This is a pretty big issue that would prevent me from recommending this technique to a client
does it work with signatures in documents too? We use IRM but docs with signatures or certificates cannot be encrypted bei IRM, so we are searching for alternatives
Hi Matt,
When you protect a sharepoint site, are the files inside folders added to the repository also protected or should you edit the policy and select the folders inside the already protected site?
If you label a site, you only protect the site, not the data.
Never got this working in any environment. When trying to chose a selected folder, it only shows a bunch of folders out of several hundreds. Although i make some changes within the folder, it never shows up.
There are several severe limitations with MCAS at this time. I have had a support ticket open with MS and we had to agree to go our separate ways.
Firstly, MCAS will only label 100 files a day, useless if your dropping thousands of files in the folder. Anything over 100 files gets queued till the next day, including new manual actions - this can essentially bring file labeling to a halt.
Secondly you can only have a maximum of 50 file policies, useless if you share with many external organizations.
Finally, you cannot label files over 50MB, in this day and age - really?
Still looking for a simple way to apply sensitivity labels on a per folder/library basis, to thousands of files. MS really dropped the ball here.
Can you please make a video of how can we apply sensitive labeling to several power point files at once . This is an urgent request ,my company is making me do this by labeling each file one by one and I am running out of time because of the tight deadline.Please it will be a life saver if you could come up with a solution .
One hour for a policy to apply in a demo tenant? You were lucky
I was wearing my lucky shirt
Can this work with your pdf files?
When I try to choose folders. Nothing shows up. I tried to use the search feature but the documents are not showing up. Am I missing something here?
Same here.Tested in diffeent environments. Some folders show up, maybe 3% out of all.