Which tool to use for Data Auto-Labeling (as part of AIP)?

Question

Hi,

So we can create AIP auto-labelling policies from the Compliance Portal, that's pretty clear. (https://compliance.microsoft.com/informationprotection?viewid=autolabeling)

But, we can also create a File Policy in Defender for Cloud Apps, and also apply sensitive label (auto-label) to documents (under the Governance Actions section of the File Policy):

So my question is:
What should we use for Auto-Labelling?

• The Compliance Portal Auto-Label feature OR
• The Defender for Cloud Apps File Policy?

Is there any guidance on when to use which option? Compliance Portal Auto-Label vs Defender for Cloud Apps File Policy...at times, this is confusing.

Thank you,
SK

Answer 1

@Shim Kwan

Thank you for reaching out to us. As I understand you are looking for scenarios where MCAS & MIP can be used in terms of labelling.

Note: We've renamed Microsoft Cloud App Security. It's now called Microsoft Defender for Cloud Apps

I have few scenarios which I can share it with you.

Reference article: https://techcommunity.microsoft.com/t5/security-compliance-and-identity/mcas-data-protection-blog-series-do-i-use-mcas-or-mip/ba-p/2011039

More information related to MIP & Defender for cloud apps integration can be found here https://learn.microsoft.com/en-us/defender-cloud-apps/azip-integration

Also would like to share this document/link - aka.ms/aipdag which has useful information that helps during the deployment of AIP.

Let me know if you have any further questions.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.