question

Srini-4386 avatar image
0 Votes"
Srini-4386 asked Backofthenapkin-0752 commented

How enable sensitivity feature for SharePoint Sites

Guys,

Can you please advise how to "Enable sensitivity feature for SharePoint Sites" i've read the MS instructions but not sure the steps or missing something.
Do you have any brief steps to execute.

PFA snapshot reference from MS Documentation

83531-sensitivity-labels.jpg


office-sharepoint-onlineoffice-sharepoint-server-administration
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

ChelseaWu-MSFT avatar image
0 Votes"
ChelseaWu-MSFT answered Backofthenapkin-0752 commented

Here are the steps to enable sensitivity feature for SharePoint Sites:

1. Create sensitive labels at tenant level.
a. Log on to the Compliance Center as a Global Administrator or other user accounts with enough privilege.
b. Navigate to Solutions > Catalog > Information protection > click "View" > click "Open solution", then create sensitivity labels on the Information protection page.

2. Enable sensitivity label support using PowerShell.
a. Execute the following cmdlets in order:

 #If this cmdlet returns error, run "Uninstall-Module AzureAD" first
 Install-Module -Name AzureADPreview`
        
 Import-Module AzureADPreview
 Connect-AzureAD

b. Create group settings at the directory level (Skip to the next step if you have one already):

 # Returns the list of all settings templates
 Get-AzureADDirectorySettingTemplate
    
 # Use the Group.Unified template
 $TemplateId = (Get-AzureADDirectorySettingTemplate | where { $_.DisplayName -eq "Group.Unified" }).Id
 $Template = Get-AzureADDirectorySettingTemplate | where -Property Id -Value $TemplateId -EQ
    
 # Create a new settings object based on that template
 $Setting = $Template.CreateDirectorySetting()
    
 # Update the settings object with a new value
 $Setting["EnableMIPLabels"] = "True"
    
 # Apply the setting
 New-AzureADDirectorySetting -DirectorySetting $Setting

c. Enable sensitivity label support with existing group settings:

 # Fetch the current group settings for the Azure AD organization
 $Setting = Get-AzureADDirectorySetting -Id (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ).id
    
 # Enable sensitivity label support
 $Setting["EnableMIPLabels"] = "True"
    
 # Save the changes and apply the settings
 Set-AzureADDirectorySetting -Id $Setting.Id -DirectorySetting $Setting

d. Synchronize your sensitivity labels to Azure AD:

 Import-Module ExchangeOnlineManagement
    
 $UserCredential.(Get-Credential)
 $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "https://ps.compliance.protection.outlook.com/powershell-liveid/" -Credential $UserCredential -Authentication Basic -AllowRedirection
    
 Import-PSSession $Session -DisableNameChecking
    
 Execute-AzureAdLabelSync

Reference: Assign sensitivity labels to Microsoft 365 groups in Azure Active Directory.

3. Now you can modify the sensitive label to apply to “Groups & sites” under "Define the scope for this label". Then define what policies or settings you want to apply to the sensitive labels.

83573-sensitivity-labels-scopes.png

Remember to “Pulish labels” after you create or modify the labels.

Note:
When a new sensitivity label is created and published, it is visible for users in teams, groups, and sites within 1 hour.
However, if you modify an existing label, allow up to 24 hours.

Additional reference on Sensitivity label management.


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Chelsea thank you so much for the detailed steps. And have couple of issues and questions .

  1. I executed all the steps and worked with out any issues. But after creating senst labels and tried to create a Teamsite with group / Comm site/ Teamsite without group i dont see the option to apply the label. Checked after 3 to 4 hours even now it was not reflecting . Please find attached snapshot for reference which i applied the Label and published.

  2. How to Enable sensitivity labels for Office files in SharePoint and OneDrive: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-sharepoint-onedrive-files?view=o365-worldwide

Can i just execute this command : Set-SPOTenant -EnableAIPIntegration $true ? or any sequence of steps for this ?

83779-published-label.jpg


83864-scope.jpg


0 Votes 0 ·
published-label.jpg (438.6 KiB)
scope.jpg (196.9 KiB)

IT is Fixed now and it is working it is replicated.



  1. How to Enable sensitivity labels for Office files in SharePoint and OneDrive: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-sharepoint-onedrive-files?view=o365-worldwide

Can you advise this second step ? however i can still enable sensitivity to the documents by using the "Create Senst Label" option as mentioned in your steps

So does this cover both for SharePoint Sites, Group sites & Office files in SharePoint and OneDrive ?


0 Votes 0 ·

As you mentioned earlier, you can execute the command Set-SPOTenant -EnableAIPIntegration $true to enable support for sensitivity labels, no sequence of steps needed.

The configuration process is not that complicated since “Files & emails” scope is already available. Just make sure the scope is selected under “Define the scope for this label” while editing the sensitive labels, and publish it with a policy after.

Note: these two scopes do not cover one another. If you have selected “Groups & sites” but not “Files & emails”, the labels will not be available for tagging for Office files. If you want to use these labels on all these locations, select them both.

0 Votes 0 ·
Show more comments