Apply sensitivity labels to Microsoft Teams, Microsoft 365 groups, and SharePoint sites

Completed

You can apply sensitivity labels to Microsoft 365 Groups and SharePoint sites. This enables lifecycle management of content within different types of containers of Microsoft 365.

Containers where labels can be published include:

  • Microsoft 365 Groups

  • Microsoft Teams

  • Yammer Communities

  • SharePoint Sites

Possible restrictions to configure via sensitivity labels:

  • Privacy option (Public/Private/None)

  • External User Access (Allowed/Forbidden)

  • Control external sharing from labeled SharePoint Sites (Anyone/New and existing guests/Existing guests/Only people of organization)

  • Access from unmanaged devices (Allow full access/Allow limited, web-only access/Block access)

Options for applying a sensitivity label to groups and SharePoint sites

There are many ways to apply a label to a Group and SharePoint site.

  • Creation wizard of a Group or SharePoint Site

  • SharePoint Admin Center for existing ones

  • Microsoft Teams Admin Center for existing ones

  • Azure portal

  • PowerShell

Applying labels to SharePoint Online & Microsoft 365 Groups

Sensitivity labels can be applied at different locations and via different applications.

SharePoint admin center

As a SharePoint administrator you can use the SharePoint Admin center to change or assign a sensitivity label to a SharePoint Site:

  1. Navigate to the Microsoft 365 admin center at https://admin.microsoft.com/

  2. Select … Show all and SharePoint.

  3. Navigate to Sites > Active Sites.

  4. Select the checkmark left of an existing site in which you want to apply a published Sensitivity Label to.

  5. For the selected site, navigate to Policies.

    SharePoint applications

  6. Select edit to set the Sensitivity label

Microsoft Teams admin center

A Microsoft Teams Administrator can change or select a sensitivity label at the Microsoft Teams admin center. After choosing a team and moving to the settings, the label can be set or change for the Team.

  1. Navigate to the Microsoft 365 admin center at https://admin.microsoft.com/

  2. Select … Show all and Teams.

  3. In the Microsoft Teams admin center, navigate to Teams > Manage teams.

  4. Select the checkmark left of an existing team that you want to apply the published Sensitivity Label to.

  5. Select Edit

  6. Select Sensitivity and chose the desired label for the team.

Teams application interface

Microsoft Teams creation controls for sensitivity labeling

If sensitivity labels are created with a Group & site setting and the user has an Azure AD P1 license, then it´s possible to control the creation of Microsoft Teams with sensitivity Labeling.

  1. Open the Teams desktop client.

  2. From the bottom left menu, select Join or create a team.

  3. Select Create team.

  4. Select a team template.

  5. Select a published sensitivity label.

  6. Select the privacy option. The privacy options available are set within the sensitivity label.

  7. Enter a meaningful Team name and description.

  8. Optionally select the team members who should have security access to the team.

  9. Select Close.

Tip

The sensitivity label applies to the Microsoft Team, SharePoint Site and to the private channel SharePoint Site.

New SharePoint site wizard (user)

In the default wizard, it´s possible to select a sensitivity label. This option is only displayed when the feature is enabled. Under the topic "Sensitivity" the user can select the labels, which are available for them.

  1. Navigate to the Microsoft 365 admin center at https://admin.microsoft.com/.

  2. Select … Show all and SharePoint.

  3. Navigate to Sites > Active sites.

  4. Select + Create.

  5. Select an appropriate Design.

  6. Enter a meaningful Site name, Group owner for the required fields and enter the optional fields as required.

SharePoint sensitivity label

  1. Select the Published sensitivity label.

  2. Select Finish to create the SharePoint site.

Applying a label to an existing SharePoint site (user)

If the SharePoint Site is deployed, the label can be changed to handle a lifecycle of the site. The label option is displayed under site information for site administrators.

  1. Navigate to an existing SharePoint online site.

  2. In the top right corner, select the setting icon (Gear/Cog icon).

  3. Navigate to Site Information.

  4. Set the Sensitivity label.

  5. Select Save.

Graphical user interface, text, application, email

The label will be displayed near to the site name after some time.

A screenshot of a computer

Warning

If the new label is displayed and has the option "no external user", this setting will only apply to new external uses.

Applying and changing a label to a Microsoft Teams team as a user with a life-cycle example

As a Microsoft Team's Owner you can change the label of a Microsoft Team to handle the lifecycle.

  1. Within the Teams application.

  2. Navigate to Teams

  3. Within the Your teams list select the required team

  4. For the selected team, select […] > Edit team

  5. Set the Sensitivity Label.

  6. Select done.

Graphical user interface, application, Teams