Unlock-SPOSensitivityLabelEncryptedFile

It removes encryption on a Sensitivity label encrypted file in SharePoint Online. No need to download the file.

Syntax

Unlock-SPOSensitivityLabelEncryptedFile
      -FileUrl <absolute path for file>
      -JustificationText <needed for auditing>

Description

The Unlock-SPOSensitivityLabelEncryptedFile cmdlet runs on a single office online file that is encrypted via sensitivity label. It decrypts the file and removes the label from the file.

You must be a SharePoint Online administrator or Global Administrator to run the Unlock-SPOSensitivityLabelEncryptedFile cmdlet. This cmdlet doesn't work on files that have double key encryption or files that have encryption but are not processed by SharePoint. These files don't show the name of the label in the Sensitivity column, and you can't edit these files in Office Online.

For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at Intro to SharePoint Online Management Shell.

Examples

-----------------------EXAMPLE 1-----------------------------

Unlock-SPOSensitivityLabelEncryptedFile -FileUrl "https://contoso.com/sites/Marketing/Shared Documents/Doc1.docx" -JustificationText "Need to recover this file"

This example will remove a regular label with admin defined encryption from the file Doc1.docx and also make an entry in audit logs.

Parameters

-FileUrl

Full URL for the file.

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False
Applies to:SharePoint Online

-JustificationText

Text that explains the reason to run this cmdlet on the given file.

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False
Applies to:SharePoint Online