Azure Information Protection 中分類和標記的常見問題集Frequently asked questions about classification and labeling in Azure Information Protection

*適用于Azure 資訊保護Office 365**Applies to: Azure Information Protection, Office 365*

*適用于AIP 統一標籤用戶端和傳統用戶端*Relevant for: AIP unified labeling client and classic client. 如需詳細資訊,請參閱 僅限傳統用戶端的常見問題。 *For more information, see also the FAQs for the classic client only.*


為了提供一致且簡化的客戶體驗,在 2021 年3月 31 日起,Azure 入口網站中 Azure 資訊保護傳統用戶端標籤管理 即將 淘汰To provide a unified and streamlined customer experience, Azure Information Protection classic client and Label Management in the Azure Portal are being deprecated as of March 31, 2021. 此時間範圍可讓所有目前的 Azure 資訊保護客戶使用 Microsoft 資訊保護統一標籤平台轉換至我們統一的標籤解決方案。This time-frame allows all current Azure Information Protection customers to transition to our unified labeling solution using the Microsoft Information Protection Unified Labeling platform. 在正式的淘汰通知 (英文) 中深入了解。Learn more in the official deprecation notice.

對 Azure Information Protection 特有的分類和標籤有疑問?Have a question about Azure Information Protection that is specifically about classification and labeling? 看看此處是否有解答。See if it's answered here.

我要安裝哪一種用戶端來測試新功能?Which client do I install for testing new functionality?

建議您安裝 Azure 資訊保護統一標籤用戶端We recommend installing the Azure Information Protection unified labeling client. 統一標籤用戶端會從下列其中一個系統管理中心下載標籤和原則設定:The unified labeling client downloads labels and policy settings from one of the following admin centers:

  • Office 365 安全性與合規性中心Office 365 Security & Compliance Center
  • Microsoft 365 資訊安全中心Microsoft 365 security center
  • Microsoft 365 合規性中心。Microsoft 365 compliance center.

此用戶端現在已正式運作,而且可能有預覽版本可供您測試未來版本的額外功能。This client is now in general availability, and might have a preview version for you to test additional functionality for a future release.

如果您仍在尚未 遷移至統一標籤存放區的 Azure 入口網站中設定標籤,請改用 Azure 資訊保護傳統用戶端If you still configured labels in the Azure portal that you haven't yet migrated to the unified labeling store, use the Azure Information Protection classic client instead.

如需詳細資訊(包括功能和功能比較表),請參閱 選擇您的 Windows 標籤解決方案For more information, including a feature and functionality comparison table, see Choose your Windows labeling solution.


只有在 Windows 上才支援 Azure 資訊保護用戶端。The Azure Information Protection client is supported on Windows only.

若要在 iOS、Android、macOS 和 web 上分類及保護檔和電子郵件,請使用 支援內建標籤的 Office 應用程式To classify and protect documents and emails on iOS, Android, macOS, and the web, use Office apps that support built-in labeling.

哪裡可以找到針對 Office 應用程式使用敏感度標籤的相關資訊?Where can I find information about using sensitivity labels for Office apps?

請參閱下列檔資源:See the following documentation resources:

如需其他支援敏感度標籤之案例的詳細資訊,請參閱 敏感度標籤的常見案例For information about other scenarios that support sensitivity labels, see Common scenarios for sensitivity labels.

一個檔案可以有多個分類嗎?Can a file have more than one classification?

使用者一次只能為各文件或電子郵件選擇一個標籤,而結果通常就只會有一個分類。Users can select just one label at a time for each document or email, which often results in just one classification. 不過,如果使用者選取了子標籤,這實際上會一次套用兩個標籤;一個主要標籤和一個次要標籤。However, if users select a sublabel, this actually applies two labels at the same time; a primary label and a secondary label. 使用子標籤就能讓檔案擁有兩個分類,也就是父\子關係的一層額外控制。By using sublabels, a file can have two classifications that denote a parent\child relationship for an additional level of control.

例如,[機密] 標籤可能會包含子標籤,例如 [法務] 和 [財務]。For example, the label Confidential might contain sublabels such as Legal and Finance. 您可以將不同的分類視覺標記和不同的 Rights Management 範本套用到這些子標籤。You can apply different classification visual markings and different Rights Management templates to these sublabels. 使用者無法選取 [機密] 標籤本身;只能選取其中一個子標籤,例如 [法務]。A user cannot select the Confidential label by itself; only one of its sublabels, such as Legal. 因此,他們看到的標籤會是 [機密\法務]。As a result, the label that they see set is Confidential \ Legal. 該檔案的中繼資料包含一個代表 [機密] 的自訂文字屬性、一個代表 [法務] 的自訂文字屬性,以及另一個包含這兩個值 ([機密]、[法務]) 的自訂文字屬性。The metadata for that file includes one custom text property for Confidential, one custom text property for Legal, and another that contains both values (Confidential Legal).

當您使用子標籤時,請不要在主要標籤設定視覺標記、保護及條件。When you use sublabels, don't configure visual markings, protection, and conditions at the primary label. 當您使用子層級時,請只在子層級設定這些設定值。When you use sublevels, configure these setting on the sublabel only. 如果您在主要標籤及其子標籤上進行這些設定,子標籤設定的優先順序較高。If you configure these settings on the primary label and its sublabel, the settings at the sublabel take precedence.

如何防止某人移除或變更標籤?How do I prevent somebody from removing or changing a label?

若要防止使用者移除或變更標籤,內容必須已經受到保護,而且保護權限不會授與使用者匯出或完全控制的使用權限To prevent users from removing or changing a label, the content must already be protected and the protection permissions do not grant the user the Export or Full Control usage right.

標記電子郵件時,會有任何附件自動得到相同標籤嗎?When an email is labeled, do any attachments automatically get the same labeling?

不正確。No. 當您標記有附件的電子郵件訊息時,附件不會繼承相同標籤。When you label an email message that has attachments, those attachments do not inherit the same label. 附件會維持沒有標籤,或保留另外套用的標籤。The attachments remain either without a label or retain a separately applied label. 不過,如果電子郵件的標籤套用了保護,保護就會套用至 Office 附件。However, if the label for the email applies protection, that protection is applied to Office attachments.

DLP 方案和其他應用程式如何與 Azure Information Protection 整合?How can DLP solutions and other applications integrate with Azure Information Protection?

因為 Azure Information Protection 使用持續性的中繼資料來進行分類,其中包括純文字標籤,所以 DLP 方案和其他應用程式可以讀取此資訊。Because Azure Information Protection uses persistent metadata for classification, which includes a clear-text label, this information can be read by DLP solutions and other applications.

如需此中繼資料與 Exchange Online 郵件流程規則搭配使用的範例,請參閱設定 Azure 資訊保護標籤的 Exchange Online 郵件流程規則For examples of using this metadata with Exchange Online mail flow rules, see Configuring Exchange Online mail flow rules for Azure Information Protection labels.