Prepare for Sensitivity Labels in Microsoft Teams and SharePoint Sites. When you configure a Sensitivity Label in Microsoft Purview Information Protection, you have to choose its scope and for the purpose of this blog we're interested in the scope for Groups and Sites. Today we're going to look at the steps you need to take for this option to be available when you want to apply Sensitivity Labels to your Microsoft Teams and SharePoint Sites and better protect those collaboration spaces. Note: many of the steps listed below can be found here How to Enable Sensitivity Labels for Containers and Synchronize Labels (https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide#how-to-enable-sensitivity-labels-for-containers-and-synchronize-labels) and across other Microsoft documentation pages, however I have summarized them here and added some commentary along the way from my own notes. Also, there is 1 error in those documentation pages which I've corrected below. When you create or configure a Sensitivity Label.
Sensitivity Labels are an essential feature in Microsoft Teams and SharePoint to ensure the protection of sensitive data. They allow you to define the scope, access, and security level for specific groups and sites. This helps organizations to have better control over their data and ensure that sensitive information is accessed only by authorized users. By applying Sensitivity Labels, you can manage the risk associated with data handling and ensure compliance with regulations and industry standards. In addition, these labels can be synchronized across different containers to provide a unified security experience for users in your organization.
Read the full article Prepare for Sensitivity Labels in Microsoft Teams and SharePoint Sites
When configuring a Sensitivity Label in Microsoft Purview Information Protection, it is important to remember to choose its scope. For Microsoft Teams and SharePoint Sites, the scope must be set to Groups and Sites in order to be available when applying the Sensitivity Label. The following steps must be taken to enable Sensitivity Labels for Containers and Synchronize Labels:
1. Create or configure a Sensitivity Label in the Microsoft 365 Security & Compliance Center.
2. Assign the label to specific users, groups or roles in your organization.
3. Enable the label for Microsoft Teams and SharePoint Sites.
4. Enable the label for other Microsoft services such as Exchange Online, OneDrive for Business, and/or Yammer.
5. Turn on Information Rights Management (IRM) protection in Microsoft 365.
6. Synchronize the labels to Azure Active Directory using the Azure Active Directory PowerShell module.
7. Configure Sensitivity Label policies in the Microsoft 365 Security & Compliance Center.
8. Enable the Label Policy setting in the Microsoft 365 Security & Compliance Center.
9. Configure label policies for Teams and SharePoint Sites.
10. Configure label policies for other Microsoft services.
11. Configure label policies for Exchange Online.
12. Configure label policies for OneDrive for Business.
13. Configure label policies for Yammer.
14. Configure label policies for Exchange Online.
15. Configure label policies for OneDrive for Business.
16. Configure label policies for Teams.
17. Configure label policies for SharePoint Sites.
18. Configure label policies for Yammer.
19. Configure label policies for other Microsoft services.
20. Monitor the label policies to ensure that they are working as expected.
To prepare for Sensitivity Labels in Microsoft Teams and SharePoint Sites, users must create or configure the Sensitivity Label in the Microsoft 365 Security & Compliance Center, assign the label to users, groups, or roles, enable the label for Microsoft Teams and SharePoint Sites, enable the label for other Microsoft services, turn on Information Rights Management (IRM) protection in Microsoft 365, synchronize the labels to Azure Active Directory using the Azure Active Directory PowerShell module, configure Sensitivity Label policies in the Microsoft 365 Security & Compliance Center, enable the Label Policy setting in the Microsoft 365 Security & Compliance Center, configure label policies for Teams and SharePoint Sites, configure label policies for other Microsoft services, configure label policies for Exchange Online, configure label policies for OneDrive for Business, configure label policies for Yammer, configure label policies for Teams, configure label policies for SharePoint Sites, configure label policies for Yammer, configure label policies for other Microsoft services, and monitor the label policies to ensure that they are working as expected.Microsoft Purview, Sensitivity Labels, Microsoft Teams, SharePoint Sites, Prepare for Sensitivity Labels