Quick Guide: Enabling Sensitivity Labels for SharePoint sites and groups

Share
Quick Guide: Enabling Sensitivity Labels for SharePoint sites and groups

This is a quick little guide on how to enable Sensitivity Labels for containers such as Microsoft 365 groups, SharePoint sites and Microsoft Teams. I hope that these steps can provide clearer guidance then what is provided in the Microsoft documentation.

  1. Start the PowerShell or PowerShell ISE application.
  2. Use the following cmdlets to install, import and connect to the AzureADPreview module.
๐Ÿ“„
Install-Module AzureADPreview
๐Ÿ“„
Import-Module AzureADPreview
๐Ÿ“„
AzureADPreview\Connect-AzureAD
  1. Sign in to your admin account.
  2. Use the following cmdlet to display the current container settings.
๐Ÿ“„
$grpUnifiedSetting = (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ) $Setting = $grpUnifiedSetting $grpUnifiedSetting.Values

If the output lists the current group settings (like pictured below), you can skip step 5 and 6 and move on to step 7.

If the output is empty, it means that group settings have not been created for the tenant yet.

  1. Use the following cmdlet to select the "Group.Unified" settings template.
๐Ÿ“„
$TemplateId = (Get-AzureADDirectorySettingTemplate | where { $_.DisplayName -eq "Group.Unified" }).Id $Template = Get-AzureADDirectorySettingTemplate | where -Property Id -Value $TemplateId -EQ
  1. Use the following cmdlet to create a new settings object.
๐Ÿ“„
$Setting = $Template.CreateDirectorySetting()
  1. Use the following cmdlet to enable the feature.
๐Ÿ“„
$Setting["EnableMIPLabels"] = "True"
  1. (A) Use the following cmdlet if the group settings were not created previously and you want to save the changes.
๐Ÿ“„
New-AzureADDirectorySetting -DirectorySetting $Setting
  1. (B) Use the following cmdlet if the group settings were created previously and you want to save the changes.
๐Ÿ“„
Set-AzureADDirectorySetting -Id $grpUnifiedSetting.Id -DirectorySetting $Setting
  1. Use the following cmdlet to verify if the feature has been enabled, the EnableMIPLabels value must be set to True.
๐Ÿ“„
$Setting.Values

Now to finish of this guide we'll synchronize the Sensitivity Labels to AzureAD, so we are able to use them with Microsoft 365 Groups from Azure Active Directory (or Microsoft Entra).

  1. Use the following cmdlets to install and import the required module and connect to the Security & Compliance module.
๐Ÿ“„
Install-Module ExchangeOnlineManagement
๐Ÿ“„
Import-Module ExchangeOnlineManagement
๐Ÿ“„
Connect-IPPSSession
  1. Sign-in to your admin account.
  2. Use the following cmdlet to synchronize the Sensitivity Labels to AzureAD.
๐Ÿ“„
Execute-AzureAdLabelSync

If you have completed this guide, congratulations you are now able to create Sensitivity Labels meant for Microsoft 365 Groups, SharePoint sites and Microsoft Teams.

Quick Guide: Enabling Sensitivity Labels for SharePoint sites and groups