title | description | author | ms.author | manager | ms.date | ms.topic | ms.collection | ms.service | ms.assetid | ms.reviewer | ms.suite | ms.custom |
---|---|---|---|---|---|---|---|---|---|---|---|---|
FAQs for classification & labeling - AIP |
Have a question that is specifically about classification and labeling using Azure Information Protection? See if it's answered here. |
batamig |
bagol |
rkarlin |
03/07/2021 |
conceptual |
M365-security-compliance |
information-protection |
4b595b6a-7eb0-4438-b49a-686431f95ddd |
adhall |
ems |
admin |
Applies to: Azure Information Protection, Office 365
Relevant for: AIP unified labeling client and classic client. For more information, see also the FAQs for the classic client only.
[!INCLUDE AIP classic client is deprecated]
Have a question about Azure Information Protection that is specifically about classification and labeling? See if it's answered here.
We recommend installing the Azure Information Protection unified labeling client. The unified labeling client downloads labels and policy settings from the Microsoft 365 compliance center.
This client is in general availability, and might have a preview version for you to test additional functionality for a future release.
If you still configured labels in the Azure portal that you haven't yet migrated to the unified labeling store, use the Azure Information Protection classic client instead.
For more information, including a feature and functionality comparison table, see Choose your Windows labeling solution.
Tip
The Azure Information Protection client is supported on Windows only.
To classify and protect documents and emails on iOS, Android, macOS, and the web, use Office apps that support built-in labeling.
See the following documentation resources:
-
Enable sensitivity labels for Office files in SharePoint and OneDrive
-
Apply sensitivity labels to your documents and email within Office
For information about other scenarios that support sensitivity labels, see Common scenarios for sensitivity labels.
To prevent users from removing or changing a label, the content must already be protected and the protection permissions do not grant the user the Export or Full Control usage right.
No. When you label an email message that has attachments, those attachments do not inherit the same label. The attachments remain either without a label or retain a separately applied label. However, if the label for the email applies protection, that protection is applied to Office attachments.
Because Azure Information Protection uses persistent metadata for classification, which includes a clear-text label, this information can be read by DLP solutions and other applications.
For examples of using this metadata with Exchange Online mail flow rules, see Configuring Exchange Online mail flow rules for Azure Information Protection labels.