MC937935: Microsoft Purview | Information Protection: SharePoint Online library permissions extend to downloaded files

Announcement IDMC937935Published Date11-19-2024
ServiceGeneralLast Updated11-19-2024
CategoryPlan for changeExpiration Date06-30-2025
Roadmap ID467254Action Required by Date
TagsAdmin impact, New feature, User impact


Summary
                MC937935: Microsoft Purview | Information Protection: SharePoint Online library permissions extend to downloaded files


More Information

We are providing this update because your tenant is utilizing sensitivity labels and Microsoft SharePoint Online.

Coming soon: A new capability that ties together SharePoint Online library permissions and Purview sensitivity labeling and protection. We are happy to bring this capability to Public Preview. This is an opt-in feature in Microsoft PowerShell.

When this will happen:

Public Preview: We will begin rolling out mid-November 2024 and expect to complete by mid-January 2025.

We will communicate the plan for General Availability in a separate post.

How this will affect your organization:

After this rollout, SharePoint Online document library owners will be able to apply a sensitivity label at the library level, automatically applying that label to all unprotected and unlabeled files (Microsoft Word, Microsoft Excel, Microsoft PowerPoint, and PDFs) in the target library. This simplifies labeling in bulk across document libraries in an organization. This capability also helps protect files as they egress from the original document library, such as for collaboration purposes or attempted exfiltration. Files downloaded from these libraries are protected at download. Users accessing these files outside of SharePoint Online have their rights evaluated in real time against the document library. Changes to user permissions on the document library are reflected on downloaded files, including full revocation for users removed from the document library. This provides a more streamlined way to revoke access to documents for individual users (instead of revoking access to each document).

What you need to do to prepare:

After this feature is available, we recommend you test this feature first on sites with non-production data to understand its capabilities.

This rollout will happen automatically by the specified date with no admin action required before the rollout. Review the referenced documentation links to learn more about enabling this feature.

Previous Post Next Post