azure-docs icon indicating copy to clipboard operation
azure-docs copied to clipboard

It is not explained how a configured Sensitivity Label uses Classifications nor the differences in automatic labeling

Open KyferEz opened this issue 3 years ago • 3 comments

This is a bit hard to understand, and VERY confusing, even after it was explained to me, so bear with me...

At the Compliance Portal docs page (https://learn.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide#creating-an-auto-labeling-policy) it has a guide to create auto-labeling and gives instructions. However there is also instructions at this link (https://learn.microsoft.com/en-us/azure/purview/how-to-automatically-label-your-content#autolabeling-for-files) and they are different. We cannot understand which is for what and how they affect Purview? For example, which is for auto-labeling when doing a Purview scan, is it one or the other or both?

Also, we see that corresponding classifications are being applied in Purview, which match the sensitivity label. Why is this? Where are they coming from? What do they have to do with the Sensitivity Label? None of this is explained.

These guides need to provide complete end to end walk-throughs, step by step, with screenshots at every step as well as expected result screenshots. All this missing information is making it impossible to fully understand proper configuration.

It is also incredibly confusing that the Compliance portal is also called Purview! Please make this more clear.


Document Details

Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

KyferEz avatar Dec 14 '22 18:12 KyferEz

@KyferEz - Yes, this is a bit confusing, and we're working on making it clearer in the documentation.

To set up automatic sensitivity labeling in Microsoft Purview in Azure, the only article you need to follow is this one: https://learn.microsoft.com/en-us/azure/purview/how-to-automatically-label-your-content

The reason the other article uses very similar language but has different steps is because the labeling in the Microsoft Purview Data Map (which is to say, in Azure) is an extension of labeling in the Microsoft Purview Compliance portal (which is to say in M365).

To automatically apply Sensitivity Labels in Microsoft Purview in Azure, you first need to set up sensitivity labels in the M365 Compliance portal and then extend labeling to the Microsoft Purview Data Map (as shown in step 2 on this article: https://learn.microsoft.com/en-us/azure/purview/how-to-automatically-label-your-content#step-2-consent-to-use-sensitivity-labels-in-the-microsoft-purview-data-map).

So both articles are relevant to what you are doing, but the Azure article has the full steps for everything you need to set up on Microsoft purview in Azure.

If, when you scan your data, sensitivity labels are already being automatically applied to your assets, you have probably already set this up.

whhender avatar Dec 14 '22 21:12 whhender

If you create a support ticket, the support team can walk you through setting up these labels, and/or take a look at your environment to see what's going on: https://azure.microsoft.com/support/create-ticket/

whhender avatar Dec 14 '22 21:12 whhender

@KyferEz Thanks for your feedback! We will investigate and update as appropriate.

Hi @whhender Thank you for your response.

Naveenommi-MSFT avatar Dec 17 '22 06:12 Naveenommi-MSFT

Hi @KyferEz We are going to close this thread as resolved but if there are any further questions regarding the documentation, please tag me in your reply and we will be happy to continue the conversation.

Naveenommi-MSFT avatar Dec 19 '22 12:12 Naveenommi-MSFT