Auto-labeling: let Purview apply the label Automatic sensitivity labeling in Microsoft Purview. Client-side, in the Office apps, the user applies the label, helped by a default label or a recommendation. Server-side, an auto-labeling policy labels files already stored in SharePoint and OneDrive based on conditions such as sensitive info types. We create a policy that applies Confidential to content with national identification numbers: a custom policy, the label, the locations, one rule with three sensitive info types, the setting for existing labels, and simulation, which is required before the policy can be turned on. The policy is set to replace lower labels, also manually applied ones. After the simulation, the policy is turned on. Two files are labeled, and a file with the higher label Strictly Confidential keeps it and is listed as a labeling failure, CannotOverrideCurrentLabel. W INFORMATION PROTECTION · AUTO-LABELING Auto-labeling: let Purview apply the label Ada Admin Eli Employee THE GOAL At least Confidential, wherever ID numbers are Every stored document with national identification numbers should have at least Confidential. Also old files nobody labeled, and files with a lower label. TWO WAYS A LABEL GETS THERE Client-side or server-side Microsoft Purview Auto-labeling policies Automatically apply or remove sensitivity labels on sensitive emails, files, and other data assets. Files labeled in the last 30 days PREVIEW Sep 22Sep 29Oct 6Oct 13Oct 21 ＋ Create auto-labeling policy↻ Refresh NameModeLocationsLabel appliedLast modified Confidential: national ID numbersSimulationSharePoint, OneDriveConfidentialOct 21, 2026 No policies yet Auto-labeling policies › Confidential: national ID numbers Confidential: national ID numbers - Confidential ⏻ Turn on policy ↻ Refresh ✎ Edit 🗑 Delete OverviewLabeled itemsLabeling failures Sensitivity labelStatusTotal labeled to dateLast simulated results Confidential Simulation 0 3 items Completed on: Oct 22, 2026 Labeling activity overview 3 Total files3 Labeled2 Failed1 Top failure reasons ReasonQty CannotOverrideCurrentLabel1 FileActivityHappenedSensitive info type CannotOverrideCurrentLabel The file has a higher label, Strictly Confidential. Auto-labeling never lowers a label. Auto-labeling policies › New policy Choose info you want this label applied to Choose an industry regulation to see the policy templates you can use, or create a custom policy to start from scratch. Search templates⌕ Search for specific templates Select locationAll countries or regions Categories EnhancedFinancialMedical and healthPrivacy Custom Regulations Custom policy Custom policy Create a custom policy from scratch.You choose the type of content toprotect and how to protect it. Name your auto-labeling policy This policy will automatically apply a label to items that match rules and conditions you'll define. Choose a label to auto-apply Users will see this label applied to files that match the rules and conditions you chose. Label to auto-apply ＋ Choose a label ✎ Change Assign admin units Admin units restrict the policy to a specific set of users or groups. To assign the policy to everyone, select Next. ＋ Add or remove admin units Admin unitsFull directory Choose locations where you want to apply the label Exchange applies the label to unlabeled emails. OneDrive and SharePoint apply the label to unlabeled Office documents and PDFs. LocationScope Exchange emailTurn on location to scopeSharePoint sitesTurn on location to scopeOneDrive accountsTurn on location to scope BoxTurn on location to scopeGoogle WorkspaceTurn on location to scope Locations outside Microsoft 365 need pay-as-you-go billing. Set up common or advanced rules Choose common rules to define one set of rules for all locations, or advanced rules for each location. Common rules. Define one set of common rules for all locations. Advanced rules. Define specific rules for each location. Define rules for content in all locations We'll automatically apply this label to content that matches the rules and related conditions here. ＋ New rule 0 items No rules created ⌄ National ID numbers Conditions Content contains any of these sensitive info types: U.S. Social Security Number, U.K. National Insurance Number, EU National Identification Number Additional label settings If not selected, standard auto-labeling applies: lower-priority auto labels may be replaced, but manual labels stay. All locations Replace existing labels if their priority is lower for all locations, regardless of whether the existing label was applied automatically or manually. Decide if you want to test out the policy now or later You'll need to run the policy in simulation mode before turning it on. Turn on policy Run policy in simulation mode We'll gather items that match the policy, but labels won't be applied yet. Automatically turn on policy if not modified after 7 days in simulation. Leave policy turned off Review and finish Policy nameConfidential: national ID numbers ModeSimulation LabelConfidential Apply to content in these locationsSharePoint sites, OneDrive accounts RulesNational ID numbers Replace lower labelsAll locations BackNextCancel Choose a sensitivity label ⌕ Search for specific labels 5 items Same as the default label of the SharePoint libraryGeneralInternalConfidentialStrictly Confidential AddCancel New rule ⌃ Conditions ＋ Add condition ⌄ Content containsContent is sharedAttachment or file extension isAttachment or document name matches…Attachment or document size… ⌃ Content contains Group name *Group operator Default Any of these Add ⌄ Sensitive info typesTrainable classifiers SaveCancel What type of auto-labeling policy do you want to create? Automatically apply labels only Applies a sensitivity label, or replacesexisting labels, in Exchange, SharePoint,OneDrive and cloud apps. Automatically remove labels only Removes a sensitivity label from itemsin SharePoint and OneDrive. Auto-apply to default SPO only Applies the same sensitivity label asthe default document library labelin SharePoint. THE USER EXPERIENCE What Eli sees Nothing to click. The labels are just there. Good to know 1/7 INFORMATION PROTECTION · AUTO-LABELING Auto-labeling: let Purview apply the label In the apps, people choose the label. On the server side, a policy does it for files already stored. We create a policy for national identification numbers, simulate it, turn it on, and see what it changes. informasjonsbeskyttelse.no