Site label, library label, file label
A sensitivity label can be applied at three levels. On a site or team it controls access and sharing, not the files. As a default label on a document library it labels files that have no label. On a file it controls marking and encryption. An administrator extends the Strictly Confidential label to groups and sites, applies it to the Board site and sets a default label on its library. An employee is stopped from sharing externally, an unlabeled upload gets the label, and a mismatch alert is sent when a higher labeled file is uploaded to a lower labeled site.
W
S
SENSITIVITY LABELS · SITES AND TEAMS
Site label, library label, file label
Ada Admin
Eli Employee
Microsoft Purview
Home
Information Protection
Sensitivity labels
Label policies
Data Loss Prevention
Insider Risk Management
Sensitivity labels › Strictly Confidential › Edit label
Define the scope for this label
Groups & sites: settings for Teams, Microsoft 365 groups and SharePoint sites.
The settings apply to the container. Files in it don't get this label.
Strictly Confidential › Groups & sites
Settings for groups and sites
PRIVACY
Public
Private
None, let owners decide
Let group owners add people outside the organization as guests
EXTERNAL SHARING FROM LABELED SHAREPOINT SITES
Anyone
New and existing guests
Existing guests
Only people in your organization
Conditional Access and authentication context: covered in the next video
Save
SharePoint
⚙
Board
Strictly Confidential · Private
Home
Documents
Pages
Site contents
Welcome to the Board site
Agendas, minutes and decisions for the board.
News
Board meeting in November
New strategy approved
Budget process 2027
+ New
↑ Upload
Share
Documents
Name
Sensitivity
Modified
Site information
Site name
Board
Privacy settings
Private, only members can access
Sensitivity
Strictly Confidential
▼
Save
Library settings
Default sensitivity labels
Apply a label to items in this library
that don't have a label.
No label
▼
Files that already have a label keep it.
Save
Share 'Board minutes.docx'
Can't share with anna@partnerco.example
Sharing outside the organization is turned off
for this site.
Send
Inbox · Microsoft 365
Incompatible sensitivity label detected
Board minutes.docx is Strictly Confidential.
The site Project Falcon is labeled Internal.
Sent to the person who uploaded the file and to the site owners.
The upload is not blocked. The event is logged in the audit log.
THE USER EXPERIENCE
Working in a labeled site
Eli is a member of the Board site and of Project Falcon.
Good to know
NEXT
Restrict a site to compliant devices
1/7
SENSITIVITY LABELS · SITES AND TEAMS
Site label, library label, file label
A label on a site doesn't encrypt anything, and the files
don't get the site's label. We show what a label does on a
site, on a document library and on a file, and what the
people working in the site notice.
informasjonsbeskyttelse.no
Previous
Next
Play
Restart
Fullscreen
Sound: off