Block file download for certain labels

63608335 121 Reputation points
2022-12-06T15:27:50.627+00:00

Hi

I have a user that has a requirement where certain documents are not allowed to be downloaded.
I am looking at applying labels to the documents and then bloking the download via labels.

Looking for some instructions on how to do that?
Had a look at Information protection and creating labels in there but don't see the functionality on where to block users from downloading sensitive information.

Alternatively, I can just assign view-only permissions to the file but it feels like labels would be the better way to get the same result?

Thank You

Azure Information Protection
Azure Information Protection
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
515 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Givary-MSFT 27,486 Reputation points Microsoft Employee
    2022-12-09T08:09:56.61+00:00

    @63608335 Thank you for reaching out to us. As I understand you want to restrict the file download based on the labels which you have configured in the compliance portal, in order to block the file you can leverage Defender for Cloud apps - https://learn.microsoft.com/en-us/defender-cloud-apps/use-case-proxy-block-session-aad#:~:text=for%20Cloud%20Apps-,Create%20a%20block%20download%20policy%20for%20unmanaged%20devices,-Defender%20for%20Cloud

    Microsoft Defender for Cloud Apps is a Cloud Access Security Broker (CASB) that operates on multiple clouds. It provides rich visibility, control over data travel, and sophisticated analytics to identify and combat cyberthreats across all your cloud services.

    Reference: https://www.youtube.com/watch?v=IG5VglS_sOo - How defender for cloud apps helps to block the file based on the labels.

    Let me know if you have any further questions, feel free to post back.