Label Inheritance

Question

Label Inheritance

Ahmed Sh 80

Hello All,

Just sharing some concerns due to some known issues discovered with inheritance. If anyone has known workarounds for them, The goal is for emails to now be sent with a label lower than the label in the attachment at all times(in a perfect world).

-Label Inheritance when message labeling is manually labelled does not inherit from the document.

-Label Inheritance from email attachment in Outlook Known issue might require multiple instances to inherit the label

For Reference:

https://support.microsoft.com/en-us/office/known-issues-with-sensitivity-labels-in-office-b169d687-2bbd-4e21-a440-7da1b2743edc#ID0EDD=Office_365

Manage sensitivity labels in Office apps | Microsoft Learn

Would appreciate any guidance.

PRADEEPCHEEKATLA 90,641 Reputation points Moderator

2024-06-03T05:48:15.6333333+00:00

@Ahmed Sh - Thanks for the question and using MS Q&A platform.

I understand that you have some concerns regarding label inheritance in Microsoft Purview. Based on the information you provided, it seems that you want to ensure that emails are always sent with a label lower than the label in the attachment.

Regarding the known issues with label inheritance, unfortunately, there are no known workarounds at this time. However, Microsoft is aware of these issues and is actively working on resolving them. I recommend keeping an eye on the Microsoft support page you shared for any updates on these known issues.

In the meantime, to ensure that emails are always sent with a lower label than the attachment, you can manually apply the sensitivity label to the email before sending it. This way, the label on the email will always be lower than the label on the attachment.

I hope this helps! Let me know if you have any further questions or concerns.
Ahmed Sh 80 Reputation points

2024-06-04T14:03:06.5533333+00:00

Hello @PRADEEPCHEEKATLA Mainly we need to make sure that if the attachment has a higher label assigned that the email matches the attachment and is not sent with a lower attachment.
PRADEEPCHEEKATLA 90,641 Reputation points Moderator

2024-06-05T07:20:14.8733333+00:00

@Ahmed Sh - I understand your concern. In order to ensure that the email label matches the attachment label, you can manually apply the sensitivity label to both the email and the attachment before sending. This will ensure that both the email and the attachment have the same label, and that the email is not sent with a lower label than the attachment.

Alternatively, you can use the "Apply label to email" option in the sensitivity label settings to automatically apply the same label to the email as the attachment. This option is available in Outlook on the web and Outlook for Windows. To use this option, you will need to have the sensitivity label policy configured to apply labels to email messages.

I hope this helps! Let me know if you have any other questions or concerns.
Ahmed Sh 80 Reputation points

2024-06-05T11:52:28.4833333+00:00

@PRADEEPCHEEKATLA What If I am an end user trying to sneak attachments out? What If I am an end user trying to steal information?

Anything from Outlook or user end is not good enough.....

Policy wise, Microsoft has some shortcomings as explained in my post and i'm trying to know if there is a workaround to make sure this product does the job it is intended to do to protect my organization's data?
PRADEEPCHEEKATLA 90,641 Reputation points Moderator

2024-06-06T07:09:28.3333333+00:00

@Ahmed Sh - understand your concern about end users trying to sneak attachments out or steal information. In order to prevent this, you can implement additional security measures such as data loss prevention (DLP) policies and conditional access policies.

DLP policies can help prevent sensitive information from being shared outside of your organization by monitoring and blocking sensitive content in emails and attachments. You can create DLP policies in the Microsoft 365 compliance center to detect and prevent sensitive information from being shared via email, SharePoint, OneDrive, and other Microsoft 365 services.

Conditional access policies can help prevent unauthorized access to sensitive information by requiring additional authentication or blocking access from certain locations or devices. You can create conditional access policies in the Azure Active Directory portal to control access to Microsoft 365 services based on user, device, location, and other factors.

In addition to these policies, you can also educate your end users about the importance of protecting sensitive information and the consequences of data breaches. You can provide training and resources to help your users understand how to identify and handle sensitive information, and how to report any suspicious activity.

Regarding the known shortcomings with sensitivity labels in Microsoft Office, I suggest reaching out to Microsoft Support for further assistance. They may be able to provide more specific guidance and workarounds for the known issues you mentioned.

I hope this helps! Let me know if you have any other questions or concerns.
PRADEEPCHEEKATLA 90,641 Reputation points Moderator

2024-06-10T06:09:44.67+00:00

@Ahmed Sh - We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Ahmed Sh 80 Reputation points

2024-06-10T08:58:13.61+00:00

PRADEEPCHEEKATLA-MSFT, Yes I am trying to find workarounds for those issues some other way.

Your answer

PRADEEPCHEEKATLA 90,641 Reputation points Moderator

2024-06-03T05:48:15.6333333+00:00

@Ahmed Sh - Thanks for the question and using MS Q&A platform.

I understand that you have some concerns regarding label inheritance in Microsoft Purview. Based on the information you provided, it seems that you want to ensure that emails are always sent with a label lower than the label in the attachment.

Regarding the known issues with label inheritance, unfortunately, there are no known workarounds at this time. However, Microsoft is aware of these issues and is actively working on resolving them. I recommend keeping an eye on the Microsoft support page you shared for any updates on these known issues.

In the meantime, to ensure that emails are always sent with a lower label than the attachment, you can manually apply the sensitivity label to the email before sending it. This way, the label on the email will always be lower than the label on the attachment.

I hope this helps! Let me know if you have any further questions or concerns.
Ahmed Sh 80 Reputation points

2024-06-04T14:03:06.5533333+00:00

Hello @PRADEEPCHEEKATLA Mainly we need to make sure that if the attachment has a higher label assigned that the email matches the attachment and is not sent with a lower attachment.
PRADEEPCHEEKATLA 90,641 Reputation points Moderator

2024-06-05T07:20:14.8733333+00:00

@Ahmed Sh - I understand your concern. In order to ensure that the email label matches the attachment label, you can manually apply the sensitivity label to both the email and the attachment before sending. This will ensure that both the email and the attachment have the same label, and that the email is not sent with a lower label than the attachment.

Alternatively, you can use the "Apply label to email" option in the sensitivity label settings to automatically apply the same label to the email as the attachment. This option is available in Outlook on the web and Outlook for Windows. To use this option, you will need to have the sensitivity label policy configured to apply labels to email messages.

I hope this helps! Let me know if you have any other questions or concerns.
Ahmed Sh 80 Reputation points

2024-06-05T11:52:28.4833333+00:00

@PRADEEPCHEEKATLA What If I am an end user trying to sneak attachments out? What If I am an end user trying to steal information?

Anything from Outlook or user end is not good enough.....

Policy wise, Microsoft has some shortcomings as explained in my post and i'm trying to know if there is a workaround to make sure this product does the job it is intended to do to protect my organization's data?
PRADEEPCHEEKATLA 90,641 Reputation points Moderator

2024-06-06T07:09:28.3333333+00:00

@Ahmed Sh - understand your concern about end users trying to sneak attachments out or steal information. In order to prevent this, you can implement additional security measures such as data loss prevention (DLP) policies and conditional access policies.

DLP policies can help prevent sensitive information from being shared outside of your organization by monitoring and blocking sensitive content in emails and attachments. You can create DLP policies in the Microsoft 365 compliance center to detect and prevent sensitive information from being shared via email, SharePoint, OneDrive, and other Microsoft 365 services.

Conditional access policies can help prevent unauthorized access to sensitive information by requiring additional authentication or blocking access from certain locations or devices. You can create conditional access policies in the Azure Active Directory portal to control access to Microsoft 365 services based on user, device, location, and other factors.

In addition to these policies, you can also educate your end users about the importance of protecting sensitive information and the consequences of data breaches. You can provide training and resources to help your users understand how to identify and handle sensitive information, and how to report any suspicious activity.

Regarding the known shortcomings with sensitivity labels in Microsoft Office, I suggest reaching out to Microsoft Support for further assistance. They may be able to provide more specific guidance and workarounds for the known issues you mentioned.

I hope this helps! Let me know if you have any other questions or concerns.
PRADEEPCHEEKATLA 90,641 Reputation points Moderator

2024-06-10T06:09:44.67+00:00

@Ahmed Sh - We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Ahmed Sh 80 Reputation points

2024-06-10T08:58:13.61+00:00

PRADEEPCHEEKATLA-MSFT, Yes I am trying to find workarounds for those issues some other way.

Share via

Label Inheritance

Your answer