Remove Labels from *not* Office Files - Azure AIP

Question

Hello,

  I created a label for AIP where an entire group was co-author. I published it and didnt select "Users must provide justification to remove a label or lower its classification".   When I put that label on office files, everything works fine and everyone can remove it or edit the files.   If I choose a .txt file and protect it with the "Azure Information Protection Viewer", the selected group can view that file but cant edit it. They also cant remove that label, because they "dont have permission" for that.   What settings do I need to make in Microsoft Purview to change it?  

Thanks for your help!

Answer 1

Hi @Phetkhajee,Maximilian | LANdata IT-Solutions ,

For non-office files to be able to remove protection or labels, the users need to either be the owner of the file or be granted permissions to remove protection (the Rights Management permission of Export or Full Control). If your organization requires labels on all files, you won't be able to remove the labels. The .txt file extension becomes read-only and switches to the .ptxt extension when protected. For this file format, Azure Information Protection does not support labels that apply classification without protection. Therefore, only users with the owner, Export, or Full Control permissions can remove the labels.

If you have the correct permissions applied, you need to do the following to remove the labels:

1. In File Explorer, select your file, multiple files, or a folder. Right-click, and select Classify and protect.
2. To remove a label: In the Classify and protect - Azure Information Protection dialog box, click Delete Label. If the label was configured to apply protection, that protection is automatically removed.
3. To remove custom protection from a single file: In the Classify and protect - Azure Information Protection dialog box, clear the Protect with custom permissions option.
4. To remove custom protection from multiple files: In the Classify and protect - Azure Information Protection dialog box, click Remove custom permissions.
5. Click Apply and wait for the Work finished message to see the results. Then click Close.

https://learn.microsoft.com/en-us/azure/information-protection/rms-client/clientv2-remove-label-protection#using-file-explorer-to-remove-labels-and-protection-from-files

https://learn.microsoft.com/en-us/azure/information-protection/configure-usage-rights

https://learn.microsoft.com/en-us/azure/information-protection/rms-client/clientv2-remove-label-protection#using-file-explorer-to-remove-labels-and-protection-from-files

Let me know if this helps and if you have further questions.

If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar information.