Do all users need E5 licenses for auto-labeling or just the account that manages Data Loss Prevention policies?

Question

I am currently trying to deploy Data Loss Prevention policies in my organization. The DLP has never been deployed and there are no sensitivity labels. I would like to use the out-of-the-box sensitivity types to create labels and use the auto-label option to tag documents in my organization. Would this require me to upgrade all licenses to Enterprise 5 or just the license of the person responsible for the DLP policies?

Answer 1

@Joshua Lincecum

Welcome to Microsoft Q&A forum and thanks for reaching out here.

If you want to use the auto-label option to tag documents in your organization, you need to have an active Microsoft 365 license that offers the benefit of automatically applying sensitivity labels. This means that all users who will be working with the auto-labeling feature will need to have the appropriate license.

However, if you only want to use the out-of-the-box sensitivity types to create labels and not use the auto-label option, then you may not need to upgrade all licenses to Enterprise 5. You can create sensitivity labels in the Microsoft 365 compliance portal and apply them manually to your documents.

If your requirement is to use sensitivity labels in the Microsoft Purview Data Map, you'll need at least one Microsoft 365 license/account within the same Azure Active Directory (Azure AD) tenant as your Microsoft Purview account.

If your organization has multiple Microsoft Purview Data Map accounts within an Azure AD tenant, then when you extend sensitivity labels to the Microsoft Purview Data Map, those labels are extended to all the accounts in your tenant.

Hope this helps.

---

Please don’t forget to Accept Answer and Yes for "was this answer helpful" wherever the information provided helps you, this can be beneficial to other community members.