To control the "Save As" functionality, you would need to use a combination of Microsoft Information Protection (MIP) and Data Loss Prevention (DLP) policies. Here's a general guide on how you can set this up:
- Create a Label in Microsoft Information Protection (MIP):
- Go to the Microsoft 365 compliance centre.
- Navigate to "Solutions > Information protection".
- Click on "Create a label" and follow the instructions to create a new label. You can specify the settings according to your needs.
Apply the Label to your Documents:
- Once the label is created, you can apply it to your documents. This can be done manually within the document, or you can set up an auto-labeling policy.
- Create a Data Loss Prevention (DLP) Policy:
- Go back to the Microsoft 365 compliance centre.
- Navigate to "Policies > Data loss prevention".
- Click on "Create a policy" and follow the instructions to create a new policy. In the policy settings, you can specify that the labelled documents cannot be downloaded or shared outside your organization.
Apply the DLP Policy:
- Once the DLP policy is created, it will automatically apply to all documents with the specified label.
This setup will prevent the labelled documents from being downloaded or shared outside your organization, but it won't disable the "Save As" option within the client applications. However, even if a user tries to "Save As" and save the document outside the organization, the DLP policy will prevent it.