Microsoft purview Enabling NewUnifiedGroupWriteBackDefault -

Question

Microsoft purview Enabling NewUnifiedGroupWriteBackDefault -

prasantc 996

I need to create and publish labelling policy targeting emails, Teams and site. Currently, the Teams and site option are grayed out during the label creation process.

In order to enable label for Teams and site, the unified feature has to be enabled with the following PS commands -

power$Setting = $grpUnifiedSetting

$grpUnifiedSetting.Values

$Setting["EnableMIPLabels"] = "True"

Get-AzureADDirectorySettingTemplate

$TemplateId = (Get-AzureADDirectorySettingTemplate | where { $_.DisplayName -eq "Group.Unified" }).Id

$Template = Get-AzureADDirectorySettingTemplate | where -Property Id -Value $TemplateId -EQ

$Setting = $Template.CreateDirectorySetting()

$Setting["EnableMIPLabels"] = "True"

$Setting.Values

Does enabling unified label for the entire tenant has any issues or re-percussion on any of the old poli y in Exchange? Or it can be enabled without impacting any other 365 services? Or it cannot be rolled back one it is enabled?

PRADEEPCHEEKATLA 91,861 Reputation points

2024-09-03T10:47:11.1133333+00:00

@prasantc - Thanks for the question and using MS Q&A platform.

Enabling the unified label feature for the entire tenant should not have any issues or repercussions on any of the old policies in Exchange. However, it is always recommended to test the changes in a test environment before implementing them in the production environment. Once the unified label feature is enabled, it can be rolled back if needed.

Regarding your issue with creating and publishing a labeling policy targeting emails, Teams, and sites, it seems that you need to enable the "EnableMIPLabels" setting to "True" in the Group.Unified template. You can use the PowerShell commands you provided to enable this setting. Once you enable this setting, you should be able to create and publish a labeling policy targeting emails, Teams, and sites.

Please note that enabling the "EnableMIPLabels" setting will enable the unified labeling feature for the entire tenant, which means that all Microsoft 365 services that support sensitivity labels will be affected.

For more details, refer to Microsoft Entra classification and sensitivity labels for Microsoft 365 groups.

Hope this helps. Do let us know if you any further queries.
Abdullah Shahid 15 Reputation points

2024-09-03T11:26:26.3366667+00:00

To enable the unified labeling feature without issues for your tenant, it’s recommended to first test in a non-production environment. After enabling, you can roll back if needed. For your labeling policy issue, ensure "EnableMIPLabels" is set to "True" in the Group.Unified template using PowerShell. This will allow targeting emails, Teams, and sites. Be aware that this will impact all Microsoft 365 services that support sensitivity labels. Refer to Microsoft Entra documentation for further details.
Abdullah Shahid 15 Reputation points

2024-09-03T11:26:41.0633333+00:00

To enable the unified labeling feature without issues for your tenant, it’s recommended to first test in a non-production environment. After enabling, you can roll back if needed. For your labeling policy issue, ensure "EnableMIPLabels" is set to "True" in the Group.Unified template using PowerShell. This will allow targeting emails, Teams, and sites. Be aware that this will impact all Microsoft 365 services that support sensitivity labels. Refer to Microsoft Entra documentation for further details.

prasantc 996

I have been building script based on this article using purview -

https://arashaghajani.com/blog/how-to-enable-m365-groups-teams-and-sharepoint-sites-option-in-sensitivity-labels-in-microsoft-purview/

To view existing state -

And another one with graph module -

Install-Module Microsoft.Graph -Scope CurrentUser
Install-Module Microsoft.Graph.Beta -Scope CurrentUser
Connect-MgGraph -Scopes "Directory.ReadWrite.All"
$grpUnifiedSetting = Get-MgBetaDirectorySetting -Search DisplayName:"Group.Unified"
$params = @{
     Values = @(
 	    @{
 		    Name = "EnableMIPLabels"
 		    Value = "True"
 	    }
     )
}
Update-MgBetaDirectorySetting -DirectorySettingId $grpUnifiedSetting.Id -BodyParameter $params
$Setting = Get-MgBetaDirectorySetting -DirectorySettingId $grpUnifiedSetting.Id
$Setting.Values

PRADEEPCHEEKATLA 91,861 Reputation points

2024-09-11T03:18:50.49+00:00

@prasantc - It seems like you are trying to enable the unified labeling feature for Microsoft 365 groups, Teams, and SharePoint sites using PowerShell scripts based on the articles you provided. These scripts should work as long as you have the necessary permissions and licenses to perform these actions.

The first script you provided is based on the Azure Purview compliance portal, and the second script is based on the Microsoft Graph module. Both scripts are valid and can be used to enable the unified labeling feature for Microsoft 365 groups, Teams, and SharePoint sites.

Please note that enabling the unified labeling feature for the entire tenant will affect all Microsoft 365 services that support sensitivity labels. Therefore, it is recommended to test the changes in a test environment before implementing them in the production environment.
PRADEEPCHEEKATLA 91,861 Reputation points

2024-09-16T04:22:04.92+00:00

@prasantc - We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.