Downgrade label AIP justification

Natália Lima 86 Reputation points
2021-09-27T19:06:08.007+00:00

Where I can see the justifications about activities downgrade labels? I activated the Log Analytics to see the logs but I can't see this information.

Azure Information Protection
Azure Information Protection
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
515 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Clive Watson 5,711 Reputation points MVP
    2023-01-25T12:15:40.3233333+00:00

    Only adding it now in case its useful to someone else. You need this data source:

    CloudAppEvents

    | where ActionType == "FileSensitivityLabelChanged"

    | extend SensitivityLabelJustificationText_ = tostring(RawEventData.SensitivityLabelJustificationText)

    | where isnotempty(SensitivityLabelJustificationText_)

    0 comments