Edit

Unlock-SPOSensitivityLabelEncryptedFile

  • Reference
Module:
Microsoft.Online.SharePoint.PowerShell
Applies to:
SharePoint Online

It removes encryption on a Sensitivity label encrypted file in SharePoint Online. No need to download the file.

Syntax

Unlock-SPOSensitivityLabelEncryptedFile
      -FileUrl <absolute path for file>
      -JustificationText <needed for auditing>

Description

The Unlock-SPOSensitivityLabelEncryptedFile cmdlet runs on a single office online file that is encrypted via sensitivity label. It decrypts the file and removes the label from the file.

You must be a SharePoint Online administrator or Global Administrator to run the Unlock-SPOSensitivityLabelEncryptedFile cmdlet. Note, this cmdlet do not work on files that have labels with custom permission or user defined permission or double key encryption.

For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at Intro to SharePoint Online Management Shell.

Examples

-----------------------EXAMPLE 1-----------------------------

Unlock-SPOSensitivityLabelEncryptedFile -FileUrl "https://contoso.com/sites/Marketing/Shared Documents/Doc1.docx" -JustificationText "Need to recover this file"

This example will remove a regular label with admin defined encryption from the file Doc1.docx and also make an entry in audit logs.

Parameters

-FileUrl

Full URL for the file.

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False
Applies to:SharePoint Online

-JustificationText

Text that explains the reason to run this cmdlet on the given file.

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False
Applies to:SharePoint Online