DlpGetFileCloudApplicationPolicyEx function

Returns the enforcement level of a file uploaded to a cloud application. This function is designed to be called from external sources such as Microsoft Edge, that do not have innate acess to the User SID. The SID will be detected from the currect process where endpointDlp is located.

Syntax

HRESULT WINAPI DlpGetFileCloudApplicationPolicyEx(_In_z_ LPCWSTR filePath, _In_z_ LPCWSTR cloudAppDomainName, _In_z_ LPCWSTR url, _Out_ DlpEnforcementLevel* enforcmentLevel, _Out_ DlpTraceInfo* traceInfo);

Parameters

filePath [in]: A fully qualified Win32 file path for the file to be analyzed.

cloudAppDomainName [in]: The domain name component of the URI for the application accessing the file.

url [in]: The URL of the website associated with the function call.

enforcmentLevel [out]: The enforcement level of the designated file. If the file is excluded from enforcement or isn't marked as sensitive, an "off" result is returned.

traceInfo [out]: A reference to a Trace structure. On successful completion, this structure contains the Policy version used for evaluation and the PolicyRuleID assigned to the file. This value can be NULL.

Return value

Returns an HRESULT including, but not limited to, the following values.

HRESULT	Description
S_OK	The function completed successfully.
ACCESS_DENIED	The user doesn't have permission to view the designated file.
	FAILED	An unexpected error prevented the function from completing.

Remarks

This function can be called from multiple threads.

Requirements

Requirement	Value
Minimum supported client	Windows 11, version 22H2 (10.0; Build 22621)
DLL	EndpointDlp.dll