Chia sẻ qua

Use sensitivity labels with Microsoft Loop

  • Bài viết

Microsoft 365 licensing guidance for security & compliance.

Use your sensitivity labels with Microsoft Loop to add an extra layer of protection to the Loop-related data that users create with this app. This protection extends to Microsoft 365 Copilot.

Loop supports sensitivity labels at the item level, for components and pages:

  • Users can manually apply sensitivity labels that are published to them, including sensitivity labels that apply encryption configured to apply permissions now.
  • Watermarks as a label setting are supported but not variables in the text string.
  • Mandatory labeling and a default document label are supported as settings from a label publishing policy.
  • Other policy settings supported:
    • Justification to remove a label or lower its priority
    • The "Learn more" link

Example loop component that's currently labeled with the Confidential \ All Employees sensitivity label that applies encryption, displaying other available labels:

Microsoft Loop component displaying sensitivity labels to protect the data in the component.

Loop supports sensitivity labels at the container level, for workspaces:

  • This functionality is currently rolling out for tenant-owned workspaces on the web version of the Loop app.

See the following sections for more details about requirements, supported scenarios, and limitations when you use sensitivity labels with Loop.

For information where Loop-related content is stored , see Loop storage.

Sensitivity labels to protect Loop components and pages

The ability to apply sensitivity labels to Loop components and pages requires that SharePoint and OneDrive is enabled for sensitivity labels. Then, you can apply sensitivity labels to loop components and pages in the following apps:

  • The Loop app (web and mobile)
  • Loop in Outlook (desktop, mobile, web)
  • Copilot Pages in Microsoft 365 Copilot Business Chat

When Loop components and pages are encrypted by sensitivity labels, Microsoft 365 Copilot honors the EXTRACT usage right. Microsoft 365 Copilot won't summarize this Loop data unless the user is granted this usage right.

As with sensitivity labels that are applied to documents in SharePoint and OneDrive, the following auditing events are supported:

  • Applied sensitivity label to file
  • Changed sensitivity label applied to file
  • Removed sensitivity label from file

Limitations for Loop components and pages

The following labeling capabilities aren't supported:

  • Label colors
  • Label names and descriptions for other languages
  • Headers and footers
  • Variables in watermarks
  • Automatic and recommended labeling
  • Default label for SharePoint document library
  • Sensitivity labels that are configured for any of the following encryption settings:
    • Let users assign permissions, sometimes known as "user-defined permissions"
    • User access to content expires is set to a value other than Never
    • Double Key Encryption is selected

Because the task management tools in Microsoft Planner and Microsoft To Do don't support encryption, they stop synchronizing a Loop component or page that's encrypted by a sensitivity label.

Sensitivity labels to protect Loop workspaces

The ability to apply sensitivity labels to Loop workspaces at the tenant-level requires that sensitivity labels are enabled for containers. Then, you can apply sensitivity labels to loop workspaces in the Loop web app so that content in those workspaces is protected by the following label settings documented in Use sensitivity labels to protect content in Microsoft Teams, Microsoft 365 groups, and SharePoint sites:

  • External user access
  • External sharing from SharePoint sites
  • Access from unmanaged devices
  • Authentication contexts
  • Default sharing link for a SharePoint site (PowerShell-only configuration)
  • Site sharing settings (PowerShell-only configuration)

Limitations for Loop workspaces

As with sensitivity labels that you apply to Loop components and pages, sensitivity labels for Loop workspaces don't support label colors or label names and descriptions for other languages.

The following Loop content isn't protected by the container label settings:

  • Linked files
  • Files uploaded to a workspace because these files are stored in the user's OneDrive
  • Videos that are created in a workspace because these files are stored in the user's OneDrive