Sensitivity Labels Flashcards
What fields are in the Sensitivity Label details field?
Name, descriptions, priority, colours
What are the scope options for Sensitivity Labels ?
Items ( files, emails, meetings )
Containers ( Teams, Sites, Groups )
Data assets
I’m what ways do protection settings differ between Items and Containers?
Items are specific to a document. Container labelling labels wider containers.
What protection settings are available for Items ?
Access control
Content marking
Auto-labelling for emails and office documents
Explain how Item Access Control works…
Select users and allocate them permissions. Either select a pre-config such as co-owner, co-author, reviewer etc. or create a custom permission package.
Can also apply dynamic watermarking that displays their email.
Can also set expiration settings e.g this user only has these permissions for X days.
Explain auto-labelling for Item labels…
Apply labels to Office documents and emails. Content is analysed before a label is either recommended or enforced based on whether a provided SIT is found.
Uses the ‘content contains’ condition.
What 2 ways are label containers protected?
Access restrictions
Sharing restrictions
Explain how access control works with labelled containers…
Label controls both internal and external access to the labelled site.
Public - anyone can access the site.
Private - Owners and members can access. Only members can add external guests.
If a label is applied to a container that has a label configured with Container-Private access control. How can an external guest view the container ?
They can only gain access through the container owner inviting them.
Explain how ‘control sharing’ works for labelled containers…
A container protection setting that controls how internal members can share containers.
Public - Can share with anyone.
New and existing guest - Can share with new and existing guests providing they can authenticate via code or sign in.
Existing guests - Can share if they’re already guest.
Private - Can only share site with internal users.