SOLVED

Monitoring Unifiled labeling change

%3CLINGO-SUB%20id%3D%22lingo-sub-1462509%22%20slang%3D%22en-US%22%3EMonitoring%20Unifiled%20labeling%20change%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1462509%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3EIs%20there%20any%20way%20to%20monitor%20and%20notify%20if%20a%20user%20degrades%20the%20label%20classification%20or%20removes%20the%20label%20form%20a%20document.%3C%2FP%3E%3CP%3EAlso%2C%20is%20there%20any%20way%20to%20stop%20user%20from%20removing%20label%20from%20a%20file%3F%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1462509%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EData%20Protection%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1467215%22%20slang%3D%22en-US%22%3ERe%3A%20Monitoring%20Unifiled%20labeling%20change%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1467215%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F410218%22%20target%3D%22_blank%22%3E%40Nip17%3C%2FA%3E%26nbsp%3BYou%20can%20check%20that%20in%20the%26nbsp%3B%3CSPAN%3ESecurity%20%26amp%3B%20Compliance%20Center.%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22msedge_QfRW5Bi1kV.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F198994i118B6C3BDD870212%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22msedge_QfRW5Bi1kV.png%22%20alt%3D%22msedge_QfRW5Bi1kV.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22msedge_Pl919QJeEv.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F198990i529790BBF81B1913%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22msedge_Pl919QJeEv.png%22%20alt%3D%22msedge_Pl919QJeEv.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3ERead%20more%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fview-label-activity-for-documents%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fview-label-activity-for-documents%3Fview%3Do365-worldwide%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20also%20integrate%20AIP%20with%20MCAS%20and%20set%20alerts%3A%26nbsp%3B-ERR%3AREF-NOT-FOUND-%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fazip-integration%23control-file-exposure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fazip-integration%23control-file-exposure%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ETo%20prevent%20users%20from%20removing%20or%20changing%20a%20label%2C%20the%20content%20must%20already%20be%20protected%20and%20the%20protection%20permissions%20do%20not%20grant%20the%20user%20the%20Export%20or%20Full%20Control%26nbsp%3B%3C%2FSPAN%3E-ERR%3AREF-NOT-FOUND-usage%20right%3CSPAN%3E.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EHope%20that%20helps!%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi All,

Is there any way to monitor and notify if a user degrades the label classification or removes the label form a document.

Also, is there any way to stop user from removing label from a file? 

Thanks. 

1 Reply
best response confirmed by Nip17 (Contributor)
Solution

@Nip17 You can check that in the Security & Compliance Center. msedge_QfRW5Bi1kV.png

 

msedge_Pl919QJeEv.png

 

Read more:

https://docs.microsoft.com/en-us/microsoft-365/compliance/view-label-activity-for-documents?view=o36...

 

You can also integrate AIP with MCAS and set alerts: https://docs.microsoft.com/en-us/cloud-app-security/azip-integration#control-file-exposure

 

To prevent users from removing or changing a label, the content must already be protected and the protection permissions do not grant the user the Export or Full Control usage right.

 

Hope that helps!

We support Ukraine and condemn war. Push Russian government to act against war. Be brave, vocal and show your support to Ukraine. Follow the latest news HERE