Hello everybody,
This question is related to Sensitivity labels in Microsoft 365 Security & Compliance Center.
I have received a business requirement that asks for the following:
"All files that are stored in a specific SharePoint Online document library should automatically be labeled with a sensitivity label (confidential)."
Now, I am aware of the out of the box auto-labeling feature inside the Microsoft 365 Security & Compliance Center. But unfortunately, that only works when the system is able to find sensitive content in a document. I know that I can create custom sensitive info types myself.
However, the requirement is that all files should be labeled as confidential automatically.
Let's just suppose that the HR department receives a PDF file by email from an external company, and the HR employee saves this file inside the document library of the HR team site. The PDF file contains sensitive information. Because this is an noneditable PDF file, the sensitivity label will not be applied. I'm just trying to say, you cannot simply control how information is coming in to the organization from external parties.
Would it be possible to build a flow that can set the sensitivity label?
I know that I can do this for retention labels. I know which trigger to use, but I cannot find the necessary resources to fulfill the requirement. I'm afraid we cannot do this currently... as I could not even find a Microsoft Graph operation for this.
Thanks in advance for all help provided!