How to enable document "Save as" and "Export" features for documents protected by sensitivity labels

Andris Brigers 5 Reputation points
2024-03-06T08:24:54.51+00:00

Hi,

We are in the process of rolling out sensitivity labels for our users.

Issue is that when our policy is applied and employee selects "INTERNAL" label - which only allows access to documents for organization employees - our employees are no longer able to download a copy of these documents or export them via web version of Excel, Word, etc. This is not an issue for the same documents opened via Desktop versions of the same apps.

We have also tried both Co-Author as well as Co-Owner settings for the labels - waited for whole week for settings to re-apply but this did not help.

Any ideas/suggestions would be greatly appreciated.

Azure Information Protection
Azure Information Protection
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
528 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. James Hamil 22,976 Reputation points Microsoft Employee
    2024-03-06T21:49:37.3566667+00:00

    Hi @Andris Brigers , can you try these steps and let me know if they work for you?

    1. Go to the Microsoft 365 compliance center and sign in with your account that has the necessary permissions.
    2. Click on "Sensitivity labels" in the left-hand menu.
    3. Select the sensitivity label that you want to modify.
    4. Under "Protection actions," select "Custom."
    5. Check the box next to "Allow users to save a copy of protected content."
    6. Check the box next to "Allow users to export protected content."
    7. Click "Save" to apply the changes.

    Please let me know if you have any questions and I can help you further.

    If this answer helps you please mark "Accept Answer" so other users can reference it.

    Thank you,

    James

    0 comments
  2. Andris Brigers 5 Reputation points
    2024-03-07T05:50:22.9733333+00:00

    Hi,

    I appreciate your help but the answer got me even more confused. Maybe you were providing steps from memory (or from an older version of Compliance Portal) but the UI elements you are mentioning are not there for me.

    1. There are no "S****ensitivity labels" on the left menu, I guess you meant: "Information Protection", and its submenu "labels".
    2. I selected the label I wanted to edit but there are no "Protection actions" settings, there is "Access control" though - I assume you meant this.

    5.,6., These checkboxes are nowhere to be found on my end. I click on the label > More Action > Edit Label > I skip "Label Details" and click next >I skip "Scope" and click next >In the "Items" menu I made sure to select the "Control Access" checkbox (Description of this setting: Control who can access and view labeled items.).

    In the "Access Control" - I save the selected "Configure Access Control" radio button > "Assign permissions" and have selected applicable groups and also tried with "Add all users and group in your organization"

    Screenshot 2024-03-07 at 07.38.33

    There are pre-defined roles, from which I have tried "Co-Author", "Co-Owner" and also Custom as well. While custom was selected - I added all possible checkboxes (permissions), but that has not helped. And once again - those two checkboxes about Export and Save-as are not here for me.

    Here is an example, I have tried with and without full control selected. (Of course we would prefer to deny the change of ownership to files by anyone, so Full Control should stay off. Screenshot 2024-03-07 at 07.45.25

    You can see that we have custom permissions assigned:

    Screenshot 2024-03-07 at 07.46.09

    Where Can I find these buttons?

    Check the box next to "Allow users to save a copy of protected content."

    Check the box next to "Allow users to export protected content."

    0 comments