How to Apply Microsoft Information Protection’s (MIP) sensitivity labels to Azure assets in Azure Purview

Sharing is caring!

&NewLine;<p><strong>Azure Purview <&sol;strong>enables you to map&comma; catalogue&comma; understand&comma; classify&comma; and manage your operational and analytical data—whether on-premises&comma; across your multi-cloud environment or within SaaS applications&period; With Purview Data Catalog&comma; you can now search&comma; understand the underlying sensitivity&comma; and view how data is being used across the organization with data lineage&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p><strong>Microsoft Information Protection<&sol;strong>&comma; a built-in&comma; intelligent&comma; unified&comma; and extensible solution that understands and classifies your data&comma; keeps it protected&comma; and prevents data loss across&nbsp&semi;Microsoft 365&nbsp&semi;Apps &lpar;including Word&comma; PowerPoint&comma; Excel&comma; Outlook&rpar;&comma; services &lpar;such as Microsoft Teams&comma; SharePoint&comma; Exchange&comma; Power BI&rpar;&comma; third-party SaaS applications&comma; and more—on-premises or in the cloud&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p><strong>Sensitivity Labels<&sol;strong> enables you to state how sensitive certain data is in your organization&period; W~hen your data roam&comma; inside or outside the organisation&semi; you want it to do so in a secure&comma; protected way that meets your organization&&num;8217&semi;s business and compliance policies&period; For example&comma; a specific project name might be highly confidential within your organization&comma; while that same term is not confidential to other organizations&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p><strong>MIP sensitivity labels<&sol;strong> are created in the Microsoft 365 Security and Compliance Center &lpar;SCC&rpar;&period; Purview uses the same classifications&comma; also known as sensitive information types&comma; like Microsoft 365&period; This enables you to extend your existing sensitivity labels across your Azure Purview assets&period; Microsoft Information Protection’s sensitivity labels with Azure Purview&comma; organizations can now automatically discover&comma; classify&comma; and get insight into sensitivity across a broader range of data sources such as SQL Server&comma; SAP&comma; Teradata&comma; Azure Data Services&comma; and Amazon AWS S3&comma; helping to minimize compliance risk&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p><strong><span style&equals;"background-color&colon; rgba&lpar;48&comma; 48&comma; 48&comma; 0&period;2&rpar;&semi;"><b>Auto <&sol;b><&sol;span>labelling <&sol;strong>rules are conditions that you specify&comma; stating when a particular label should be applied&period; When these conditions are met&comma; the label is automatically assigned to the data&comma; retaining consistent sensitivity labels on your data&comma; at scale&period; <&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p><strong>Create and Deploy Auto Labelling <&sol;strong><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p>MIP sensitivity labels are only available for assets in Microsoft 365&comma; where you can apply them to files and emails&period; To apply MIP sensitivity labels to Azure assets in Azure Purview&comma; you must explicitly consent to extending the labels&comma; and select the specific labels that you want to be available in Purview&period; Consenting in Microsoft 365 compliance center applies to sharing this data with both services&period; <&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<ol class&equals;"wp-block-list"><li>Make sure to create or modify existing sensitive labels&period;<&sol;li><li>Make them available for Azure Purview<&sol;li><li>Define auto labelling rules for both&nbsp&semi;files&nbsp&semi;and&nbsp&semi;database columns&nbsp&semi;to apply your labels automatically with each data scan&period; <&sol;li><li>After scanning your data in Purview&comma; you can view the labels automatically applied in the Purview Catalog and Insight reports&period;<&sol;li><&sol;ol>&NewLine;&NewLine;&NewLine;&NewLine;<p><strong>Sensitivity labels are supported in Azure Purview for the following data types&colon;<&sol;strong><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-table"><table><thead><tr><th>Data type<&sol;th><th>Sources<&sol;th><&sol;tr><&sol;thead><tbody><tr><td>Automatic labeling for files<&sol;td><td>&&num;8211&semi; Azure Blob Storage<br>&&num;8211&semi; Azure Data Lake Storage Gen 1 and Gen 2<&sol;td><&sol;tr><tr><td>Automatic labeling for database columns<&sol;td><td>&&num;8211&semi; SQL server<br>&&num;8211&semi; Azure SQL database<br>&&num;8211&semi; Azure SQL Database Managed Instance<br>&&num;8211&semi; Azure Synapse<br>&&num;8211&semi; Azure Cosmos DB<&sol;td><&sol;tr><&sol;tbody><&sol;table><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<div class&equals;"wp-block-wp-quads-adds">&NewLine;<&excl;-- WP QUADS v&period; 3&period;0&period;5 Shortcode Ad -->&NewLine;<div class&equals;"quads-location quads-ad" id&equals;"quads-ad" style&equals;"">&NewLine;<&sol;div>&NewLine;<&sol;div>&NewLine;&NewLine;&NewLine;&NewLine;<p><strong>To extend sensitivity labels to Purview&colon;<&sol;strong><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p>In Microsoft 365&comma; navigate to the&nbsp&semi;<strong>Information Protection<&sol;strong>&nbsp&semi;page&period; In the&nbsp&semi;<strong>Extend labeling to assets in Azure Purview<&sol;strong>&comma; select the&nbsp&semi;<strong>Turn on<&sol;strong>&nbsp&semi;button&comma; and then select&nbsp&semi;<strong>Yes<&sol;strong>&nbsp&semi;in the confirmation dialog that appears&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;docs&period;microsoft&period;com&sol;en-gb&sol;azure&sol;purview&sol;media&sol;create-sensitivity-label&sol;extend-sensitivity-labels-to-purview-small&period;png" alt&equals;"Select &ast;&ast;Turn on&ast;&ast; to extend sensitivity labels to Purview"&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p><strong>Licensing requirements&colon; <&sol;strong><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p>MIP sensitivity labels are created and managed in the Microsoft 365 Security and Compliance Center&period; To create sensitivity labels for use in Azure Purview&comma; you must have an active Microsoft 365 E5 license&period;<&sol;p>&NewLine;