Azure Information Protection

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Enforce classification when using send as attachment

    Enforce classification when using send as attachment option. Currently the classification is only enforced when the document is saved and this can potentially open up a loop hole for sending out unclassified documents.

    7 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  2. Allow Keyword dictionaries to be used with 'AIP scanner' as conditions

    Currently the AIP 'standard' client does not have support for adding keyword lists, or a practical way to add them besides adding single conditions with individual strings one at a time. The Unified Labeling client contains both options to add keywords comma separated, and keyword lists. This is great however currently the UL AIP client does not have a Scanner option. Thus, AIP scanner relies on AIP standard client and its labels and conditions that do not contain an option for adding vast numbers of keywords besides tedious single conditons. In the case of 'thousands' of keywords this is simply…

    7 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  3. Enable DLP enforcement for mails with specific label

    We would love to have our DLP policy automatically pick up on emails that have a label or document and either gray out the send button if it meets the DLP policy or somehow stop the email automatically instead of sending back a block reply.

    15 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  4. Enforce classification when a document is opened

    Enforce classification and/or protection as soon as a document is opened, even for a new document, instead of when the document is saved.

    This can help in applying classification/protection to documents even while they are being drafted and yet to be saved.

    With the current behavior there is a gap where a user can send a file directly via email using the send as email attachment option if the document is not saved. Please see attached snapshots

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  5. When encryption is added on existing labels automatically update documents via scanner and client

    It can be useful to start a deployment with Labels only, without protection, that the end-users can get a feeling for this technology. It also helps avoid incompatibility issues (e.g. if a document repository or LOB app doesn't support protection yet).

    After the users are comfortable with the technology and the potential issues have been addressed existing labels should be changed and have encryption added (without creating new labels, just change the existing ones).

    The AIP Scanner should be able to automatically add protection to the documents that were labeled with these labels before protection was incorporated. The clients should…

    12 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    We're working on it!  ·  3 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  6. Apply default label to SharePoint and OneDrive docs

    Users may uninstall AIP client to attempt to circumvent AIP or just because they find it annoying. If the default label could be applied to any documents in SharePoint or OneDrive could be applied even if AIP client is not present, it would alleviate this potential security end-run.

    Typically, end-users will not have admin rights to uninstall applications, but some times it is inescapable, esp in a small business.

    22 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    We're working on it!  ·  1 comment  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  7. AIP Scanner - Add capability to forcefully override an already-classified document

    In AIP Scanner, there should be a capability to enforce the overriding of label regardless of MatchPolicy setting is On or Off.

    I am working with a customer who has a genuine requirement of overriding the labels for bulk files.

    For example, AIP is configured to enforce a default label when user creates or saves a file. but later-on user moves this file to an AIP-repository (file share or SharePoint library), which is configured to apply another label.

    Unfortunately currently AIP Scanner does not support this basic scenario. Currently, to make this scenario work, this another-label must have an automatic…

    25 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  8. Add an option to protect only the header/footer/watermark from modification

    When labeling the document a user can easily remove the header/footer/watermark and it will never show up again until you re-label the document.
    It would be nice to be able to protect these markings from modification while the rest of the document is fully editable.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  9. Applying Unified Labels with user-defined permission should produce an error in unsupported platforms

    according to this article https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-migrate-labels it is possible to apply Unified Label with user-defined permissions when a preview release of AIP v2 client is installed. however, for Office on Mac/iOS/Android, the behaviour is that "Users are not prompted for custom permissions and no protection is applied ". this give a false sense of security to the users. instead of failing silently, an error should be displayed to the users

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    We're working on it!  ·  0 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  10. Label change prohibition function for each application

    When setting a default label, we need the ability to prevent users from changing labels.
    It would be better to be able to set for each application (Word, Excel, Powerpoint, Outlook).

    < Business impact>
    This is because there is a possibility that if another label is displayed, even though the default label is set, a user's operation error may be induced.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  11. Manually classify incoming emails on reception.\

    I have a customer that wants to classify incoming emails manually. But the lablebar do not show on incoming email. You can click to show the labelbar but not change existing (non existing) label.

    28 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →

    We are evaluating this request and need more input into how this feature should behave to meet your needs.
    We will have automatic classification of inbound emails at the transport level, but this request calls for manual classification on the endpoint. A few clarifying questions:
    1) What is the use case for classifying a received email? Who would use that classification and how?
    2) Would protection need to be applied on the classified email (even when it’s not being replied)?
    3) A user should not be able to change the classification of emails in other people’s mailbox, so as the request is defined classification would be only on the local mailbox of the recipient doing it. What happens if someone else replies to the same thread, which they didn’t classify, so the replies are no longer classified. Would that be a problem?

  12. Set default label in 'Classify and protect' for Office documents

    Currently, the “Classify and protect” feature in File Explorer doesn’t take into account the default label as set in policies.

    This is due to a design decision based on fact that the Classify and Protect option is normally used for file types that do not natively support labeling and protection, and that usually Office documents get the label via add-in during creation for instance.

    Also the AIP App does not distinguish if the default label defined is a label only or has protection defined for it as well.

    This request is about changing the behavior of the AIP App for…

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  13. Enforce Classification on Print/QuickPrint

    Enforce Classification of document before print or quick print. i.e. a user opens an unclassified document to print. The system should force the user to classify; otherwise, the document will not be printed.

    This will help enforcing a classification even if document is printed as PDF file.

    14 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  14. Prevent externals from changing the AIP classification label of a document

    Consider the following, real world, scenario:

    - Alan works for Company X. Alan creates a Word document in his OneDrive and apply the AIP label "Confidential".
    - Alan shares the document with Bill in Company Y via a document share in OneDrive. Alan allows Bill to edit the document.
    - Bill opens the document in Word.

    Bill sees Company X's AIP confidential label information in the yellow bar. That's good. However, Bill can edit the document and change the classification of the document to one in Company Y's tenancy. That's bad. See the attached screenshot.

    There should be an option…

    41 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Proposed  ·  1 comment  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  15. Working URL's in the policy tooltips

    Allow admins to add a working URL in the policy tooltip when recommending a label based on content of the document.
    Now you can add url's but they aren't clickable. it would be nice if you could add a link users can click on

    11 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  16. Allow for multiple labels to be assigned to one document or email.

    In some businesses it would be useful to be able to tag a document as matching multiple labels (e.g. containing PII AND including references to Project X). The current design only allows for one label/sublabel to be attached to a document at a time.

    57 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Yes, Committed  ·  6 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  17. Add option to automatically classify attachment document same as email classification label

    Please add a configurable option in Azure AIP policy to enforce the same classification label on attached unclassified-document as email classification label.

    This feature will only be enforced on unclassified-attachment. If attached document already has a label, then this feature will not be enforced.

    Organization should be able to enable or disable this feature in the AIP policy. This will help to ensure that no document goes unclassified if sent via enterprise email system.

    8 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  18. Combine label with retention policy settings mainly emails in outlook.com

    For usability reasons it would make terrible sense that emails could also be applied with a retention policy when applying a sub lable.
    Or is this possible via quick actions?

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Proposed  ·  1 comment  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  19. Automatically classify e-mail with modern attachment (link sharing)

    Currently there is an auto step-up (of a lower e-mail label towards a higher file label) if we attach a file within the e-mail

    With Modern Attachment (Share as OneDrive link), the auto step-up isn't working.

    This doesn't make sense and isn't consistent for the user which may lead to dangerous labeling mistakes (having user thinking the e-mail will automatically label from itself).

    This is especially problematic since the Modern Attachment is often coupled with "anyone who gets the link gets access" which means that the body is at least as important as if it would be a regular "payload"…

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
  20. Inherit the classification label during export operations

    When users export, save as or print (e.g. to pdf file) a document that has already a classification (or protection) label, the destination file should keep the same classification label and protection of the source file.

    25 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Proposed  ·  6 comments  ·  Labelling  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1
  • Don't see your idea?

Feedback and Knowledge Base