Question

Your organization has published five sensitivity labels in Microsoft Purview: Public, Internal, Confidential, Highly Confidential, and Restricted. The compliance team wants only the members of the security group 'Fabric-Finance-Analysts' to be able to apply the 'Restricted' label to their Fabric items, while all other users should still be able to apply the remaining four labels. As the Fabric administrator, where do you configure this restriction?

Accepted Answer

In the Microsoft Purview compliance portal, edit the 'Restricted' label's scope and publishing policy to include only the 'Fabric-Finance-Analysts' group

Answer

In the Fabric Admin portal tenant settings, enable 'Allow users to apply sensitivity labels for content' and restrict it to the 'Fabric-Finance-Analysts' group

Answer

In each workspace's settings, assign the 'Fabric-Finance-Analysts' group the Admin role so they can apply the 'Restricted' label

Answer

In the Fabric Admin portal, create a deployment rule that applies the 'Restricted' label only to items owned by the 'Fabric-Finance-Analysts' group