Question

Contoso is configuring a sensitivity label named "Confidential - Finance" that must apply encryption. The compliance team wants only members of the Finance department to be able to open protected documents, with Co-Author permissions, while allowing the label to be usable by all employees who publish it. Which encryption permission configuration should you use when defining the label's protection settings?

Accepted Answer

Configure encryption to 'Assign permissions now' and add the Finance security group with the Co-Author permission level

Answer

Configure encryption to 'Let users assign permissions when they apply the label' using the Do Not Forward option

Answer

Configure encryption to 'Assign permissions now' and add 'All authenticated users' with the Viewer permission level

Answer

Configure encryption to 'Remove protection' and rely on the publishing policy scope to restrict access to Finance users