Set-UnifiedGroup -Identity $Team.ExternalDirectoryObjectId -SensitivityLabelId $AssignedLabelId $Teams = Get-UnifiedGroup -Filter to team" -f $AssignedLabelId) Here’s the code to find if any teams are missing a sensitivity label: Connect-ExchangeOnline Because we can easily filter for sensitivity labels, we use the Get-UnifiedGroup cmdlet from the Exchange Online management module. Find Teams with No Labelįirst, let’s find the set of teams that don’t have a sensitivity label. In this article, I use some simple rules to illustrate the principle. Step 3 is highly dependent on the organization because the rules will vary so much from tenant to tenant. Steps 1, 2, and 4 are relatively straightforward in terms of the PowerShell code. Build rules to decide which label is best for a team.Find the set of container management labels defined in the tenant.Find the set of teams that don’t have a sensitivity label.Thinking about the steps to do this in a PowerShell script, the following major steps are needed: This requires more effort because each team must be assessed to decide which label is most appropriate. The question recently arose about how to deploy container management labels to an existing set of teams. It’s easy to make sure that new teams receive sensitivity labels. Although team owners can change an assigned sensitivity label, it’s possible to monitor these changes and reapply the original label. My logic is simple: applying a sensitivity label to a team enforces the policy settings from the label such as whether guests can be added to the team membership or what kind of external sharing is allowed. Last year, I suggested that sensitivity labels are a good way to help secure Teams. Taking Advantage of Container Management Labels to Manage Teams Taking Advantage of Container Management Labels to Manage Teams.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |