Microsoft SC-400 Certification

A Microsoft Teams Administrator can amend or chose a sensitivity label from within the admin center. Once you have selected a team and navigated to the settings, the label can be chosen or changed for the team:

1. Go to the Microsoft Teams Admin Center via the Microsoft 365 admin center, as shown in the following screenshot:

Figure 5.11 – Microsoft Teams Admin Center

2. From within the Microsoft Teams Admin Center, go to Teams > Manage Teams.

3. Choose the checkmark to the left of any current team that you wish to apply the published sensitivity label to.

4. Click on Edit, select Sensitivity, and then chose the label you want for the team.

You now know how to edit sensitivity labels from a SharePoint site and a Microsoft Teams channel. In the next section, we will look at creating controls for sensitivity labels.

Creating controls for sensitivity labels from within Microsoft Teams

When a sensitivity label is made with a group and site setting and the member has an Azure AD P1 license, it’s possible to control the creation of Microsoft Teams with sensitivity labeling:

1. Navigate to the Microsoft Teams desktop application client.
2. Select Join or create a team from the bottom-left menu:

Figure 5.12 – Creating or joining a new Microsoft Teams chat

3. Chose Create Team.

4. You will now need to select a team template.

5. Choose a published sensitivity label.

6. Choose the Privacy option. Please note that these options are set within the sensitivity label.

7. Enter an appropriate team name and description.

8. As an option, you can choose team members who should have secure access to the team.

9. Click Close.

Setting the sensitivity label from the SharePoint site wizard (user)

You have the option of selecting a sensitivity label from within the default wizard when setting up a new SharePoint site. Please be aware that this is only available when the feature is active and enabled. You can choose the relevant label under the topic Sensitivity, as described in the following steps:

1. Navigate to the SharePoint Admin Center via the Microsoft 365 admin center:

Figure 5.13 – Navigating to the SharePoint Admin Center

2. Go to Sites > Active sites and select Create.

3. Choose the applicable design and insert a relevant site name and group owner in the appropriate fields.

4. Choose the Published sensitivity label and then click on Finish to create the SharePoint site:

Figure 5.14 – Published sensitivity label

Employing a label for a pre-existing SharePoint site

You can apply or change a sensitivity label if a SharePoint site is already deployed. This option is shown under site information for site admins only. The following steps describe how you can achieve this:

1. Browse to your existing SharePoint online site.
2. Choose the Setting icon (gear/cog icon) in the top-right corner of the screen.
3. Browse to Site Information.
4. Select Sensitivity label and then click Save.

So far, in the Creating and managing sensitivity labels and applying sensitivity labels to Microsoft SaaS applications section of this chapter, we have discussed applying sensitivity labels to new teams, existing teams, new SharePoint sites, and existing SharePoint sites. To complete this section of the chapter, we will discuss how to apply and change a label to a Microsoft Teams team as a user with a life cycle.

Applying and changing a label to a Microsoft Teams team as a user with a life cycle

If you are a Microsoft Teams owner, you have permission to amend the label of a team to handle the life cycle:

1. From inside the Teams application, browse to Teams.
2. Select your team from within the list.
3. Click on […] > Edit team.
4. Configure Sensitivity label and then click on Done.

At this stage of the chapter, you should understand how to identify roles, the different role groups available within the Security and Compliance Center, and how to apply security labels to Microsoft 365 SaaS applications. In the next section of the chapter, we will look at automatic labeling and monitoring label usage.