Microsoft Purview Sensitivity Labels: Sensitivity label grouping modernization coming this fall (?)

on
There is a change coming to Microsoft Purview Information Protection that simplifies sensitivity label architecture. The goal is to make label management easier, more scalable, and less rigid for organizations. The new model will only include standalone labels and sublabels. Parent labels will be replaced by label groups, which act as organizational containers. These groups cannot be applied to content and have no actions or scope, but they retain color and priority for visual organization. Hopefully, this change will make it much easier to move labels around and make other changes in production: for example, converting a standalone label into a sublabel or moving sublabels between groups without breaking dependencies.  From my experience, this update solves one of the biggest challenges in large environments: rigid label hierarchies. The new dynamic model gives admins the agility they need to adapt quickly as compliance and business needs evolve. For admins, migration will be quic...

Two more examples for get-userandpolicy

on
I just wanted to show to more examples of how I use the get-userandpolicy script.

In my previous post I showed how to identify specific policies and their associated users. There is another switch included in the script, and that is the "allpolicy" switch. This switch will list a complete set of policies a user object can be assigned to.


Combining the "allpolicy" and "listpolicy" can give you a complete overview over all your policies and how they are used. Be cautious when running this in a large deployment, as it can take some time to count the number of users of each policy (as it is currently querying using the "get-csuser" command for each policy count).


The script can be downloaded here: http://gallery.technet.microsoft.com/Get-UserandPolicy-2b8f9873