Sensitivity labels are a powerful governance tool, crucial not only for data privacy and compliance but also for enabling effective and secure adoption of AI tools like Microsoft Copilot. By integrating sensitivity labels from the moment a workspace is provisioned, you ensure that data is classified and protected consistently across your organization. To dive deeper into how sensitivity labels enhance your governance strategy, refer to our blog article: Sensitivity Labels: The Governance Tool You're Overlooking.
This article guides you through assigning a pre-existing sensitivity label to your Automate365 templates, which will automatically determine the sensitivity classification applied to all workspaces created from that template.
Sensitivity Labels are configured during the creation/editing of an Automate365 template. To edit these:
Navigate to the template editing wizard (e.g., when creating a new template or modifying an existing one).
In the left-hand navigation of the wizard, click on Classification, then select Sensitivity Labels.
Prerequisites
For sensitivity labels to be available for selection within Automate365, they must meet two essential prerequisites:
Labels must be active in your tenant: If sensitivity labels are not active, you might need to enable them. You can learn how to activate them for use with the BindTuning App by referring to this article: Understanding Your Tenant Status - Activating Sensitivity Labels.
Labels must be created at the tenant level: Automate365 automatically retrieves and lists all sensitivity labels that have been set up in your Microsoft 365 tenant. If you need to create new sensitivity labels, please follow Microsoft's official guidance: Create and publish sensitivity labels.
Note: Only sensitivity labels that are configured at the tenant level and for which you have been granted access will be displayed in Automate365.
Assigning a default Sensitivity Label
Once you're in the Sensitivity Labels section of the template wizard, you'll see a dropdown list of available labels.
From the dropdown menu, select the sensitivity label that you wish to be automatically applied to all new workspaces created from this template.
Allowing user override
Automate365 also provides flexibility by allowing end-users to override the default label if necessary. Check the box labeled "Allow users provisioning the template to set/change sensitivity label."
If this option is enabled, users requesting a new workspace using your template will have the ability to either select a different sensitivity label or choose not to apply any label at all.
Once you've classified your data with sensitivity labels, the next crucial step in data governance is defining its lifecycle. Learn how to automatically apply retention policies to ensure data compliance and proper management from the moment a workspace is created.