Unassigning labels

There are various methods for unassigning custom labels from users and nodes, as detailed below.

You can also remove directory labels from users by disabling/deleting the associated directory label mappings. Note that deleting a mapping will remove all associated labels from users.

How to unassign custom labels from a single entity

1. In the FortiDLP Console, on the left-hand sidebar, click to unassign labels via the Users module or click to unassign labels via the Nodes module.
2. Filter for the relevant entity. For guidance, see Users or Nodes.
3. On the table row of the entity, click> Edit labels.
   
4. In the Edit labels dialog box, do the following:
   1. Deselect one or more labels to remove.
   2. Click Assign labels.

Node labels can also be updated from the Node profile page.For details, see Viewing the Node profile page.

How to unassign custom labels from multiple entities

1. In the FortiDLP Console, on the left-hand sidebar, click to unassign labels via the Users module or click to unassign labels via the Nodes module.
2. Filter for the relevant entities so that only those you want to unassign labels from are in view. For guidance, see Users or Nodes.
3. On the top-right corner of the page, click> Unassign labels. (In the Nodes module, you will need to be in either the Aggregations or Table tab.)
   
4. In the Unassign labels from all entities dialog box, do the following:
   1. Deselect one or more labels to remove.
   2. Click Unassign labels.

How to unassign an Entra ID directory label

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. Select the Directory tab.
3. In the Entra ID section, select the panel of the relevant directory.
4. In the Label import section, click the User properties or Group memberships menu and deselect the checkbox of the property you want to remove.
   
5. Click Save and sync.

How to unassign an LDAP directory label

To unassign an LDAP directory label, you must delete the related directory label mapping in your configuration file and then sync your directory using the LDAP Sync Tool.

Any unwanted, previously generated directory labels will require deleting after the sync. For instructions, see Deleting labels.