Syncing Microsoft sensitivity labels

When you sync your organization's Microsoft sensitivity labels to FortiDLP, a policy asset will be created for each label (see Assets), and they will be used to add label names in SharePoint and OneDrive events (see Microsoft SharePoint and OneDrive Connector).

To keep your labels up to date, you must regularly sync them manually or via automatic scheduled syncs.

Sensitivity labels must be published in the Microsoft 365 compliance center to be synced with the FortiDLP Infrastructure. Ensure you complete the steps here before syncing. Each time a sync occurs, existing labels are updated and new labels are added (if applicable).

The FortiDLP Console will indicate when the sync completes, or if an error occurs during the sync.

You can view synced sensitivity labels from:

• the Policies module's Policy assets tab, and
• the Content inspection parameters section of any content inspection policy template (see the Microsoft sensitivity labels list).

Prerequisites

You must first complete credential setup steps in Microsoft credentials.

How to manually sync sensitivity labels

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. Under Integrations > Microsoft, select Sensitivity labels.
3. In the Credentials menu, select a set of credentials.
   
4. Click Sync now.
   
   

How to enable automatic syncing of Microsoft sensitivity labels

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. Under Integrations > Microsoft, select Sensitivity labels.
3. In the Credentials menu, select a set of credentials.
   
4. Click Enable automatic syncing.
   

   A configuration panel will be added to the Automatic syncing section, detailing the name of the credentials, number of labels synced, time passed since the last sync, and date-time of the next sync.

How to disable automatic syncing of Google Drive labels

If you no longer want to automatically sync labels, follow these steps.

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. Under Integrations > Google, select Drive labels.
3. Under the Automatic syncing section, on the top right of the sync configuration panel, click > Remove.
4. In the dialog box, click Remove.