Add or remove a label to or from an Azure Information Protection policy
Applies to: Azure Information Protection
Relevant for: Azure Information Protection classic client for Windows. For the unified labeling client, see Learn about sensitivity labels from the Microsoft 365 documentation.
Note
To provide a unified and streamlined customer experience, we are sunsetting the Azure Information Protection classic client and Label Management in the Azure Portal as of March 31, 2021. No further support is provided for the classic client, and maintenance versions will no longer be released.
- The classic client will be fully retired, and will stop functioning, on March 31, 2022.
- As of March 18, 2022, we are also sunsetting the AIP audit log and analytics, with a full retirement date of September 31, 2022.
The content in this article is provided to support customers with extended support only. For more information, see Removed and retired services.
After you create an Azure Information Protection label, you can then add it to a policy so that it is available for users. If the label is for all users, add the label to the global policy. If the label is for a subset of users, add the label to a scoped policy. A label can be added to only one policy.
To add a sublabel, its parent label must be in the same policy, or in the global policy. When you add a sublabel, settings from the main label are not inherited. For users who are assigned the sublabel in their policy, the main label is supported only as a display container for the name and color. In this scenario, other configuration settings in the main label are not supported for visual markings, protection, and conditions. Although you can still configure them, those settings in the main label are supported only for users who have the main label in their policy without the sublabel.
For labels that are already in a policy, you can remove them from the policy. This action does not delete the label. It remains available to be used in another policy.
If you haven't yet created the label, see How to create a new label for Azure Information Protection.
If you need to create a scoped policy so that the label applies to a subset of users, see How to configure the Azure Information Protection policy for specific users by using scoped policies.
To add or remove a label to or from a policy
If you haven't already done so, open a new browser window and sign in to the Azure portal. Then navigate to the Azure Information Protection pane.
For example, in the search box for resources, services, and docs: Start typing Information and select Azure Information Protection.
From the Classifications > Policies menu option: On the Azure Information Protection - Policies pane, select Global if the label to add or remove applies to all users.
If the label to add or remove applies to a subset of users, select your scoped policy instead.
On the Policy pane, select Add or remove labels.
On the Policy: Add or remove labels pane, you see all your labels with a checkbox selected if they are already in a policy, and the corresponding policy name in the POLICY column.
Sublabels display as indented. In a scoped policy, labels that are inherited from the global policy display as unavailable.
Do one or more of the following actions, and then click OK:
To add a label, select it, which adds a selected checkbox.
To remove a label, clear its checkbox.
To save your changes, click Save.
Your changes are automatically available to users and services. There's no longer a separate publish option.
Next steps
For more information about configuring your Azure Information Protection policy, use the links in the Configuring your organization's policy section.