什么是 Azure 信息保护?What is Azure Information Protection?

适用范围:Azure 信息保护Applies to: Azure Information Protection

相关内容:AIP 统一标记客户端和经典客户端Relevant for: AIP unified labeling client and classic client*

Azure 信息保护 (AIP) 是一种基于云的解决方案,可帮助组织通过将标签应用到内容来对文档和电子邮件进行发现、分类和保护。Azure Information Protection (AIP) is a cloud-based solution that enables organizations to discover, classify, and protect documents and emails by applying labels to content.

AIP 是 Microsoft 信息保护 (MIP) 解决方案的一部分,它扩展了 Microsoft 365 提供的标记分类功能。AIP is part of the Microsoft Information Protection (MIP) solution, and extends the labeling and classification functionality provided by Microsoft 365.

下图展示了 Azure 信息保护对 MIP 的附加功能,包括统一标记客户端扫描程序SDKThe following image shows the Azure Information Protection additions to MIP, including the unified labeling client, scanner, and SDK.

Microsoft 信息保护框架的 Azure 信息保护区域

Microsoft 信息保护是 AIP 的统一标记客户端利用的通用信息保护堆栈。Microsoft Information Protection is the common information protection stack that's leveraged by AIP's unified labeling client. 有关详细信息,请参阅 Microsoft 365 文档For more information, see the Microsoft 365 documentation.

备注

有关统一标记客户端的最新功能和公共预览版本的详细信息,请参阅 Azure 信息保护统一标记客户端 - 版本发布历史记录和支持策略For details about the latest features and public preview version of the unified labeling client, see Azure Information Protection unified labeling client - Version release history and support policy.

AIP 统一标记客户端AIP unified labeling client

Azure 信息保护统一标签客户端将标签、分类和保护功能扩展到其他文件类型,以及文件资源管理器和 PowerShell。The Azure Information Protection unified labeling client extends labeling, classification, and protection capabilities to additional file types, as well as to the File Explorer and PowerShell.

例如,在文件资源管理器中,右键单击一个或多个文件,然后选择“分类和保护”以管理所选文件上的 AIP 功能。For example, in the File Explorer, right-click one or more files and select Classify and protect to manage the AIP functionality on the selected files.

文件资源管理器的分类和保护

Microsoft Azure 信息保护下载页下载客户端。Download the client from the Microsoft Azure Information Protection download page.

AIP 本地扫描程序AIP on-premises scanner

借助 Azure 信息保护本地扫描程序,管理员可扫描其本地文件存储库,来发现必须标记、分类和/或保护的敏感内容。The Azure Information Protection on-premises scanner enables administrators to scan their on-premises file repositories for sensitive content that must be labeled, classified, and/or protected.

使用作为统一标记客户端的一部分提供的 PowerShell cmdlet 安装本地扫描程序,并且可以使用 PowerShell 和 Azure 门户中的 Azure 信息保护区域进行管理。The on-premises scanner is installed using PowerShell cmdlets provided as part of the unified labeling client, and can be managed using PowerShell and the Azure Information Protection area in the Azure portal.

例如,使用 Azure 门户上显示的扫描程序数据,查找网络上可能有存在风险的敏感内容的存储库:For example, use the scanner data shown on the Azure portal to find repositories on your network that might have sensitive content at risk:

检查已扫描的网络中是否有存在风险的存储库

有关详情,请参阅:For more information, see:

Microsoft Azure 信息保护下载页面下载扫描程序安装和客户端。Download the scanner installation together with the client from the Microsoft Azure Information Protection download page.

Microsoft 信息保护 SDKMicrosoft Information Protection SDK

Microsoft 信息保护 SDK 将敏感度标签扩展到第三方应用和服务。The Microsoft Information Protection SDK extends sensitivity labels to third-party apps and services. 开发人员可以使用 SDK 生成内置支持,以便为文件应用标签和保护。Developers can use the SDK to build built-in support for applying labels and protection to files.

例如,可以使用 MIP SDK:For example, you might use the MIP SDK for:

  • 向正在导出的文件应用分类标签的业务线应用程序。A line-of-business application that applies classification labels to files on export.
  • CAD/CAM 设计应用程序为 Microsoft 信息保护标记提供内置支持。A CAD/CAM design application provides built-in support for Microsoft Information Protection labeling.
  • 云访问安全代理或数据丢失防护解决方案推断使用 Azure 信息保护加密的数据。A cloud access security broker or data loss prevention solution reasons over data encrypted with Azure Information Protection.

有关详细信息,请参阅 Microsoft 信息保护 SDK 概述For more information, see the Microsoft Information Protection SDK overview.

后续步骤Next steps

若要开始使用 AIP,请下载并安装统一标记客户端和扫描程序。To get started with AIP, download and install the unified labeling client and scanner.

使用以下初始教程熟悉 AIP:Get familiar with AIP using our initial tutorials:

准备好自定义 AIP 后,请参阅管理员指南:Azure 信息保护统一标记客户端的自定义配置When you're ready to customize AIP further, see Admin Guide: Custom configurations for the Azure Information Protection unified labeling client.

若要开始使用 MIP SDK,请参阅 Microsoft 信息保护 (MIP) SDK 安装和配置To get started with the MIP SDK, see Microsoft Information Protection (MIP) SDK setup and configuration.

其他资源Additional resources

资源Resource 链接和说明Links and description
订阅选项和定价Subscription options and pricing Azure 信息保护定价Azure Information Protection Pricing
常见问题解答和已知问题FAQs and known issues 有关 Azure 信息保护的常见问题Frequently asked questions for Azure Information Protection
已知问题 - Azure 信息保护Known issues - Azure Information Protection
支持选项Support options Azure 信息保护的支持选项Support options for Azure Information Protection
YammerYammer Azure 信息保护Azure Information Protection
新增功能What's new? 在 Microsoft 365 和 SharePoint 管理中心中关注与 AIP 相关的新功能:Watch for new features related to AIP in the Microsoft 365 and SharePoint admin centers:
- Microsoft 365 管理中心有哪些新增功能?- What's new in the Microsoft 365 admin center?
- Sharepoint 管理中心中有哪些新增功能?- What's new in the Sharepoint admin center?

排名靠前的 Ignite 会话Top Ignite sessions

请参阅来自 Ignite 2020 的以下录制会话:See the following recorded sessions from Ignite 2020:

AIP 经典客户端AIP's classic client

Azure 信息保护经典客户端是早期版本的 AIP,管理员可以通过它直接在 Azure 门户中管理分类标签。The Azure Information Protection classic client is the earlier version of AIP, and enables administrators to manage classification labels directly in the Azure portal.

在 Azure 门户中管理的 AIP 标签不受统一标记平台的支持,仅限用于 Azure 信息保护客户端和扫描程序以及 Microsoft Cloud App Security。AIP labels managed in the Azure portal are not supported by the unified labeling platform, are limited to working with the Azure Information Protection client and scanner, and Microsoft Cloud App Security.

建议迁移到统一标记以支持这些功能,以及 SharePoint、Microsoft 365 应用、适用于 Web 和移动设备 Outlook、PowerBI 数据保护等。We recommend migrating to unified labeling to support these features, as well as SharePoint, Microsoft 365 apps, Outlook for the web and mobile devices, PowerBI data protection, and more. 有关详细信息,请参阅教程:从 Azure 信息保护 (AIP) 经典客户端迁移到统一标记客户端For more information, see Tutorial: Migrating from the Azure Information Protection (AIP) classic client to the unified labeling client.

备注

为了提供统一、简化的客户体验,Azure 门户中的 Azure 信息保护经典客户端和标签管理将于 2021 年 3 月 31 日弃用 。To provide a unified and streamlined customer experience, Azure Information Protection classic client and Label Management in the Azure Portal are being deprecated as of March 31, 2021.

在此时间框架内,所有当前 Azure 信息保护客户都可以使用 Microsoft 信息保护统一标记解决方案转换到统一标记。This time-frame allows all current Azure Information Protection customers to transition to unified labeling using the Microsoft Information Protection Unified Labeling solution. 有关详细信息,请参阅官方弃用通知Learn more in the official deprecation notice.