How to Set Up Purview Labels in a Playbook and Scan

Overview

Once the Purview Integration has been configured the following must be done:

• Classifications labels must be created
• A playbook must be made
• Scans must be configured so that Purview labels can be applied to sensitive data.
• See Related Articles at the bottom of this page.

This guide helps you walk though that process.

Note: You may need to consult guides on how to create playbooks and scans if you have not done these pieces before.

Creating Classifications for Purview

This section will cover the creating of custom classifications to be used with Purview labels.

1. Navigate to Settings > Global Classifications in the Spirion Console.
2. Select Actions from the top right corner of the screen.
3. Select Add New from the combo box.
   
   
4. Fill out the fields in the Add Classification pop-up box.
5. 1. Name - Make this match the Purview labels with "-Purview" at the end of the classification name. 
   2. • Note: This will be used for reporting
   2. Type - Select a type for this classification
   3. Description - What is this classification for
   4. Assign Icon - (optional) pick an icon for this classification
   5. Assign Color - Pick a color for this classification when displayed in explorer
5. Click Confirm.
   
   
6. 1. The playbook below is looking for SSNs. If one is found, then it performs the following actions:
   2. 1. Labels the file with the SSN (in the database ONLY) with “Public-Purview” (Spirion label)
      2. Applies the Purview label “Public” to the actual metadata of the file itself
         
         

Adding a Label to a Playbook

• For general information about making playbooks see: How to Write a Playbook.
• When adding a label to a playbook the MIP Label box appears to the right of the classification. See the graphic below.
• Make sure to select the matching label to the classification and select Add/Replace label.

1. The playbook below is looking for SSNs and if one is found then the Purview Information Protection Client on an Agent will:
2. • Label the file with the SSN (in the database ONLY) with “Public-Purview” (Spirion label), and,
   • Apply “Public” (Purview label) to the actual metadata of the file
     
     

How to Set up the Purview Information Protection Client on an Agent

To have labels visible on an agent the Purview Information Protection Client needs to be installed.

1. Install the Purview Information Protection Client on machines where the Spirion agent is installed:
2. • Download/Install Link
   • Installation guide/Technical Info - Extend sensitivity labeling on Windows | Microsoft Learn
     
     
     
     
2. Purview client log locations:
3. • \ProgramFiles (x86)\Microsoft Purview Information Protection (64-bit operating systems only)
   • %localappdata%\Microsoft\MSIP
3. To confirm a successful installation and that the client is connected with the Microsoft tenant:
4. 1. Open the Information Protection File Labeler
   2. Click “Help and Feedback.” 
4. This shows the client is connected to the tenant and showing an active Session ID.
   
   
5. To verify the file has been labeled appropriately, open one of the files that contained a match and verify the Purview label associated with the file: