Apply sensitivity label automatically using Power Automate in SharePoint

[HabiburRahaman]

Hi,

We know that we can apply sensitivity label manually document stored in the SharePoint library, however, we are exploring how we can apply sensitivity label automatically based on certain metadata conditions using the Power Automate.

Is there any Power Automate reference using which we can apply sensitivity label to a document when uploading a file in the SharePoint document library?

Thanks,

[Guriga]

Why do you want to do this with Power Automate?

If you have A5/E5 licence you can set a policy for it.

[HabiburRahaman]

We have limitations on this, we have E3 license and we don't want to upgrade it, and as per Microsoft with the E3 license, we can apply a sensitivity label through the Power Automate. 

[Guriga · Accepted solution]

Check this link:

https://docs.microsoft.com/en-us/defender-cloud-apps/azip-integration

and this:

https://www.linkedin.com/pulse/programatic-way-apply-sensitivity-label-file-sanjoyan-mustafi

I didn't test it so I don't know it's really working or not.

[HabiburRahaman]

I am following the above mentioned LinkedIn article but getting the below error:

{
 "status": 400,
 "message": "Unexpected response from the service\r\nclientRequestId: df53c516.........\r\nserviceRequestId: 6e7c23a3.........",
 "error": {
  "message": "Unexpected response from the service"
 },
 "source": "sharepointonline-ne.azconn-ne.p.azurewebsites.net"
}

It seems this API

"https://<foo_domain>.sharepoint.com/_api/v2.1/drives/<driveID>/items/<docID>/setsensitivityLabel"

is not available to all the tenants. But how to ensure or verify whether this API is available in our tenant?

[Guriga]

Did you fill in the required fields?
<foo_domain>,<driveID>,<docID>

[HabiburRahaman]

Yes, I did.

[HabiburRahaman]

Is anyone following this question? I am getting the API not found error in the postman tool. Many people say that they are also not successfully able to test this API as this endpoint is not globally deployed yet, only available in the specific tenants. Could anyone have some words about this API (setsentivitylabel) public availibity(when will be deployed to all tenants)?

[VictorIvanidze]

Try to use GRAPH API instead. Here is a starting point: https://docs.microsoft.com/en-us/answers/questions/681331/set-sensitivity-label-on-mail-message-usin...

[SibinLeo]

Can you have any reference document for applying sensitivity label to document using power automate

[VictorIvanidze]

Did you use the link I've mentioned earlier?

[js6]

We want to auto-label based on file metadata.  Don't think that is possible, is it?

[js6]

I'm also attempting to use the solution provided in linkedin https://www.linkedin.com/pulse/programatic-way-apply-sensitivity-label-file-sanjoyan-mustafi

As mentioned above, the API method to dot he update - "https://<foo_domain>.sharepoint.com/_api/v2.1/drives/<driveID>/items/<docID>/setsensitivityLabel"

This solution shows using drive GUID and file eTag from Send HTTP request to sharepoint.  Wonder if that is necessary to use the GUIDs in the POST method to update the sensitivity label and if we can't instead use the numeric drive id (not sure what other node would give this) and file id you'd get from get file properties node.

I am also getting success message for some files but when I look at the sensitivty column in sharepoint, it's not updated. although, if i open the file, i see the label set.

then, i'm also getting error similar to user mentioned above:

"status": 400,

  "message": "Unexpected response from the service\r\nclientRequestId: 

  "error": {

    "message": "Unexpected response from the service"

Lastly, the parse json for the send http request to sharepoint body auto-pops the fields as variables for reference but when i reference some fields they come back as null despite visibly seeing the id in the raw output.