Access Control in Sensitivity Labels

Hi Tiffany Baksh
The behavior you’re seeing is expected. Auto-labeling does not work when the sensitivity label is set to “Let users assign permissions when they apply the label.”

Here’s why:

• Auto-labeling is a system-driven process. When content matches the conditions, Purview automatically applies the label.
• However, if the label is configured to let users decide the permissions at the time of applying, the system cannot auto-apply it - because it doesn’t have the required permissions defined in advance.
• That’s why auto-labeling only works with labels where permissions are already predefined (i.e., “Assign permissions now”).

To enable auto-labeling, you’ll need to configure the label with predefined permissions. If you want user-driven permission assignment, that label will only work when applied manually.

For more details, see Microsoft’s documentation on auto-labeling with sensitivity labels.

Hope this helps. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.