Skip to main content
Deutsch
Submit a request
 

How can we help?

Search

Articles in this section
See more

Granting admin consent to enable MIP co-authoring in Office 365

  • Updated

Enabling Microsoft Purview Sensitivity Labels/MIP co-authoring

Prior to proceeding with the following steps, please reach out to our support team to request that MIP co-authoring be enabled for your environment. Once we've confirmed this step is complete, proceed with the following steps.

An administrator can grant consent by visiting the following URL:

https://login.microsoftonline.com/{organization}/adminconsent?client_id=e0661b76-7df1-4940-b656-d3676cb4929a&redirect_uri=https://support.markup.ai/hc/en-us/sections/10211386546962-Microsoft-365-Office

Replace {organization} with your domain name or Azure AD tenant ID

Example URL with organization domain name:

https://login.microsoftonline.com/contoso.onmicrosoft.com/adminconsent?client_id=e0661b76-7df1-4940-b656-d3676cb4929a&redirect_uri=https://support.markup.ai/hc/en-us/sections/10211386546962-Microsoft-365-Office

Required Permissions

The Acrolinx app registration requires the following Microsoft Graph API permissions:

  • User.Read (Delegated)

  • Files.Read.All (Delegated)

  • SensitivityLabel.Read (Delegated)

These permissions are configured in the Entra ID app registration (multi tenant) and granted admin consent.

Summary Table

Property

 

Required

 

Type

 

Example Value

 

Description

 

mip_prevent_empty_labels

Yes

boolean

"true"

Block check if no label is applied

mip_accepted_labels

Yes

string

"Confidential;Internal"

Accepted label names (semicolon-separated)

mip_coauthoring_enabled

No

boolean

"true"

Enable co-authoring/Graph API label fetching
  • Both mip_prevent_empty_labels and mip_accepted_labels must be set to enable label identification and protection. If either is missing, MIP label enforcement will not be active.
  • If co-authoring for files is enabled in your M365 tenant, but mip_coauthoring_enabled is set to false, Acrolinx cannot determine the document's label. In this case, the document is treated as if it has no label.
  • If co-authoring is enabled in your M365 tenant, but the file is stored locally (not linked to SharePoint or OneDrive), the file will not have any labels by definition.