Sensitivity Labels in Microsoft 365: The Admin Setup Guide

Copilot surfaces content your users can already access — which means unprotected "Confidential" files are fair game. This guide walks through the full sensitivity label setup in Microsoft Purview: the tenant prerequisite most admins miss, creating and scoping your first label, configuring encryption and permissions, and publishing a label policy to users. All screenshots from a real Microsoft 365 tenant.