Source: Help Net Security
Author: Sinisa Markovic
URL: https://www.helpnetsecurity.com/2026/04/15/microsoft-office-sensitivity-labels-permissions/
ONE SENTENCE SUMMARY:
Microsoft Office for the web now lets users apply sensitivity labels with custom permissions, aligning browser apps with desktop protection capabilities.
MAIN POINTS:
- Update removes a long-standing limitation in web-based document protection workflows.
- Word, Excel, and PowerPoint web apps now set user-defined permissions via sensitivity labels.
- Previously, only pre-protected files were editable in browsers; changes required desktop apps.
- Selecting a user-defined label opens a Permissions dialog within the web app.
- Dialog supports adding specific users or entire domains for access assignment.
- Available roles include Viewer, Editor, and Owner, mapping to Rights Management settings.
- Additional settings include configuring a contact email for access requests.
- Web apps currently lack support for custom permission expiration dates.
- Enforcement continues under existing Purview label policies, encryption, and RMS configurations.
- Deployment requires licensing, SharePoint/OneDrive labeling enabled, and configured user-defined labels.
TAKEAWAYS:
- Browser-only users can now classify and protect documents without switching to desktop Office.
- Consistent UI and terminology reduce friction between web and desktop permission management.
- Security teams should update training and guidance to reflect new in-browser workflows.
- Monitoring remains available through existing Microsoft Purview auditing and reporting.
- Missing expiration-date control may require compensating governance or desktop-based processes.