unified sensitivity labels / AIP With Appsheet

Thilina_Wick · 03-01-2022 01:13 AM

Hi all,

I'd like to know if there is a way for appsheet to use excel sheets when the account it is on is part of an organization that uses unified sensitivity labels (Formerly Azure Information Protection - AIP) to encrypt all office files at the time of creation by default - One of my clients have this policy in place at their organization and whether appsheet will work in this scenario or not will make or break the deal.

Thanks in Advanced for any help

Steve

I have no idea. Try it and find out. Let us know what you find.

Thilina_Wick

@Steve I spoke to an AppSheet specialist via internal channels and they had this to say

Quote:

Azure Information Protection (AIP) is a solution that enables organization to classify files and emails by labels and deploy DLP rules leveraging the labels defined to prevent data exfiltration. That being said, the DLP functionality let IT admins choose what each DLP rules does and what it applies to. Therefore, just because AIP is in place at the customer doesn't necessarily mean that all of their data cannot be given access at all. The data protection control with AIP is customizable.

(cf. https://docs.microsoft.com/en-us/microsoft-365/compliance/create-test-tune-dlp-policy?view=o365-worl...)

Secondly, an AppSheet app gains data access to an external storage (such as Google Drive, OneDrive and etc) through an industry-standard authorization framework (OAuth 2.0) upon authorization given by the owner of data that is accessed. What this means is that when you let an AppSheet app access your data stored in OneDrive, you are not sharing your data with an external entity. Instead, you are just authorizing the AppSheet app to access the data in OneDrive on behalf of yourself. So enabling an AppSheet app to access data on OneDrive is not the same thing as sharing data with an external person. Therefore, an AppSheet app gaining data data access to OneDrive through OAuth 2.0 is out of scope of what AIP can protect. Instead, it should be a scope of OneDrive API controls in general. So as long as OAuth integration is permitted for the user by IT admins in the customer's organization, the user should be able to let an AppSheet app access data on OneDrive.