Sneezeweet

EasyLife 365 Collaboration now provides improved handling of sensitivity labels for Microsoft Teams when tenants restrict Microsoft 365 group creation in Entra ID.

In some configurations, sensitivity labels applied during provisioning were correctly enforced on the underlying Microsoft 365 group and SharePoint site, but were not immediately visible in the Teams client. With this update, we are introducing delegated group provisioning to better align with how Teams natively handles labels and to ensure labels become visible more reliably.

What’s new?

Delegated Provisioning for Microsoft 365 Groups (Teams)

EasyLife 365 Collaboration can now provision Microsoft Teams and their underlying Microsoft 365 groups in the context of the requesting user (delegated permissions), rather than only via a service account.

This new capability:

• Aligns the provisioning flow with native Teams creation behavior.
• Improves the visibility of sensitivity labels in the Teams client right after provisioning.
• Requires that the requesting user is not blocked from creating Microsoft 365 groups in Entra ID.

How these updates will affect you?

You are not affected if:

• You do not apply sensitivity labels to Teams during provisioning with EasyLife 365.
• You do not restrict Microsoft 365 group creation in Entra ID (users can create groups).
• You provision Teams using a service account that is allowed to create Microsoft 365 groups.
• You are only provisioning Microsoft 365 groups or SharePoint sites (without creating a Team).

For customers that do rely on sensitivity labels for Teams and have restrictions in place:

• Delegated provisioning will help ensure that sensitivity labels become visible in the Teams client after provisioning.
• To benefit from this, make sure that the users requesting new Teams (or the account used for delegated provisioning) are allowed to create Microsoft 365 groups in Entra ID.