Label within AIP/ARM can be used to restrict sharing with external users. But is there a way to do the opposite?

So I would like to allow users to share specific files when a certain label is added. For instance, when added 'Public' as a label the user most be allowed to share this file with a non-tenant-user?

Any heads up in a good direction?


1 Answer 1


In SharePoint 2010 platform workflow, there is action called "Replace item level permission " in Impersonation step, it will stop inheriting all parent permission to current item, and assign new permission to current list item.

You can create SharePoint 2010 platform workflow from SharePoint Designer, use if condition to judge if a certain label is added, then "Replace item level permission" for users on current item.

Choose start the workflow automatically when an item is created/modified.

For more detailed information, refer to the article about using a Workflow to remove or change document permissions:



Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.