AvePoint Docs
Graph API
My support tickets
Graph API
My support tickets
English

    Home > Appendices > Information about Managing Sensitivity Labels > Migration Results of Sensitivity Labels

    Export to PDF

    Migration Results of Sensitivity Labels

    Refer to the following sections for the migration results of sensitivity labels in different workspaces and situations.

    Exchange Online Migration

    Refer to the following table for the migration results of sensitivity labels in different situations.

    Source Label TypeIf Source Email has LabelIf Source Attachment has LabelIf Destination Label ExistsMigration resultComment
    EncryptedYesNoNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    EncryptedNoYesNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    EncryptedYesYesNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    EncryptedYesNoYesSuccess. Source email label has been replaced with the destination label, and the attachment has no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    EncryptedNoYesYesSuccess. Migrated email has no label applied, and the attachment label has been replaced with the destination label.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    EncryptedYesYesYesSuccess. Labels of the migrated email and attachment have been replaced with the destination labels.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    Non-encryptedYesNoNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    Non-encryptedNoYesNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    Non-encryptedYesYesNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    Non-encryptedYesNoYesSuccess. Source email label has been replaced with the destination label, and the attachment has no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    Non-encryptedNoYesYesSuccess. Migrated email has no label applied, and the attachment label has been replaced with the destination label.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    Non-encryptedYesYesYesSuccess. Labels of the migrated email and attachment have been replaced with the destination labels.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=2 customized feature string in the migration policy.
    EncryptedYesNoNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    EncryptedNoYesNoSuccess. Migrated email has no label applied, and the source attachment label has been kept.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    EncryptedYesYesNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    EncryptedYesNoYesSuccess. Source email label has been replaced with the destination label, and the attachment has no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    EncryptedNoYesYesSuccess. Migrated email has no label applied, and the source attachment label has been kept.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    EncryptedYesYesYesSuccess. Labels of the migrated email and attachment have been replaced with the destination labels.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    Non-encryptedYesNoNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    Non-encryptedNoYesNoSuccess. Migrated email has no label applied, and the source attachment label has been kept.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    Non-encryptedYesYesNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    Non-encryptedYesNoYesSuccess. Source email label has been replaced with the destination label, and the attachment has no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    Non-encryptedNoYesYesSuccess. Migrated email has no label applied, and the source attachment label has been kept.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    Non-encryptedYesYesYesSuccess. Labels of the migrated email and attachment have been replaced with the destination labels.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=1 customized feature string in the migration policy.
    EncryptedYesNoNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    EncryptedNoYesNoSuccess. Migrated email has no label applied, and the source attachment label has been kept.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    EncryptedYesYesNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    EncryptedYesNoYesSuccess. Source email label has been replaced with the destination label, and the attachment has no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    EncryptedNoYesYesSuccess. Migrated email has no label applied, and the source attachment label has been kept.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    EncryptedYesYesYesSuccess. Source email label has been replaced with the destination label, and the source attachment label has been kept.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    Non-encryptedYesNoNoSuccess. Both migrated email and attachment have no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    Non-encryptedNoYesNoSuccess. Both migrated email and attachment have no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    Non-encryptedYesYesNoSuccess. Both migrated email and attachment have no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    Non-encryptedYesNoYesSuccess. Both migrated email and attachment have no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    Non-encryptedNoYesYesSuccess. Both migrated email and attachment have no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    Non-encryptedYesYesYesSuccess. Both migrated email and attachment have no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForEmailAttachments=0 customized feature string in the migration policy.
    Non-encryptedYesNoNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForNonEncryptedEmails=true and MigrateLabelsForEmailAttachments=0 customized feature strings in the migration policy.
    Non-encryptedNoYesNoSuccess. Both migrated email and attachment have no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForNonEncryptedEmails=true and MigrateLabelsForEmailAttachments=0 customized feature strings in the migration policy.
    Non-encryptedYesYesNoFailed with the error code: EX-LabelNotFound.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForNonEncryptedEmails=true and MigrateLabelsForEmailAttachments=0 customized feature strings in the migration policy.
    Non-encryptedYesNoYesSuccess. Source email label has been replaced with the destination label, and the attachment has no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForNonEncryptedEmails=true and MigrateLabelsForEmailAttachments=0 customized feature strings in the migration policy.
    Non-encryptedNoYesYesSuccess. Both migrated email and attachment have no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForNonEncryptedEmails=true and MigrateLabelsForEmailAttachments=0 customized feature strings in the migration policy.
    Non-encryptedYesYesYesSuccess. Source email label has been replaced with the destination label, and the attachment has no label applied.You select the Apply same label in the destination or Apply labels in the destination based on label mappings option, and configure the MigrateLabelsForNonEncryptedEmails=true and MigrateLabelsForEmailAttachments=0 customized feature strings in the migration policy.

    To migrate sensitivity labels of source emails with the MigrateLabelsForEmailAttachments feature enabled, note the following:

    - Attachments cannot be viewed after the migration in the following situations: - Source email is applied with a non-encrypted label and the attachment is applied with an encrypted sensitivity label, and you configure the **MigrateLabelsForEmailAttachments=0** customized feature string in the migration policy. - Source email is applied with an encrypted label and the attachment is applied with an encrypted sensitivity label, and you configure the **MigrateLabelsForEmailAttachments=0** customized feature string in the migration policy. - Source email has no label applied and the attachment is applied with an encrypted sensitivity label, and you configure the **MigrateLabelsForEmailAttachments=0** customized feature string in the migration policy. - Attachment labels cannot be migrated, or attachments cannot be viewed after the migration in the following situation: - The source email is applied with a Rights Management Services (RMS) label or a sensitivity label of the **Let users assign permissions when they apply the label** type and the attachment is applied with an encrypted label, and you configure the **MigrateLabelsForEmailAttachments=2** and **IsMigrateMIPProtectionTemplateAsLabel=true** customized feature strings in the migration policy. - Attachment labels cannot be migrated in the following situations: - The source email contains a document as an attachment and the attachment is applied with a Rights Management Services (RMS) label or a sensitivity label of the **Let users assign permissions when they apply the label** type, and you configure the **MigrateLabelsForEmailAttachments=1** or **MigrateLabelsForEmailAttachments=2** customized feature string in the migration policy. - The source email is applied with an encrypted label and contains a document with a non-encrypted label applied as an attachment, and you configure the **MigrateLabelsForEmailAttachments=1** or **MigrateLabelsForEmailAttachments=2** customized feature string in the migration policy. - The source email has no label applied and contains an MSG/EML file with a non-encrypted label applied as an attachment, and you configure the **MigrateLabelsForEmailAttachments=2** customized feature string in the migration policy. - The source email is applied with a non-encrypted label and contains an MSG/EML file with a non-encrypted label applied as an attachment, and you configure the **MigrateLabelsForEmailAttachments=2** customized feature string in the migration policy. - The source email is applied with an encrypted label and contains a document with an encrypted label applied as an attachment, and you configure the **MigrateLabelsForEmailAttachments=0** customized feature string in the migration policy. - The source email is applied with an encrypted label and the attachment is applied with a non-encrypted label, and you configure the **MigrateLabelsForEmailAttachments=0** customized feature string in the migration policy. - The source email is applied with a Rights Management Services (RMS) label and contains a document with a label applied as an attachment, and you configure the **MigrateLabelsForEmailAttachments=0** customized feature string in the migration policy. - The watermarks of source email attachments will be kept after the migration. - Some sensitivity labels may not be migrated as expected due to Microsoft API limitations. For details, you can contact AvePoint Support for assistance. - Sensitivity labels of source non-encrypted emails and email attachments can be migrated even if the **MigrateLabelsForNonEncryptedEmails** feature is disabled.

    SharePoint Online / OneDrive Migration

    Refer to the following table for the migration results of sensitivity labels in different situations.

    WorkloadSource Label TypeIf Source File has LabelIf Destination Label ExistMigration Result
    FileEncryptedYesNoFailed with the error code: SP-MIPLabelNotExist.
    FileEncryptedYesYesSuccessful.
    FileNon-encryptedYesNoFailed with the error code: SP-MIPLabelNotExist.
    FileNon-encryptedYesYesSuccessful.
    ListEncryptedYesNoFailed with the error code: SP-MIPLabelNotExist.
    ListEncryptedYesYesSuccessful.
    ListNon-encryptedYesNoFailed with the error code: SP-MIPLabelNotExist.
    ListNon-encryptedYesYesSuccessful.
    SiteEncryptedYesNoFailed with the error code: SP-MIPLabelNotExist.
    SiteEncryptedYesYesSuccessful.
    SiteNon-encryptedYesNoFailed with the error code: SP-MIPLabelNotExist.
    SiteNon-encryptedYesYesSuccessful.

    To verify if sensitivity labels are migrated, make sure the verifier has been assigned permissions to the sensitivity labels and files, and note the following:

    - For sensitivity labels of the **Assign permissions now** type, the verifier needs to open the file via a browser for verification. - For sensitivity labels of the **Let user assign permissions when they apply the label** type, the verifier needs to open the file via the Word app for verification. - If the sensitivity label cannot be seen on the file, the verifier can use the Azure Information Protection application and PowerShell for verification. For details, refer to the **Use the Azure Information Protection Application and PowerShell for Verification** section below. - For PDF files, in addition to use the Azure Information Protection application and PowerShell for verification, you can also use the PDF-compatible readers for verification. Refer to for details.

    Use the Azure Information Protection Application and PowerShell for Verification

    Refer to the following steps to use the application and PowerShell to verify if the sensitivity label has been migrated:

    1. Download the file you want to verify to your local device. The file will be used in subsequent steps.

    2. Click to download the application and install the application on the device where the download file is located.

    3. Right-click Windows PowerShell and click Run as administrator. Enter the following command in the Windows PowerShell window, and press Enter on the keyboard to install the AIPService module for the protection service from Azure Information Protection. Refer to for details.

    4. Install-Module -Name AIPService

    5. Enter the following command, and press Enter on the keyboard to verify if the AIPService module has been installed.

    6. Get-Module -ListAvailable

    7. Enter the following commands to assign the super user role to a user that will be used to retrieve the sensitivity labels applied to the file.

    8. Import-Module AIPService

    9. Connect-AipService -Credential (Get-Credential)

    10. Add-AipServiceSuperUser -EmailAddress " "

    11. Get-AipServiceSuperUser

    12. Disconnect-AipService

      Enter the email address of the user you want to assign the super user role as the attribute of EmailAddress and press Enter on the keyboard. The Microsoft sign in page appears, sign in with a Microsoft 365 Global Administrator account to continue the execution.

    13. Enter the following commands to retrieve the sensitivity labels applied to the file.

    14. Import-Module AIPService

    15. Clear-AIPAuthentication

    16. Set-AIPAuthentication

    17. Get-AIPFileStatus -Path " "

      Enter the full path of the downloaded file as the attribute of Path and press Enter on the keyboard. After the execution, the verification result will be displayed.

      Verification result.

    Microsoft 365 Groups / Microsoft Teams Migration

    Refer to the following table for the migration results of sensitivity labels in different situations.

    WorkloadSource Label TypeIf Source Team/Group has LabelIf Destination Label ExistMigration Result
    Teams / Groups only(Do not migrate team sites by configuring the migrateteamsite=false customized feature.)EncryptedYesNoFailed with the error code: CO-NotMatchMipLabel.
    Teams / Groups only(Do not migrate team sites by configuring the migrateteamsite=false customized feature.)EncryptedYesYesSuccessful.
    Teams / Groups only(Do not migrate team sites by configuring the migrateteamsite=false customized feature.)Non-encryptedYesNoFailed with the error code: CO-NotMatchMipLabel.
    Teams / Groups only(Do not migrate team sites by configuring the migrateteamsite=false customized feature.)Non-encryptedYesYesSuccessful.

    If you also migrate group mailboxes and team sites, refer to the table in Exchange Online Migration for details about labels applied to emails and refer to the table in SharePoint Online / OneDrive Migration about labels applied to files.

    Microsoft Teams Chat Migration

    Refer to the table in SharePoint Online / OneDrive Migration for details about labels applied to files.