Microsoft is updating how admins assign sensitivity label policies with a new targeting experience.
Admins can now choose to:
• include specific users, groups, or adaptive scopes
• exclude selected users, groups, or adaptive scopes
• apply to all users
This makes sensitivity label testing more practical, especially in organizations where label policies are already published tenant-wide.
Admins can pilot new label changes with smaller groups without impacting all users.
Support for non mail-enabled security groups and dynamic Microsoft Entra ID groups also makes phased rollouts easier to manage.
A small update, but a useful improvement for admins working with label governance and policy changes.