Data Protection Issues

Fix Cannot Set Default Sensitivity Label in SharePoint Library

Maira Mehtab Sep 22, 2026 869 views

Question details

The user is unable to configure a default sensitivity label for a SharePoint document library because the setting option is missing from the interface, despite the label being published and visible elsewhere.

Product: Microsoft SharePoint
Device & OS: not provided
Scenario: Setting up default data protection and sensitivity labels for files stored in a Microsoft 365 SharePoint document library.
Observed behavior: The Default Sensitivity Label setting is completely missing from the SharePoint library settings, even with required licenses and AIP integration enabled.

Before you start

Ensure you have SharePoint Administrator or Global Administrator privileges and verify that your Microsoft 365 tenant holds the required licensing (such as E5 Compliance or SharePoint Advanced Management) for default sensitivity labels.

Solution 1Recommended

Verify Label Capabilities using PowerShell

Check if the sensitivity label has the required capabilities and lacks unsupported encryption settings that prevent it from being used as a default in SharePoint.

SharePoint requires specific label capabilities to apply them as defaults. Certain encryption configurations, like 'EncryptOnly', might prevent the label from appearing in the library settings.

Connect to PowerShell

Open PowerShell as an Administrator and connect to the Security & Compliance module.

Run capability check command

Execute the following command to review your labels: Get-Label | Select Capabilities, DisplayName

Review encryption settings

Check the output to ensure the label is compatible with SharePoint files and does not contain unsupported encryption parameters that block its usage.

Solution 2

Create a New Label and Allow Replication Time

Sometimes policies take a significant amount of time to replicate across Microsoft 365 services. Creating a fresh label forces a new sync.

Solution 3

Verify Tenant Configuration and Contact Support

If licensing and labels are correct but the option remains missing, verify integration settings and escalate the issue to Microsoft 365 Support.

Free Microsoft Office alternative

Looking for a Hassle-Free Office Suite? Try WPS Office

While SharePoint and Microsoft 365 sensitivity labels require complex tenant configurations and premium licenses, you can manage and protect your daily documents locally and securely with WPS Office. It provides an intuitive, lightweight alternative that is highly compatible with Microsoft Office formats.

1. Download WPS Office: Download and install WPS Office for free from the official website.
2. Open existing files: Open your standard Microsoft formats (like .docx, .xlsx, .pptx) directly in WPS Office without losing formatting.
3. Protect your documents: Navigate to the 'Protect' or 'Review' tab to encrypt your documents with secure passwords before sharing.

Fully compatible with Microsoft Word, Excel, and PowerPoint file formats for seamless sharing.Built-in document encryption and password protection features to easily secure sensitive local data.Lightweight and fast installation with a familiar, easy-to-navigate user interface.Free to download and use for your essential personal and business productivity needs.

microsoft office alternative - wps office

Frequently Asked Questions

Why is the Default Sensitivity Label option missing in my SharePoint library?

This option may be missing if your Microsoft 365 tenant lacks the required premium licensing (like SharePoint Advanced Management), if the label has incompatible encryption settings, or if the compliance policy hasn't fully replicated across your tenant yet.

How long does it take for a new sensitivity label to appear in SharePoint?

It can take up to 24 hours for a newly created and published sensitivity label to replicate fully across all Microsoft 365 services and appear as an available option in SharePoint settings.

What PowerShell command checks sensitivity label capabilities?

You can check label capabilities by connecting to Security & Compliance PowerShell and running the command: Get-Label | Select Capabilities, DisplayName.

Can I use Microsoft Purview sensitivity labels on files created in WPS Office?

Yes, documents created in WPS Office and saved in standard Microsoft formats (such as .docx or .xlsx) can be uploaded to SharePoint, where Microsoft 365 sensitivity labels and data loss prevention policies can be applied to them.

Microsoft Office Security Issues