---
name: Teams Meeting Label Inheritance Check
description: "Verifies Teams recordings, transcripts, and Loop notes inherited the meeting's Purview sensitivity label, flagging unlabelled artefacts and downgrades."
---

# Teams Meeting Label Inheritance Check

> **TL;DR:** This skill scans Teams meeting recordings, transcripts, and Loop notes over a review window and verifies each artefact inherited the meeting's sensitivity label, flagging anything stored unlabelled, downgraded, or in an unexpected location.

## How does the Teams Meeting Label Inheritance Check skill validate Purview label propagation?

This skill verifies that every Microsoft Teams meeting artefact created in the review window carries the Microsoft Purview sensitivity label assigned to its parent meeting. It enumerates meetings with their labels, locates each recording, transcript, and Loop note, and compares the applied label against the parent. It flags unlabelled artefacts, label downgrades, and artefacts stored outside the organiser's OneDrive or expected channel location. It supports Essential Eight ML2 evidence for data classification controls extended to collaboration outputs.

## When should you run this skill?

- "Check meeting recordings for label inheritance"
- "Audit Teams meeting artefact labels"
- "Validate Purview label propagation for meetings"
- "Find unlabelled meeting recordings or transcripts"

## How this skill works, step by step

1. Set the review window (default: previous 30 days)
2. Enumerate Teams meetings in scope with their assigned sensitivity label
3. For each meeting locate the recording, transcript, and Loop notes artefacts
4. Compare each artefact's applied label against the parent meeting label
5. Flag missing labels (unlabelled artefacts)
6. Flag downgrades (artefact label is less restrictive than the meeting label)
7. Flag artefacts stored outside the organiser's OneDrive or expected channel location
8. Produce the table below

## Output format

| Meeting | Organiser | Meeting Label | Artefact | Artefact Label | Status |

Followed by a summary:

- Meetings reviewed: N
- Artefacts unlabelled: N
- Label downgrades: N
- Storage location anomalies: N

## Scope and safety

Read-only — metadata and label state only. This skill does NOT:

- Apply or correct labels (read-only)
- Delete or move artefacts
- Access meeting content beyond metadata and label state

## Licensing and permissions

### Licences and add-ons

| Capability used | Minimum licence |
| --- | --- |
| Purview sensitivity labels and label policies | Microsoft 365 E3 |
| Automatic labelling and container (Teams meeting) label inheritance | Microsoft 365 E5 or E5 Compliance |
| Unified audit log reads for artefact and label events | Microsoft 365 E3 (E5 for long retention) |

### Least-privilege roles

- Global Reader — read-only visibility of meetings, artefacts, and label state
- Compliance Data Administrator — read access to Purview label policies and configuration

### Microsoft Graph permissions (read-only)

- `InformationProtectionPolicy.Read.All` — reads the sensitivity label definitions and policy configuration applied to meetings and artefacts
- `AuditLog.Read.All` — reads unified audit events for label application, downgrades, and artefact storage location
- Label policy authoring and inheritance settings are configured in the Microsoft Purview portal, and supporting checks can be run with the Security and Compliance PowerShell module rather than through Microsoft Graph

## Sources and compliance

- Sensitivity label inheritance for Teams meeting artefacts reached GA in May 2026
- Supports E8 ML2 evidence relating to data classification controls extended to collaboration outputs
- Reference: [https://learn.microsoft.com/en-us/purview/sensitivity-labels-teams-groups-sites](https://learn.microsoft.com/en-us/purview/sensitivity-labels-teams-groups-sites)
- Pair with Purview Label Coverage Check for tenant-wide labelling baseline
- Output in Australian English