IRM Policy and Sensitivity Label Workbook Security

If your organization uses Microsoft Sensitivity Labels or IRM (Information Rights Management), you can set a required sensitivity label or IRM Policythat must be set on a workbook to enable Anaplan XL functionality. If the required policy is not set, no new connections can be added, no data will be retrieved and dialogs will not open until the correct security settings have been applied.

Settings

The required security settings are specified using a regular expression in the Admin Controlled settings file which can be deployed with the product. Please refer to the Admin Controlled section on the settings file page. A custom warning message can also be set to display to the user if they try to use Anaplan XL functionality without the required workbook security.


  • For sensitivity labels:
<sensitivitylabelregex></sensitivitylabelregex>
<sensitivitylabelmessage></sensitivitylabelmessage>
  • For IRM Policies:
<irmpolicyregex></irmpolicyregex>
<irmpolicymessage></irmpolicymessage>

After setting an IRM policy, the workbook must be saved for the changes to take effect. Sensitivity label changes will be applied as soon as the label is changed.

Workbook security default message.png

Example

For example, if you want users to:

1) only be able to use Anaplan XL functionality if the workbook has the "Confidential" IRM policy set,

<irmpolicyregex>^Confidential$</irmpolicyregex>
<irmpolicymessage>The workbook protection level does not meet the policies set. Set the workbook protection and save to continue</irmpolicymessage>

2) be able to use Anaplan XL functionality if the workbook has the "Confidential" or "Highly Restricted" IRM policy set,

<irmpolicyregex>^(Confidential|Highly Restricted)$</irmpolicyregex>

3) be able to use Anaplan XL functionality if the workbook has any IRM policy containing the text "Confidential",

<irmpolicyregex>Confidential</irmpolicyregex>