Unlock-SPOSensitivityLabelEncryptedFile
It removes encryption on a Sensitivity label encrypted file in SharePoint Online. No need to download the file.
Syntax
Unlock-SPOSensitivityLabelEncryptedFile
-FileUrl <absolute path for file>
-JustificationText <needed for auditing> Description
The Unlock-SPOSensitivityLabelEncryptedFile cmdlet runs on a single office online file that is encrypted via sensitivity label. It decrypts the file and removes the label from the file.
You must be at least a SharePoint Online administrator to run the Unlock-SPOSensitivityLabelEncryptedFile cmdlet. This cmdlet doesn't work on files that have double key encryption or files that have encryption but are not processed by SharePoint. These files don't show the name of the label in the Sensitivity column, and you can't edit these files in Office Online.
For permissions and the most current information about Windows PowerShell for SharePoint Online, see the online documentation at Intro to SharePoint Online Management Shell.
Examples
-----------------------EXAMPLE 1-----------------------------
Unlock-SPOSensitivityLabelEncryptedFile -FileUrl "https://contoso.com/sites/Marketing/Shared Documents/Doc1.docx" -JustificationText "Need to recover this file"This example will remove a regular label with admin defined encryption from the file Doc1.docx and also make an entry in audit logs.
Parameters
-FileUrl
Full URL for the file.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
| Applies to: | SharePoint Online |
-JustificationText
Text that explains the reason to run this cmdlet on the given file.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
| Applies to: | SharePoint Online |