Symptoms

In Microsoft Exchange Online, a user assigns a personal tag from a retention policy that they wouldn’t typically have access to in Outlook Web Access (OWA). The user can then access additional personal tags in both OWA and Microsoft Outlook.

Resolution

To prevent users from seeing the personal tags from different policies and adding the same personal tags in OWA, follow these steps: 

  1. Remove a management role (MyRetentionPolicies) from the default role assignment policy. To do this, run the following cmdlet: 

    Get-ManagementRoleAssignment -RoleAssignee "Default Role Assignment Policy" -Role "MyRetentionPolicies" | Remove-ManagementRoleAssignment

  2. Create a new management role (Custom-MyRetentionPolicies) based on the parent management role (MyRetentionPolicies). To do this, run the following cmdlet:

    New-ManagementRole -Name "Custom-MyRetentionPolicies" -Parent "MyRetentionPolicies"  

  3. Assign a new management role (Custom-MyRetentionPolicies) to the management role assignment Policy (Default Role Assignment Policy). To do this, run the following cmdlet:

    New-ManagementRoleAssignment -Role "Custom-MyRetentionPolicies" -Policy "Default Role Assignment Policy"

  4. Remove the retention policy tags from the Custom-MyRetentionPolicies  role of the management role. To do this, run the following cmdlet: 

    Remove-ManagementRoleEntry "Custom-MyRetentionPolicies\Get-RetentionPolicyTag"

 

 

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Any additional feedback? (Optional)

Thank you for your feedback!

×