Create Policies Using Google Data Classification

In Secure Cloud Access, you apply Google labels:

To apply a specified label or set of labels to files that match certain criteria, you can create Content Digital Rights (CDR) templates that define sets of Google classification labels, and then apply those templates to API Access policies.
To detect which labels a user has applied to a Google Suite file, and take action accordingly on that file, you can create Document Rule Templates that define the Google labels to look for, and then apply those templates to Cloud Data Discovery policies.

Policies to Apply Google Labels to Files

First, create a Document Rule Template as described in New document rule templates.

On the Define Document Rule tab, turn on the Data Classification toggle, select Google as the label provider, and select the appropriate Google account.
Select Badged or Standard from the Type prompt. The relevant labels from your Google account are shown. Select a label you want to use in your policy.
If the label you selected has fields defined, specify the values to detect in the fields, if applicable.
Click the plus sign icon to add additional labels.

You can apply a maximum of five labels to a file. This may be one badged label and four standard labels, or five standard labels.
Specify additional settings for the template if needed.
Click Next and then Save to save the template.

Next, create a policy as described in API policies with DLP Scan or None as the content inspection type.
In the Destinations pane, select the appropriate Google account.
Specify context rules as desired.
On the Action tab, under Content Action, select Content Digital Rights and then select the template that you created in the previous section.
Save the policy.

The labels you configured in the CDR template will be applied to files that match the policy criteria.

Policies to Detect Google Labels on Files

First, create a CDR template as described in Create Content Digital Rights templates.
For the Type, select either Documents With Encryption or Documents Without Encryption.
On the Define Digital Rights tab, select Classification. Select Google as the label provider, and select the appropriate Google account.
Select Badged or Standard from the Label(s) prompt. The relevant labels from your Google account are shown. Select a label you want to use in your policy.
If the label you selected has fields defined, specify the values to apply to the fields, if applicable.

If you leave any of the fields empty, then if a user updates those fields on a particular file, Secure Cloud Access will remove the user’s inputs when honoring the policy.
Click the plus sign icon to add additional labels.

You can apply a maximum of five labels to a file, either one badged label and four standard labels, or five standard labels.
Click Next and then Save to save the template.

Next, create a policy as described in Create a Cloud Data Discovery policy.
In the Destinations pane, select the appropriate Google account.
Specify context rules as desired.
On the Action tab, under Content Action, select Content Digital Rights and then select the CDR template that you created in the previous section.
Save the policy.

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Create Policies Using Google Data Classification

lookout-footer