files as inputs to Alteryx that have been protected with either Azure Information Protecti

[Nicholas_Bignell]

Enable files as inputs to Alteryx that have been protected with either Azure Information Protection (AIP) or Microsoft Information Protection (MIP)

From: Alteryx Support <support@alteryx.com>
Sent: 04 February 2022 22:43
To: candice.darcybryant@alteryx.com
Cc: Sundaramoorthy, Nishanth-XT <nishanth.sundaramoorthy@ubs.com>; clientsvcs@alteryx.com; Bignell, Nicholas <nicholas.bignell@ubs.com>; chiggins@alteryx.com; Jaganathan, Prasanth-Ram <prasanth-ram.jaganathan@ubs.com>
Subject: [External] Case #00528349 - Fw: Azure Information Protection (AIP) or Microsoft Information Protection (MIP) [ ref:_00DE0JJZ4._5002R1On7Ru:ref ]

Hi Candice,

Thanks for reaching out. At this juncture, formal validation of data sources with AIP or MIP applied has not been conducted. Coincidentally, earlier this week, another user submitted an inquiry pertaining to Sensitivity Labels of MIP. They had observed that files with their organization's "Confidential" label applied were unable to be input within workflows.

Similar to password protected or encrypted files, Sensitivity Labels (and other AIP/MIP implementations) may be configured in a manner that prevents drivers (e.g. Excel) of Designer from reading the file. For any incompatibility that's observed within data sources with AIP or MIP applied, it's recommend to submit an Idea as to the Designer application supporting the scope of these implementations. Our Product and Engineering Teams actively monitor Ideas to help ensure we're delivering the best product experience to our users.

Thanks for writing in.

Best,

–Josh
Sr. Customer Support Engineer | Alteryx
 

You may be selected to participate in a short feedback survey. Any comments regarding your experience will help to ensure we're delivering the best support. Thanks!

--------------- Original Message ---------------
From: Candice D'Arcy-Bryant [candice.darcybryant@alteryx.com]
Sent: 2/4/2022 1:59 AM
To: clientsvcs@alteryx.com
Cc: nishanth.sundaramoorthy@ubs.com; nicholas.bignell@ubs.com; chiggins@alteryx.com; prasanth-ram.jaganathan@ubs.com
Subject: Fw: Azure Information Protection (AIP) or Microsoft Information Protection (MIP)

Hi Support,

Please could you provide the options we have for files protected with either Azure Information Protection (AIP) or Microsoft Information Protection (MIP) to be used as inputs to Alteryx?

Please let us know if you require additional information.

Many thanks,

Candice D’Arcy-Bryant  

Strategic Customer Success Manager | +44 (0) 7872 959 067 

ca?ndice.darcybryant@alteryx.com | alteryx.com

Upcoming Out of Office:

February 07-11, 21-25

*******************************************************************************************************************

Alteryx UK Ltd is a company registered in England and Wales with company number 08806138.  Its registered office is located at 5 New Street Square, London EC4A3TW.  

This email and any files transmitted are for the sole use of the intended recipient(s) and may contain confidential and privileged information.  Any unauthorized use or disclosure is prohibited.  If you have received this email in error and are not an intended recipient, please contact the sender and remove it from your system.

*******************************************************************************************************************

From: Bignell, Nicholas <nicholas.bignell@ubs.com>
Sent: 03 February 2022 10:15
To: Candice D'Arcy-Bryant <candice.darcybryant@alteryx.com>
Cc: Sundaramoorthy, Nishanth-XT <nishanth.sundaramoorthy@ubs.com>; Jaganathan, Prasanth-Ram <prasanth-ram.jaganathan@ubs.com>; Craig Higgins <chiggins@alteryx.com>
Subject: RE: Azure Information Protection (AIP) or Microsoft Information Protection (MIP)

Hi Candice.

Seems there is an internal programme to implement this.

I have been contacted by three teams so far in the IB,  IB FX trading and IB Operations and IB Risk management.

In terms of potential impact it could be bank wide, but seems to be starting with the IB since November last year.

The program site (called DRM internally) states:

The Digital Rights Management (DRM) solution helps us manage data more effectively by putting a 'digital lock' on highly sensitive files. This means that even when a file is lost by accident, the external person who finds it cannot access its contents. These DRM classified and protected files can still be accessed and edited internally by UBS employees.

After a file has been classified according to its level of sensitivity DRM will automatically encrypt files if they are classified as 'confidential' or 'strictly confidential'. The classification and protection of a file can be set manually, or is automatically set for downloads of reports from applications that contain sensitive information or for users that have access to CID from specific applications (see details in the DRM guideline).

DRM is available globally in UBS.

Thanks Nick

From: Candice D'Arcy-Bryant <candice.darcybryant@alteryx.com>
Sent: 03 February 2022 09:32
To: Bignell, Nicholas <nicholas.bignell@ubs.com>
Cc: Sundaramoorthy, Nishanth-XT <nishanth.sundaramoorthy@ubs.com>; Jaganathan, Prasanth-Ram <prasanth-ram.jaganathan@ubs.com>; Craig Higgins <chiggins@alteryx.com>
Subject: [External] Re: Azure Information Protection (AIP) or Microsoft Information Protection (MIP)

Hi Nick,

Yes, I'm enquiring internally and will get back to you as soon as I have some information.

In the meantime, it would be good to understand:

• Who is impacted by this issue?
• What the impact is?
• Where in the business this is being felt the most?
• How many users / workflows are affected by this?
• When did this first start to affect users / workflows?

Many thanks,

Candice D’Arcy-Bryant  

Strategic Customer Success Manager | +44 (0) 7872 959 067 

ca?ndice.darcybryant@alteryx.com | alteryx.com

Upcoming Out of Office:

February 07-11, 21-25

*******************************************************************************************************************

Alteryx UK Ltd is a company registered in England and Wales with company number 08806138.  Its registered office is located at 5 New Street Square, London EC4A3TW.  

This email and any files transmitted are for the sole use of the intended recipient(s) and may contain confidential and privileged information.  Any unauthorized use or disclosure is prohibited.  If you have received this email in error and are not an intended recipient, please contact the sender and remove it from your system.

*******************************************************************************************************************

From: Bignell, Nicholas <nicholas.bignell@ubs.com>
Sent: 03 February 2022 08:48
To: Candice D'Arcy-Bryant <candice.darcybryant@alteryx.com>
Cc: Sundaramoorthy, Nishanth-XT <nishanth.sundaramoorthy@ubs.com>; Jaganathan, Prasanth-Ram <prasanth-ram.jaganathan@ubs.com>
Subject: Azure Information Protection (AIP) or Microsoft Information Protection (MIP)

Hi Candice

Can you investigate what options we have for users that want use files as inputs to Alteryx that have been protected with either Azure Information Protection (AIP) or Microsoft Information Protection (MIP)

Thanks Nick

ref:_00DE0JJZ4._5002R1On7Ru:ref

[elsastark]

We are also needing our outputs to apply a data sensitivity label as well. 

[AishwaryaDevaraj]

Hi Alteryx Team,

My vote for this issue.

• We demonstrated the issue and confirmed that the feature - reading MS Excel files with sensitive labels - is not natively built into the product. 

After having a discussion with the internal team, the feature is not yet considered in the pipeline of the product. I would suggest voting the existing idea on the Community portal, to include the feature to be added in the future release along with the use-case

[brendan_gunn]

Agree with @elsastark that the ability to add a sensitivity label to an output Excel file should be included.

[brette]

Ideally it should go further to include the render tool as well as output tool so other formats can also have a sensitivity label applied.

[tyasui]

Our company is facing the same issue, and we're hoping for a resolution...!

[pam_diamond]

Has there been any update to this?  I have a workflow that outputs dozens of files that are then fed into another third party application.  Because of the sensitivity label, we are having to open each output file, apply the label, then re-save the file before feeding into the other system.  Is there a way to leverage the Azure Information Protection unified labeling client to set the sensitivity label for all of the output files somehow?

[brette]

I've done a work around at least for XLSX files by using python and copying a sensitivity label from a template file into the output file as the very last action of a workflow (or group of).  it gets around the problem but does mean that you need a template for each sensitivity label you need and also need to know what label gets applied to what output file.  its all doable but not the most efficient.  Fortunately for me so far i've only needed to do with XLSX so far and have not had to branch into other formats.  Certainly a certified inbuilt Alteryx solution would be better and more efficient.

[pam_diamond]

How do you copy the sensitivity label?  I would be applying the same label to all of the output files, and they are all in .xlsx format.

[brette]

The following can be used in a workflow to add a label to an XLSX that has been created using Alteryx, just drop it into a python tool

It takes 2 inputs the first one is a template file that contains the label to be applied.  it just needs to be a blank XLSX with the label applied.  The 2nd input is the file that need to have the label applied to it (eg a file that was created in Alteryx).  Both inputs are just the full path of each file in question and make shure you only pass the full path without any sheet names etc.

#################################
# List all non-standard packages to be imported by your
# script here (only missing packages will be installed)
from ayx import Package
Package.installPackages(['pandas','xlwings'])


#################################
# Setup input and enable libraries
from ayx import Alteryx
import xlwings as xw
import pandas as pd



#################################
# Import Data from Alteryx
df1 = Alteryx.read("#1")
templatepath1 = df1.iat[0,df1.columns.get_loc("template")]
df2 = Alteryx.read("#2")
templatepath2 = df2.iat[0,df2.columns.get_loc("template")]


#################################
# Get the AIP copied and saved
df = pd.DataFrame(index=[],columns=['AIPSet'])
#open XLSX files
with xw.App(visible=False) as app:
wb1=xw.Book(templatepath1)
wb1.read_only=True
wb2=xw.Book(templatepath2)

#get the label from our template
labelinfo1 = wb1.api.SensitivityLabel.GetLabel()
labelinfo1.LabelId
labelinfo1.LabelName
labelinfo2 = labelinfo1

#set AIP based on the template file
labelinfo2 = wb2.api.SensitivityLabel.CreateLabelInfo()
labelinfo2.AssignmentMethod = 2
labelinfo2.Justification = 'init'
labelinfo2.LabelID = labelinfo1.LabelId
labelinfo2.LabelName = labelinfo1.LabelName
wb2.api.SensitivityLabel.SetLabel(labelinfo2,labelinfo2)

#save the updated file
df = df.append(pd.Series([templatepath2],index=df.columns),ignore_index=True)
wb2.save()
wb1.close()
wb2.close()

# send output back to Alteryx
Alteryx.write(df,1)


#################################