Commands › Exchange Online

Execute-AzureADLabelSync

Exchange Online ExchangeOnlineManagement Execute-*

For more information, see Security & Compliance PowerShell. Use the Execute-AzureADLabelSync cmdlet to start the synchronization of sensitivity labels into Microsoft Entra ID. This allows the application of sensitivity labels to Microsoft Teams sites, Microsoft 365 Groups, and SharePoint sites. This cmdlet is required if you were using sensitivity labels before September 2019.

Quick start script

# Execute-AzureADLabelSync — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Execute-AzureADLabelSync | Format-List

# 3. Export for evidence / drift tracking
Execute-AzureADLabelSync | Export-Clixml .\AzureADLabelSync-$(Get-Date -Format yyyyMMdd).xml

Syntax

Execute-AzureADLabelSync [<CommonParameters>]

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.