MWPRO IMPACT SCORE
OPERATIONAL IMPACT
37
0
25
50
75
100
MODERATE IMPACT • ASSESS BUSINESS IMPACT
Recommended Action:
Take a look and decide whether this affects your tenant, users or support teams.
Take a look and decide whether this affects your tenant, users or support teams.
What is MWPro Impact Score?
Watch our 60‑second explainer
Primary Audience
Microsoft 365 AdminsSharePoint AdminsTeams AdminsCompliance TeamsSecurity TeamsIT ManagersService Owners
Why this score?
AI Confidence
HIGH
Enough detail is available to trust this assessment.
Assessment Reasoning
This is a new feature that allows users with editing permissions to annotate sensitivity-label protected PDFs directly in OneDrive and SharePoint on the web. There is no configuration or enablement requirement for admins, but they should verify sensitivity label usage rights and inform affected users. The user impact is moderate as it enhances functionality for those already editing protected PDFs. Urgency is low since rollout is scheduled for January 2027, giving ample preparation time and no immediate admin action.
40
Admin Impact
45
User Impact
30
Urgency
25
Effort
WHAT YOU NEED TO KNOW
AT A GLANCE
Users with editing rights will be able to annotate sensitivity label‑protected PDFs directly in OneDrive and SharePoint on the web while labels and encryption remain intact.
END USERS
Users with editing rights can annotate protected PDFs in the browser; view‑only users remain read‑only.
IT ADMINS
Review your label and usage‑rights setup, inform users, and update docs or support guidance as needed.
ROLLOUT TIMELINE
Upcoming:
January 2027
January 2027
📢 Official Microsoft Message Center Announcement
Microsoft OneDrive and SharePoint: Annotate sensitivity-label protected PDFs on the web
Message ID: MC1545696
[What and why]
Microsoft OneDrive and SharePoint on the web will support annotation for PDFs encrypted with Microsoft Purview sensitivity labels. Users who have the appropriate editing usage rights will be able to annotate protected PDFs in their browser without removing the sensitivity label. The file’s sensitivity label, encryption, and usage rights will be preserved when changes are saved.
[Rollout schedule]
- General Availability (Worldwide, GCC, GCC High, DoD): Beginning in late January 2027 and expected to complete in late January 2027
[Impact on your organization]
Who is affected
- OneDrive for Business and SharePoint customers
- This feature does not apply to OneDrive Consumer.
Platforms and services
- OneDrive for Business and SharePoint on the web
- All browsers are supported.
What will happen
- Users who have editing usage rights can annotate sensitivity label-protected, encrypted PDFs in the OneDrive or SharePoint web PDF viewer.
- Available annotation tools include ink, highlight, free text, notes, signatures, image/shape/date stamps, bookmarks, and form fields.
- Users can save annotations without removing the sensitivity label.
- The sensitivity label, encryption, and usage rights are preserved when the annotated PDF is saved.
- Users with view-only rights will continue to see the PDF as read-only and cannot annotate.
- This change does not grant users additional access or editing rights.
- No feature-specific admin control or configuration is required. Existing sensitivity label and usage-rights settings determine who can view or edit protected PDFs.
[Action required and recommendations]
No feature-specific admin action is required to enable this update.
We recommend that you:
- Inform users who routinely review labeled or regulated documents that they can annotate protected PDFs in place.
- Confirm that your sensitivity label and usage-rights configuration reflects who should be able to edit or view protected PDFs.
- Update internal documentation and helpdesk guidance as appropriate.
[Compliance considerations]
| Question | Answer |
| Does the change alter how existing customer data is accessed or modified? | Yes. Users with existing editing usage rights gain a new way to modify protected PDFs by adding annotations in the OneDrive or SharePoint web PDF viewer. |
| Does the change preserve Information Protection label behavior? | Yes. Users can annotate PDFs protected by sensitivity labels without removing the label. The sensitivity label, encryption, and usage rights are preserved when the file is saved. |
Source: Microsoft Message Center • Analysed by MWPro
