Understanding DryvIQ Actions
Learn about each DryvIQ action and how it affects your content.
Table of Contents
Overview
DryvIQ offers several actions you can take against your content. You can apply a single action or create a comprehensive workflow that can be used either in a content scan or manually applied to individual items. Learn about each item below.
Apply Metadata
This action allows you to add specific metadata to a file. It requires you to complete additional configuration for the content scan to designate the metadata field and value that should be applied. Refer to Configuring Actions for more information on configuring metadata.

Approval
This action flags the file for manual approval. You choose this option when you want to review the file before deciding what to do with it. The file is flagged, and you are responsible for adequately remediating it.

When the approval action is added to content, the approval flow will display in the top section of the item toolkit on the File info tab. You will select whether you approve or reject the action and provide a reason for the approval or rejection. If additional actions follow the approval action in an action set, those actions depend on the approval action workflow to trigger. Approving an item allows the action set to continue. Denying the item will halt all additional actions in the action set.
![]()
|
![]()
|
Assign Migration
This option allows you to assign items to an intelligent migration job. This action requires you to complete additional configuration for the content scan to select the intelligent migration job to migrate the content. Refer to Configuring Actions for more information on configuring migration plans.

Delay
This option delays any additional actions on the file for the specified time. When selected, you will set the delay value and interval (seconds, minutes, hours, or days). This option is used in combination with other actions, such as the move or delete action. For example, you could set the action to delay deleting or moving files for five days to allow for review before the action occurs.

Delete
DryvIQ deletes the file. When executed as part of a content scan, the deletion depends on the filters added to the Action Flows set. If you do not add any filters, all items in the content scan will be deleted. If you add filters, only items that meet the criteria will be deleted. When manually applied to items, the deletion will execute on the selected items in the order assigned in the action set.

DryvIQ Persistent Label Classifier
DryvIQ applies a label to Microsoft Office XML file types (DOCX, XLSX, PPTX, etc.). For these file types, DryvIQ embeds the label in the XML file content. Since the Microsoft Office file standard reserves a location for such labels, DryvIQ can apply labels without risk of corruption. The labels will move with the file, regardless of platform. For example, if you zip a Microsoft Office XML file that contains a DryvIQ Persistent Label, the label will persist in the ZIP file.
The Label (which is required) is the label you want applied to the files. The Reason (an optional entry) lets you comment on why the label has been applied for reference. Enable the Preserve Timestamp option if you want DryvIQ to preserve the file’s current timestamp when applying the label. Otherwise, DryvIQ will update the file’s timestamp when it applies the label. This action requires a scan to use the “Metadata, Labels, and Versions” scan type. The File Activity tab in the file toolbox will display the Label and Reason applied to the file.

Modify Permissions
DryvIQ modifies the permissions for specified groups and/or accounts. This action requires you to complete additional configuration for the content scan to designate to whom permission should be granted and the permission level that should be assigned (Read, Read and Write, or Full Control). Refer to Configuring Actions for more information on configuring permissions.

When configuring the content scan to modify permissions, you can set a single permission level for multiple groups and/or accounts. However, you must add the Modify Permissions action to the action set multiple times if different permission levels need to be set. For example, if you need to assign all three permission levels (Read, Read and Write, and Full Control), you must add the action to the action set three times. You will then configure one action for each permission level.

If you need to modify permission for content in a Microsoft Teams Site, you must use the Microsoft Teams connector to properly access your Teams Site's groups.
Permission actions for Microsoft Office/Teams Sites only apply to permissions at the Direct Access level. Permissions at the Site permission (sub-group level) are not affected by permission actions. If you select to remove or modify permissions at the Site permission (sub-group level), you will see a log entry indicating, “No matching permissions were found.” This is because DryvIQ cannot detect the permissions at this level.
MPIP Sensitivity Lable
This action is available only if the mip-classifier extension is installed for your DryvIQ Platform. It allows you to select the Microsoft Purview Information Protection (MPIP) label you want to assign to files. The list that appears displays all the available MPIP labels for your account. DryvIQ creates a copy of the file and adds the MIP label to the file’s sensitivity label. Enable the Preserve Timestamp option if you want DryvIQ to preserve the file’s current timestamp when applying the label. Otherwise, DryvIQ will update the file’s timestamp when it applies the label.

The MPIP label will only be applied to the following file types:
|
|
|
If you add new labels to your MPIP label library, you must restart the DryvIQ Service Manager to pull the new labels.
Redaction
DryvIQ redacts sensitive information from TXT, CSV, PDF, XLSX, DOCX, and PPTX files, including embedded files in PDF, XLSX, DOCX, and PPTX files. However, redaction cannot be applied to encrypted or password-protected PDF files, and it does not work for read-only connections. This action requires you to complete additional configuration for the content scan to specify the entity type(s) you want to redact and set the threshold value. You will also define the replacement text that will be used. Refer to Configuring Actions for more information on configuring redaction.

For embedded files, DryvIQ will redact the content; however, some Microsoft Office document preview images may still display the redacted content, as DryvIQ cannot update these preview images. Opening the Microsoft document will update the preview image to reflect the redacted content.
When configuring the content scan for redaction, you must complete additional configuration to specify the entity type(s) you want to redact, the threshold value, and the replacement text that should be used.

Remove Permissions
DryvIQ removes the specified permissions from a group or account. This action requires you to complete additional configuration for the content scan to designate from whom and which permissions should be removed. Refer to Configuring Actions for more information on configuring permissions.

When configuring the content scan to remove permissions, you can remove permissions for multiple groups and/or accounts. However, you must add the Remove Permissions action to the action set multiple times if different permission levels need to be removed. For example, if you need to remove all permissions from one group but only want to remove write permsiions from another group, you must add the action to the action set twice. You will then configure one action for each permission level that needs to be removed.

If you need to remove permissions from content in a Microsoft Teams Site, you must use the Microsoft Teams connector to properly access your Teams Site's groups.
Permission actions for Microsoft Office/Teams Sites only apply to permissions at the Direct Access level. Permissions at the Site permission (sub-group level) are not affected by permission actions. If you select to remove or modify permissions at the Site permission (sub-group level), you will see a log entry indicating, “No matching permissions were found.” This is because DryvIQ cannot detect the permissions at this level.
Remove Shared Links
DryvIQ removes shared links that grant access to the item. You must select whether to remove all links, internal links, or external links.

Not all platforms support shared links, and DryvIQ does not support removing shared links from all platforms. Refer to the table below for the supported platforms and the specific permissions that will be removed based on whether the internal and/or external permissions are selected to be removed.
Platform | Internal Shared Link Types | External Shared Link Types | Not Supported |
---|---|---|---|
Box | People in your company Invited people only |
People with the link | |
Microsoft Office 365/OneDrive | People in the company with the link Specific people |
Anyone with the link | |
Dropbox | Anyone with the link (edit) Team members (edit/view) Only people invited (edit/view) People with password (edit/view) |
Anyone with the link (view) | |
Google Shared Drives | Company | Anyone with the link | Restricted |
DryvIQ does not support removing shared links for Google Drive.