Contact Us

If you still have questions or prefer to get help directly from an agent, please submit a request.
We’ll get back to you as soon as possible.

Please fill out the contact form below and we will reply as soon as possible.

  • Contact Us
  • Home
  • Action Sets
  • Creating Action Sets

Understanding DryvIQ Actions

Learn about each DryvIQ action and how it affects your content.

Written by Andrea Harvey

Updated at June 10th, 2025

Contact Us

If you still have questions or prefer to get help directly from an agent, please submit a request.
We’ll get back to you as soon as possible.

Please fill out the contact form below and we will reply as soon as possible.

  • Insights
    Prebuilt Insights Custom Insights
  • Content
  • Accounts
  • Activity Log
  • Content Scans
  • Migrations
    Migration Jobs Migration Reports Maps Flagged Items Migration Tools
  • Connections
    Supported Platform Connections Creating Connections Connection Maintenance Connection Pools
  • Entity Types
    DryvIQ Available Entity Types Custom Entity Types Entity Type Maintenance
  • Action Sets
    Creating Action Sets Action Sets Maintenance
  • Settings
    License Performance Notifications Extensions Entity Types Settings Display Settings Configuration
  • API, CLI, and SDK Documentation
    REST API Documentation Command-line Interface SDK Development
  • POC Offering
  • Release Notes
+ More

Table of Contents

Overview Apply Metadata Approval Assign Migration Delay Delete DryvIQ Persistent Label Classifier Modify Permissions MPIP Sensitivity Lable Redaction Remove Permissions Remove Shared Links

Overview

DryvIQ offers several actions you can take against your content. You can apply a single action or create a comprehensive workflow that can be used either in a content scan or manually applied to individual items. Learn about each item below. 

Apply Metadata

This action allows you to add specific metadata to a file. It requires you to complete additional configuration for the content scan to designate the metadata field and value that should be applied. Refer to Configuring Actions for more information on configuring metadata. 

 

 
 

Approval

This action flags the file for manual approval. You choose this option when you want to review the file before deciding what to do with it. The file is flagged, and you are responsible for adequately remediating it.

When the approval action is added to content, the approval flow will display in the top section of the item toolkit on the File info tab. You will select whether you approve or reject the action and provide a reason for the approval or rejection. If additional actions follow the approval action in an action set, those actions depend on the approval action workflow to trigger. Approving an item allows the action set to continue. Denying the item will halt all additional actions in the action set. 

Select to approve or reject the action.

 

Provide a reason for the approval/rejection.

 

 

 
 

Assign Migration

This option allows you to assign items to an intelligent migration job. This action requires you to complete additional configuration for the content scan to select the intelligent migration job to migrate the content. Refer to Configuring Actions for more information on configuring migration plans. 

 

 
 

Delay

This option delays any additional actions on the file for the specified time. When selected, you will set the delay value and interval (seconds, minutes, hours, or days). This option is used in combination with other actions, such as the move or delete action. For example, you could set the action to delay deleting or moving files for five days to allow for review before the action occurs.

 

 
 

Delete

DryvIQ deletes the file. When executed as part of a content scan, the deletion depends on the filters added to the Action Flows set. If you do not add any filters, all items in the content scan will be deleted. If you add filters, only items that meet the criteria will be deleted. When manually applied to items, the deletion will execute on the selected items in the order assigned in the action set. 

 

 
 

DryvIQ Persistent Label Classifier

DryvIQ applies a label to Microsoft Office XML file types (DOCX, XLSX, PPTX, etc.). For these file types, DryvIQ embeds the label in the XML file content. Since the Microsoft Office file standard reserves a location for such labels, DryvIQ can apply labels without risk of corruption. The labels will move with the file, regardless of platform. For example, if you zip a Microsoft Office XML file that contains a DryvIQ Persistent Label, the label will persist in the ZIP file.

The Label (which is required) is the label you want applied to the files. The Reason (an optional entry) lets you comment on why the label has been applied for reference. Enable the Preserve Timestamp option if you want DryvIQ to preserve the file’s current timestamp when applying the label. Otherwise, DryvIQ will update the file’s timestamp when it applies the label. This action requires a scan to use the “Metadata, Labels, and Versions” scan type. The File Activity tab in the file toolbox will display the Label and Reason applied to the file. 

 

 
 

Modify Permissions

DryvIQ modifies the permissions for specified groups and/or accounts. This action requires you to complete additional configuration for the content scan to designate to whom permission should be granted and the permission level that should be assigned (Read, Read and Write, or Full Control). Refer to Configuring Actions for more information on configuring permissions. 

When configuring the content scan to modify permissions, you can set a single permission level for multiple groups and/or accounts. However, you must add the Modify Permissions action to the action set multiple times if different permission levels need to be set. For example, if you need to assign all three permission levels (Read, Read and Write, and Full Control), you must add the action to the action set three times. You will then configure one action for each permission level.

If you need to modify permission for content in a Microsoft Teams Site, you must use the Microsoft Teams connector to properly access your Teams Site's groups.

 

Permission actions for Microsoft Office/Teams Sites only apply to permissions at the Direct Access level. Permissions at the Site permission (sub-group level) are not affected by permission actions. If you select to remove or modify permissions at the Site permission (sub-group level), you will see a log entry indicating, “No matching permissions were found.” This is because DryvIQ cannot detect the permissions at this level.

 

 

 
 

MPIP Sensitivity Lable

This action is available only if the mip-classifier extension is installed for your DryvIQ Platform. It allows you to select the Microsoft Purview Information Protection (MPIP) label you want to assign to files. The list that appears displays all the available MPIP labels for your account. DryvIQ creates a copy of the file and adds the MIP label to the file’s sensitivity label. Enable the Preserve Timestamp option if you want DryvIQ to preserve the file’s current timestamp when applying the label. Otherwise, DryvIQ will update the file’s timestamp when it applies the label. 

The MPIP label will only be applied to the following file types:

  • DOC
  • DOCM
  • DOCX
  • DOT
  • DOTM
  • DOTX
  • PDF
  • POTM
  • POTX
  • PPS
  • PPSM
  • PPSX
  • PPT
  • PPTM
  • PPTX
  • VSDM
  • VSDX
  • VSSM
  • VSSX
  • VSTM
  • VSTX
  • XLA
  • XLAM
  • XLS
  • XLSB
  • XLSM
  • XLSX
  • XLT
  • XLTM
  • XLTX
  • XPS.

If you add new labels to your MPIP label library, you must restart the DryvIQ Service Manager to pull the new labels.

 

 

 
 

Redaction

DryvIQ redacts sensitive information from TXT, CSV, PDF, XLSX, DOCX, and PPTX files, including embedded files in PDF, XLSX, DOCX, and PPTX files. However, redaction cannot be applied to encrypted or password-protected PDF files, and it does not work for read-only connections. This action requires you to complete additional configuration for the content scan to specify the entity type(s) you want to redact and set the threshold value. You will also define the replacement text that will be used. Refer to Configuring Actions for more information on configuring redaction. 

For embedded files, DryvIQ will redact the content; however, some Microsoft Office document preview images may still display the redacted content, as DryvIQ cannot update these preview images. Opening the Microsoft document will update the preview image to reflect the redacted content. 

 

When configuring the content scan for redaction, you must complete additional configuration to specify the entity type(s) you want to redact, the threshold value, and the replacement text that should be used.   

 

 
 

Remove Permissions

DryvIQ removes the specified permissions from a group or account. This action requires you to complete additional configuration for the content scan to designate from whom and which permissions should be removed. Refer to Configuring Actions for more information on configuring permissions.   

When configuring the content scan to remove permissions, you can remove permissions for multiple groups and/or accounts. However, you must add the Remove Permissions action to the action set multiple times if different permission levels need to be removed. For example, if you need to remove all permissions from one group but only want to remove write permsiions from another group, you must add the action to the action set twice. You will then configure one action for each permission level that needs to be removed.

If you need to remove permissions from content in a Microsoft Teams Site, you must use the Microsoft Teams connector to properly access your Teams Site's groups.

 

Permission actions for Microsoft Office/Teams Sites only apply to permissions at the Direct Access level. Permissions at the Site permission (sub-group level) are not affected by permission actions. If you select to remove or modify permissions at the Site permission (sub-group level), you will see a log entry indicating, “No matching permissions were found.” This is because DryvIQ cannot detect the permissions at this level.

 

 

 
 

Remove Shared Links

DryvIQ removes shared links that grant access to the item. You must select whether to remove all links, internal links, or external links. 

Not all platforms support shared links, and DryvIQ does not support removing shared links from all platforms. Refer to the table below for the supported platforms and the specific permissions that will be removed based on whether the internal and/or external permissions are selected to be removed.

Platform  Internal Shared Link Types External Shared Link Types Not Supported
Box People in your company
Invited people only
People with the link  
Microsoft Office 365/OneDrive People in the company with the link
Specific people
Anyone with the link  
Dropbox Anyone with the link (edit)
Team members (edit/view)
Only people invited (edit/view)
People with password (edit/view)
Anyone with the link (view)  
Google Shared Drives Company Anyone with the link Restricted

DryvIQ does not support removing shared links for Google Drive.

 

 

 
 

 

actions apply metadata approval delay delete modify permissions redaction redact remove permissions remove shared links

Was this article helpful?

Yes
No
Give feedback about this article

Related Articles

  • Starting and Pause Multiple Jobs Using REST API
  • Configuring Started/Paused Status Using REST API
  • Skip Destination Events Using REST API

Copyright 2025 – DryvIQ, Inc.

Knowledge Base Software powered by Helpjuice

Expand