35005 - Add test for sensitivity labels in SharePoint Online assessment

[alexandair]

Fix https://github.com/microsoft/ztspecs/issues/51

[Copilot]

Pull request overview

This PR adds a new assessment test (ID 35005) to check whether sensitivity labels are enabled in SharePoint Online and OneDrive for Business. The test verifies that the EnableAIPIntegration setting is enabled, which allows users to apply Microsoft Information Protection labels to documents stored in these services.

• Implements assessment function Test-Assessment-35005 to check SharePoint Online sensitivity label integration
• Adds comprehensive unit tests covering success, failure, and error scenarios
• Provides remediation documentation with PowerShell commands and Microsoft Learn references

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
src/powershell/tests/Test-Assessment.35005.ps1	Implements the main assessment logic to query SharePoint tenant settings and evaluate EnableAIPIntegration status
src/powershell/tests/Test-Assessment.35005.md	Provides documentation explaining the security importance and remediation steps
code-tests/test-assessments/Test-Assessment.35005.Tests.ps1	Adds Pester tests for three scenarios: query errors, disabled integration, and enabled integration

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Spelling error: "contant" should be "content". This appears in the description explaining why organizations lose visibility when EnableAIPIntegration is disabled.

Suggested change

SharePoint Online and OneDrive for Business require explicit enablement of sensitivity label integration to allow users to apply Microsoft Information Protection labels to files stored in these services. When EnableAIPIntegration is disabled, organizations lose the ability to classify and protect documents at rest in their primary collaboration platform. The contant is opaque to SharePoint capabilities and Purview services like eDiscovery is not available.

SharePoint Online and OneDrive for Business require explicit enablement of sensitivity label integration to allow users to apply Microsoft Information Protection labels to files stored in these services. When EnableAIPIntegration is disabled, organizations lose the ability to classify and protect documents at rest in their primary collaboration platform. The content is opaque to SharePoint capabilities and Purview services like eDiscovery is not available.

[Copilot]

Spelling error: "contant" should be "content". This appears in the description explaining why organizations lose visibility when EnableAIPIntegration is disabled.

Suggested change

SharePoint Online and OneDrive for Business require explicit enablement of sensitivity label integration to allow users to apply Microsoft Information Protection labels to files stored in these services. When `EnableAIPIntegration` is disabled, organizations lose the ability to classify and protect documents at rest in their primary collaboration platform. The contant is opaque to SharePoint capabilities and Purview services like eDiscovery is not available.

SharePoint Online and OneDrive for Business require explicit enablement of sensitivity label integration to allow users to apply Microsoft Information Protection labels to files stored in these services. When `EnableAIPIntegration` is disabled, organizations lose the ability to classify and protect documents at rest in their primary collaboration platform. The content is opaque to SharePoint capabilities and Purview services like eDiscovery is not available.