Site icon Joanne C Klein

Microsoft Purview OCR and SharePoint Premium OCR

Image of a person's hand writing on a document to indicate the use of OCR to detect the document content once scanned.
Reading Time: 7 minutes

There’s a lot of unstructured content in a Microsoft 365 environment that isn’t found in a text-only office or PDF document. In most organizations, content also includes images that may be embedded in Office docs or PDFs, scanned (image-based) PDFs, and regular image files (.png, jpg, etc.). Like text-based content sometimes can be, some image-based content is also important and sensitive.

Optical Character Recognition (OCR) is a technology that can help. It extracts printed or handwritten text in images or scanned documents into machine-readable digital text.

This is important for 2 practical reasons:

In Microsoft 365, there are 2 places where OCR can be enabled:

You can also extract text from images using other related Microsoft OCR services such as Azure’s AI Document Intelligence and Azure Computer Vision OCR. This post isn’t about those. 🙂

Since both Purview and SPP OCR services can target SPO and OD, this left me wondering… if I were to use each OCR service in SharePoint, what’s the difference between them… is there a difference? Do I need both?

My TL;DR Takeaways

Conclusion: it is 2 ways of arriving at the same destination. Text will be extracted from images and made available to both SharePoint and Purview for downstream processing.

Read on for more details.


Use-case Scenario for OCR

You’re an account rep having an on-site meeting with a customer. After the meeting,  you take a picture of some handwritten notes you made during the meeting including some potentially sensitive information such as an account number, customer name, etc. You then upload the picture to your team’s SharePoint site where it is stored as a .jpg file.

From a business usability perspective, the account rep will likely need to find some information from their handwritten notes at some later time. The expectation would be that a simple search for the customer in SharePoint would quickly surface the image file that held the meeting notes. However, without OCR enabled on the SharePoint site, the text in the image file is not searchable… a potentially frustrating and time-consuming experience would ensue for the account rep to click around and track it down.

From a security and compliance perspective, some of the content in the image is sensitive information and should be protected with the same controls as everything else in the environment with that same sensitive information (a blocking DLP policy for example). However, without OCR enabled on that SharePoint site, the sensitive information found in the image file goes undetected… a potentially significant data risk.


My Site Setup for Testing

To help showcase the capabilities and highlight the differences, if any, between Purview OCR and SPP OCR, I set up 3 sites with the following configuration:


Setup and Billing for each OCR service

To enable each of these OCR services:

Both Purview and SPP OCR are pay-as-you-go services in Azure that will track usage and cost with a meter. For both OCR services, Syntex billing setup is required. If you’ve already configured Syntex billing to enable OCR for SPP, there is no extra setup required for billing Purview OCR.

Link: Set up pay-as-you-go billing

To track usage for OCR billing, you will see which OCR service is being used on the site when scanning images in the MediaServiceMetadata managed property value of each file:


My File Setup for Testing

Although I didn’t test every supported file type, I did test some common ones based on what I see in my customers’ tenants. I added some sensitive information (based on a custom Sensitive Information Type) into each of the file types below (to test the Purview controls):


Where can you see the Extracted Text in SharePoint?

It depends entirely on the file type. For the file types I tested with:

The takeaway from this? Don’t assume that OCR didn’t scan and extract text from the images simply because you don’t see the Extracted Text SharePoint column populated with a value.


Which Purview Solutions can use the Extracted Text in SharePoint?

The below Purview solutions can act upon an image’s extracted text if they are targeting the SharePoint location where OCR is being used:

Link: Supported locations and solutions

Note: SIT confidence levels are detected and honored as is shown in the image below from one of the sites in my test (the SPP OCR site) where a few DLP policies are looking for high confidence CCNs and high confidence custom Customer # SIT). The DLP icon indicates that it sees the high confidence SIT in the image content. The same would apply for an auto-apply retention label policy.

The takeaways from this?

Disclaimer: I enabled Purview OCR in my tenant, and then explicitly excluded the SPP OCR Only site from it. From my observations while testing, Purview was able to see the extracted text regardless of which OCR service was used to extract it.

Sidebar: Other Purview solutions that have their own built-in OCR functionality:


Parting thoughts

That’s a lot of detail. I hope this has provided some additional guidance around the 2 services and why you may want to consider enabling OCR on some of your sites due to the downstream, value-add it provides.

Reach out if you have questions! I’d love to hear about your feedback on the OCR capabilities.

Thanks for reading.

-JCK

Exit mobile version