How to configure Information Rights Management (IRM) for Microsoft OneDrive and SharePoint Online document libraries
Published Date : 08 Feb 2018
Last Updated : 04 Oct 2024
Content Ref: TEC6097463
Operating System
(none)
Part No
(none)
Summary
Provides steps on how to configure IRM for Microsoft OneDrive and SharePoint Online document libraries.
Symptoms
Important note: This article is only applicable if you have purchased/implemented the Microsoft Purview Data Compliance Configuration Service from RM (22Z-168 - INS MS Purview Data Compliance Config.(Remote) Service).
Overview
We will confirm when we have completed the Microsoft Purview Data Compliance Configuration service. Once completed, you can enable Information Rights Management (IRM) for SharePoint Online lists, libraries and OneDrive for Business. You can use IRM to control and protect files that are downloaded from lists, libraries and OneDrive for Business.
Consider the following limitations before you enable IRM for SharePoint Online libraries or OneDrive:
You cannot use the default or custom templates that are created and managed in the Azure portal.
IRM protection cannot be applied to protected documents (like digitally signed PDF files) as SharePoint needs to open the document on upload.
The .pdf files that have been natively protected by the Information Rights Management are supported only when you use a PDF reader that natively supports IRM.
Co-authoring is not supported. Only one person can edit at a time as you need to check out and download the document in an IRM-protected library.
The option to create new documents or other files using the Office Web App is disabled; only folders and links can be created.
If you try to open a non-IRM protected doc, it will open in the Microsoft 365 web app but cannot be edited as it will open as read-only. To edit IRM-protected files, you will need to download them first.
IRM-protected libraries for SharePoint and OneDrive for Business require the latest version of the new OneDrive sync client (OneDrive.exe).
Procedure
To enable IRM for SharePoint Online document libraries and OneDrive, you will need to follow the steps below:
Apply IRM to a list or library in SharePoint Online. Please refer to the following Microsoft article to configure this.
Configure IRM for OneDrive for Business. Users can follow the instructions given below to configure their OneDrive for Business and IRM-protect their business files:
In OneDrive, click the Settings icon and then click 'Site contents'. If 'Site contents' is not listed, click 'Return to classic OneDrive' or use the search option to find it.
Hover on the Documents tile, click the vertical ellipses icon (⋮) and then click Settings.
In the Settings page, under the 'Permissions and Management' section, click Information Rights Management. The Information Rights Management Settings page opens.
Tick the 'Restrict permissions on this library on download' box, enter the policy name and a description for the permission, and optionally, click Show Options to configure optional configurations and then click OK.