I can't RMS and IRM for use labels with permissions configurations.

Charlene Fialho 0 Reputation points
2024-03-14T22:15:03.9433333+00:00 
Currently, I am responsible for configuring and creating sensitivity labels and label policy. I've already created the labels and label policy, which were published to our test group before being enabled organization-wide.


The sensitivity label has been configured with the following settings:

User's image

User's image

User's image

I selected the configuration so that users could define the permissions applied to the label (view, save, edit, forward, etc.).

User's image

However, when testing the application for the confidentiality level (which is configured for encryption) in a word file, I came across the following error:

User's image

After carrying out some research, I found relevant information in Microsoft's documentation, available at the following link:

https://video2.skills-academy.com/pt-br/purview/whats-new(Section Confidentiality Labels)

And I understand that Office applications in newer versions don't allow users to manually set access restrictions when a label is applied. Alternatively, we need to configure labels with specific permissions restrictions, allowing users to select the appropriate label as needed.

Link to the docs that talks about this label configuration alternative: https://video2.skills-academy.com/pt-br/purview/sensitivity-labels-office-apps#information-rights-management-irm-options-and-sensitivity -labels (IRM (Information Rights Management) and confidentiality labels Options Section)


Then I went to edit the label assigning permissions to the label.

User's image

However, when I try to save the edit of the label where I am configuring the permissions, the following message appears:

Diagnostic information:{Version:17.01.1489.000,Environment:EUSPROD,DeploymentId:06ec3bc9-e9ed-4855-a269-ae3c413754e8,InstanceId:WebRole_IN_14,SID:a17be094-6fa7-438e-addb-cd5f26e0f9 d2,CID:6153358e-c59f-43c8 -b2b4-d8707ab503fe}
Time:Tue, 12 Mar 2024 15:32:50 GMT

User's image

I found out that it could be a question related to the clearance required for SharePoint, specifically for the labeling configuration. So I checked if this setting is enabled by following this link: 
https://video2.skills-academy.com/pt-br/purview/set-up-irm-in-sp-admin-center#turn-on-irm-service-using-sharepoint-admin-center
(Configure IRM (Information Rights Management) in the SharePoint Online Admin Center | Microsoft Learn)

I followed the steps in the documentation and I now currently encounter the following error:

User's image

There is the following link to the documentation that I found on activating RMS, but I am having difficulty with this.

I saw that it is available through powerhshell, but I don't know if it costs and on which portal to run the command or if it can be run on a local Windows machine.

please anyone who can help me.

I've been needing this question for 3 days
Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,217 questions
Azure
Azure
A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.
1,058 questions
SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
10,150 questions
Microsoft Purview
Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
1,028 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
175 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. ShaikMaheer-MSFT 38,321 Reputation points Microsoft Employee
    2024-03-21T10:27:57.0433333+00:00

    It seems like you are facing some issues while configuring sensitivity labels and label policy in your organization. Based on the information you have provided, it appears that you are trying to configure Information Rights Management (IRM) in SharePoint Online Admin Center to enable the labeling configuration. To enable IRM in SharePoint Online Admin Center, you can follow the below steps: 1. Sign in to the Microsoft 365 admin center with your admin credentials. 2. Go to the Admin centers > SharePoint. 3. In the left pane, select Settings. 4. Under Information Rights Management (IRM), select Use the IRM service specified in your configuration. 5. Click OK to save the changes. Once you have enabled IRM in SharePoint Online Admin Center, you can configure the sensitivity labels and label policy with specific permissions restrictions, allowing users to select the appropriate label as needed. Regarding the error message you are receiving while trying to save the edit of the label, it seems like there might be some issue with the configuration. I would suggest you check the configuration settings again and ensure that all the required settings are properly configured. Regarding the PowerShell command to activate RMS, you can run the command on a local Windows machine. The PowerShell command to activate RMS is as follows: Set-IRMConfiguration -RMSOnlineKeySharingLocation "https://sp-rms.na.aadrm.com/TenantManagement/ServicePartner.svc" -InternalLicensingEnabled $true Please note that this command is used to activate RMS for Azure Information Protection, and it might not be directly related to your issue. If you are still facing issues, I would suggest you contact Microsoft support for further assistance.

    0 comments