Set-M365DataAtRestEncryptionPolicyAssignment

This cmdlet is available only in the cloud-based service.

Use the Set-M365DataAtRestEncryptionPolicyAssignment cmdlet to assign a Microsoft 365 data-at-rest encryption policy at the tenant level.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

Syntax

Set-M365DataAtRestEncryptionPolicyAssignment
   -DataEncryptionPolicy <DataEncryptionPolicyIdParameter>
   [<CommonParameters>]

Description

You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see Find the permissions required to run any Exchange cmdlet.

Examples

Example 1

Set-M365DataAtRestEncryptionPolicyAssignment -DataEncryptionPolicy "Contoso Corporate"

This example assigns the Microsoft 365 data-at-rest encryption policy named Contoso Corporate.

Parameters

-DataEncryptionPolicy

The DataEncryptionPolicy parameter specifies the Microsoft 365 data-at-rest encryption policy. You can use any value that uniquely identifies the policy. For example:

  • Name
  • Distinguished name (DN)
  • GUID
Type:DataEncryptionPolicyIdParameter
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False
Applies to:Exchange Online