I can't RMS and IRM for use labels with permissions configurations.

Question

Currently, I am responsible for configuring and creating sensitivity labels and label policy. I've already created the labels and label policy, which were published to our test group before being enabled organization-wide.


The sensitivity label has been configured with the following settings:

I selected the configuration so that users could define the permissions applied to the label (view, save, edit, forward, etc.).

However, when testing the application for the confidentiality level (which is configured for encryption) in a word file, I came across the following error:

After carrying out some research, I found relevant information in Microsoft's documentation, available at the following link:

https://learn.microsoft.com/pt-br/purview/whats-new(Section Confidentiality Labels)

And I understand that Office applications in newer versions don't allow users to manually set access restrictions when a label is applied. Alternatively, we need to configure labels with specific permissions restrictions, allowing users to select the appropriate label as needed.

Link to the docs that talks about this label configuration alternative: https://learn.microsoft.com/pt-br/purview/sensitivity-labels-office-apps#information-rights-management-irm-options-and-sensitivity -labels (IRM (Information Rights Management) and confidentiality labels Options Section)


Then I went to edit the label assigning permissions to the label.

However, when I try to save the edit of the label where I am configuring the permissions, the following message appears:

Diagnostic information:{Version:17.01.1489.000,Environment:EUSPROD,DeploymentId:06ec3bc9-e9ed-4855-a269-ae3c413754e8,InstanceId:WebRole_IN_14,SID:a17be094-6fa7-438e-addb-cd5f26e0f9 d2,CID:6153358e-c59f-43c8 -b2b4-d8707ab503fe}
Time:Tue, 12 Mar 2024 15:32:50 GMT

I found out that it could be a question related to the clearance required for SharePoint, specifically for the labeling configuration. So I checked if this setting is enabled by following this link: 
https://learn.microsoft.com/pt-br/purview/set-up-irm-in-sp-admin-center#turn-on-irm-service-using-sharepoint-admin-center
(Configure IRM (Information Rights Management) in the SharePoint Online Admin Center | Microsoft Learn)

I followed the steps in the documentation and I now currently encounter the following error:

There is the following link to the documentation that I found on activating RMS, but I am having difficulty with this.

I saw that it is available through powerhshell, but I don't know if it costs and on which portal to run the command or if it can be run on a local Windows machine.

please anyone who can help me.

I've been needing this question for 3 days

Answer 1

It seems like you are facing some issues while configuring sensitivity labels and label policy in your organization. Based on the information you have provided, it appears that you are trying to configure Information Rights Management (IRM) in SharePoint Online Admin Center to enable the labeling configuration. To enable IRM in SharePoint Online Admin Center, you can follow the below steps: 1. Sign in to the Microsoft 365 admin center with your admin credentials. 2. Go to the Admin centers > SharePoint. 3. In the left pane, select Settings. 4. Under Information Rights Management (IRM), select Use the IRM service specified in your configuration. 5. Click OK to save the changes. Once you have enabled IRM in SharePoint Online Admin Center, you can configure the sensitivity labels and label policy with specific permissions restrictions, allowing users to select the appropriate label as needed. Regarding the error message you are receiving while trying to save the edit of the label, it seems like there might be some issue with the configuration. I would suggest you check the configuration settings again and ensure that all the required settings are properly configured. Regarding the PowerShell command to activate RMS, you can run the command on a local Windows machine. The PowerShell command to activate RMS is as follows: Set-IRMConfiguration -RMSOnlineKeySharingLocation "https://sp-rms.na.aadrm.com/TenantManagement/ServicePartner.svc" -InternalLicensingEnabled $true Please note that this command is used to activate RMS for Azure Information Protection, and it might not be directly related to your issue. If you are still facing issues, I would suggest you contact Microsoft support for further assistance.