I am having issues setting up information rights management for sensitivity labels

Question

I am working on setting up the sensitivity labels for our organization. I have been able to setup the lower tiered labels. Where I run into the issue is creating a "confidential" label. I get an error in word when labeling a document confidential. IT states there is no logged on office users are configured for information rights management. I have tried to go through the setup guide, it seems as there were some significant changes over the last couple years and there appears to be a few ways to get this done. We do have Office 365 plus enterprise mobility / security E3.

One of the tutorials I was working through had you Powershell install AipService. I installed it, but then was unable to connect to it with Connect-AipService. I would get an error and asked to verify credentials. I am logged in as global admin, when using that command the login window would pop up and I could select the account I wanted to use, then I get the error. I also states

Connect-AipService: The attempt to connect to the Azure Information Protection service failed. Verify that the credentials you are using are correct and try again. If you have continued problems, see http://go.microsoft.com/fwlink/?LinkId=251909.
The correlation ID is 8ae153d3-e6d1-4612-a0a2-51f8933aea0c. Please note and provide this value if asked by support for it.
Connect-AipService: Object reference not set to an instance of an object.

This was one of the pages that I worked off of.

https://learn.microsoft.com/en-us/purview/encryption-sensitivity-labels

The above page is where I found this one

https://learn.microsoft.com/en-us/azure/information-protection/activate-service

I have not been able to get the AIPService setup. I do have the ports open that were required also.

If anyone can point me in the right direction I would greatly appreciate it

Answer 1

@Jake Freese

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to accept the answer . Ask:

I am working on setting up the sensitivity labels for our organization. I have been able to setup the lower tiered labels. Where I run into the issue is creating a "confidential" label. I get an error in word when labeling a document confidential. IT states there is no logged on office users are configured for information rights management. I have tried to go through the setup guide, it seems as there were some significant changes over the last couple years and there appears to be a few ways to get this done. We do have Office 365 plus enterprise mobility / security E3.

One of the tutorials I was working through had you Powershell install AipService. I installed it, but then was unable to connect to it with Connect-AipService. I would get an error and asked to verify credentials. I am logged in as global admin, when using that command the login window would pop up and I could select the account I wanted to use, then I get the error. I also states

Azure PowerShellAI ConvertCopy

Connect-AipService

This was one of the pages that I worked off of.

https://learn.microsoft.com/en-us/purview/encryption-sensitivity-labels

The above page is where I found this one

https://learn.microsoft.com/en-us/azure/information-protection/activate-service

I have not been able to get the AIPService setup. I do have the ports open that were required also.

Solution: it appears that it was the PowerShell version (I was using 7) it can only run on 5. This needs to be added to the setup documentation or as a note in the PowerShell gallery.

I have been able to login and enable the AipService now.

If I missed anything please let me know and I'd be happy to add it to my answer, or feel free to comment below with any additional information.

If you have any other questions, please let me know. Thank you again for your time and patience throughout this issue.

---

Please don’t forget to Accept Answer and Yes for "was this answer helpful" wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

I have not made any significant progress.

I tried Connect and Enable commands again and were unsuccessful.

Where is the permissions page for the sensitivity labels? I originally started creating the sensitivity labels in Purview, and was able to create lower security tier labels without and issue. I also created a Confidential label with access restrictions. It appears that I have the permissions required, I am just missing a step or have something blocking me from getting the AIP service going.