Disables the super user feature for Azure Information Protection.


Disable-AipServiceSuperUserFeature []


The Disable-AipServiceSuperUserFeature cmdlet disables the super user feature for Azure Information Protection. This action does not automatically remove the previously added users or group from the super user list, and they continue to be displayed when you run the Get-AipServiceSuperUser or Get-AipServiceSuperUserGroup cmdlets. Therefore, if you enable the super user feature again, these users are automatically super users again, until you manually remove them.

If there are users in the current super list who must not be a super user if this feature is enabled again, remove them from the super user list before you disable the super user feature. If these users are individually specified, remove them with the Remove-AipServiceSuperUser cmdlet. If they are a member of a group that you have specified to be a super user group, either remove those users from the specified super user group, or remove the super user group by using the Clear-AipServiceSuperUserGroup cmdlet.

You must use PowerShell to configure super users; you cannot do this configuration by using a management portal.

For information about the super user feature for Azure Information Protection, see Enable-AipServiceSuperUserFeature.


Example 1: Disable the super user feature

PS C:\>Disable-AipServiceSuperUserFeature

This command disables the super user feature for your tenant.