Rights Management SDKs


Versions of the Microsoft Rights Management Service SDK released prior to March 2020 are deprecated; applications using earlier versions must be updated to use the March 2020 release. For full details, see the deprecation notice.

No further enhancements are planned for the Microsoft Rights Management Service SDK. We strongly recommend adoption of the Microsoft Information Protection SDK for classification, labeling, and protection services.

This guide will orient you to tools for extending and integrating with Azure Information Protection’s rights management service.

Service Applications

Service applications provide capabilities to protect information when exporting from an enterprise content management system, a business application, or a cloud-based business solution. Data Loss Prevention (DLP) and Cloud Application Security (CAS) applications are examples of service applications. Our SDK for developing service applications is available through two programming models.

Examples of service applications

  • IpcDlp is a sample RMS-enabled DLP application that takes you through the basic steps that a DLP RMS-enabled application should perform by using the RMS File API for protecting and consuming restricted content.
  • IpcAzureApp is a sample that demonstrates how to use RMS SDK in Azure applications to protect data in an Azure Blob Storage.
  • RmsFileWatcher is a sample that demonstrates how to build a Windows application that watches directories in the file system and applies RMS protection policies on every change, for example file added or file modified.
  • ProtectFilesInDir is a simple console application sample that takes a directory as input and protects all the files in that directory only, no recursion.

PowerShell guides

Used by Azure Rights management administrators, PowerShell cmdlets are also useful for developing and testing your service applications. For more information, see Using PowerShell with the Azure Information Protection client.

User applications

User applications can be built with either the RMS SDK 2.1 or the RMS SDK 4.2. The 4.2 version is REST client based with operating system specific APIs for several popular OSs; iOS/OSX, Android, Linux, Windows. The 2.1 version is used for building native Windows-based applications.

User application development guides

User application samples

  • AzureIP Test is a sample console application that allows you to encrypt documents with an Azure template or an ad-hoc policy.
  • IPCNotepad is a sample RMS-enabled application that takes you through the basic steps each RMS-enabled application should perform when protecting and consuming restricted content.
  • RmsDocumentInspector is a tool can give information about any RMS protected file such as content-id or user rights.

Development environment setup

The following guides lead you through OS specific setup steps for an application development environment using common tools.

iOS/OSX setup Android setup Windows Phone setup Windows Service setup Linux setup


Each of the following topics presents specific guidance for an aspect of implementing your application. Service applications are built using the RMS SDK 2.x. User applications are built using RMS SDK 4.x. The article link is attributed with the application type; service, user.


Security and authentication

Configuration and performance management

Introduction and datasheets

Introduction to Azure Information Protection

Other resources

Support articles

Message protocol and file formats

Rights Managed email message

API reference

Previous versions

See also