Installing Information Right Management for Office 365

IRM needs to be activated first:

Service settings > Rights Management > Manage

Click Activate:

Rights Management is not activated


Managing IRM


Before we can manage IRM in PowerShell there is an module that needs to be downloaded and installed.

Download the Azure Rights Management Administration Tool - English - United Kingdom







Import-module aadrm

Connect-aadrmservice -verbose



Connect-aadrmservice -verbose




Integrating with Exchange

This enables IRM in Office 365 - It will allow the control of content in exchange via use of the menus as shown:


Set Permissions - Do Not Forward

It also allows us to create rights protection mail rules in Exchange online:

Apply Right Protecting to Messages






In order to enable IRM in Exchange online we need to do the following.


Open PowerShell as Admin and run the following commands in order.


Set-ExecutionPolicy RemoteSigned

$usercred = Get-Credential

$sessioninfo = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri -Credential $usercred -Authentication Basic -AllowRedirection

Import-PSSession $sessioninfo

Set-IRMConfiguration -RMSOnlineKeySharingLocation ""

Import-RMSTrustedPublishingDomain -RMSOnline -Name "RMS Online"

Set-IRMConfiguration -InternalLicensingEnabled $true

Test-IRMConfiguration -RMSOnline

Test-IRMConfiguration -Sender $usercred.username

Remove-PSSession $sessioninfo

Integrating Information Rights Management in Office 365 with SharePoint



To have the ability to enable IRM you need to have the "Design" permission. (This is included in Global Admin)


There is only one global settings required to enable IRM in SharePoint. From the SharePoint Admin panel we need to enable IRM.


O365 Admin > Admin > SharePoint > Settings



Information Rights Services



Once this has been enabled, in site settings from within a SharePoint site (from the library tab in a SharePoint site you can create an IRM policy for the site.

Information Rights Services Settings



This policy prevents un-supported documents from being uploaded. When tested see the error below.



This library does not accept files of the given type