NOTE: This configuration is currently not supported
Users have reported synchronization problems with IRM protected document libraries using OneDrive.


By default, Windows Azure RMS is not activated.

To enable AADRM, connect with an Office 365 administrator account to the administration portal and go to Service Settings section. Choose Rights Management tab and finally the Manage link. You have the option to Enable

SkyDrive Pro is dependant on SharePoint, so the feature must be enabled in SharePoint first.

1. Sign in to the Office 365 Admin Center (

2. Choose Admin > SharePoint. You’re now in the SharePoint Online Administration Center.

3. Choose Settings.

4. On the Settings page, in the Information Rights Management (IRM) section, choose Use the IRM service specified in your configuration, and then choose Refresh IRM Settings.

Note After refreshing IRM settings, people in your organization can now IRM-protect their SharePoint lists and document libraries.

5. Then the user can go into OneDrive and select Library (on the left about the users name)

6. then Library Settings. You will now see a Information Rights Management option

There is currently no global administrative option to enable RMS on all or specific users OneDrive.

Users will have to configure it themselves, but first you have to enable it for SharePoint Online

The option will not be available for users until the admin enables RMS in SharePoint.

  •  Restrict permission on this library on download 
  •  Do not allow users to upload documents that do not support IRM 
  •  Stop restricting access to the library at (date) 
  •  Prevent opening documents in the browser for this Document Library
  •  Allow viewers to print 
  •  Allow viewers to run script and screen reader to function on downloaded documents 
  •  Allow viewers to write on a copy of the downloaded document 
  •  After download, documents access rights will expire after (days)
  •  users must verify their credentials using this interval (days) 
  •  Allow group protection Default group: (email attribute of group)