Blog Post

Microsoft Security Community Blog
4 MIN READ

Announcement: Azure RMS Documentation Library Update for November 2015

Azure Information Protection Team's avatar
Sep 08, 2018
First published on CloudBlogs on Nov 30, 2015

Hi everybody

As per Carol’s introduction post , she's letting you know what's new and hot in the docs for this month.

Reminders: Follow us on twitter ( https://twitter.com/TheRMSGuy ) and join in our RMS peer community at http://www.yammer.com/AskIPTeam .

Cheers,

Dan (on behalf of the RMS team)

The https://technet.microsoft.com/en-us/library/jj585024.aspx has been updated on the web and the latest content has Updated: November 1, 2015 (or later) at the top of the page.

Summary of the documentation available: https://technet.microsoft.com/en-us/library/jj585016.aspx | https://technet.microsoft.com/en-us/library/jj585002.aspx | https://technet.microsoft.com/en-us/library/jj585006.aspx | https://technet.microsoft.com/en-us/library/jj585027.aspx

Plus, the Rights Management sharing application guides ( https://technet.microsoft.com/en-us/library/dn339003.aspx and https://technet.microsoft.com/en-us/library/dn339006.aspx ) and FAQs (for http://technet.microsoft.com/en-us/dn467883 and http://technet.microsoft.com/en-us/dn451248 ).

A recurring theme for this month's doc update is focusing on the heart of Rights Management - the rights themselves, and how to define them.

We value customer feedback and try to incorporate it when possible.  Although we can't promise to make the docs perfect for everybody, we are committed to continual improvement.  If you have any feedback about the docs for the RMS sharing application or for Azure RMS, email mailto:askipteam@microsoft.com?subject=Documentation%20feedback .

What's New for the RMS Sharing Application Documentation, November 2015

The only significant documentation change since the last update (August 2015) is to https://technet.microsoft.com/en-us/library/dn574733(v=ws.10).aspx , to clarify how the templates display with the Protect with RMS and then Protect in place menu options. If there are more than 10 templates available and you do not see the template that you want, click Company-defined Protection to download and see all the templates.

What's New in the Documentation Library for Azure Rights Management, November 2015

The following information lists the topics that contain significant changes since the last update (October 2015).

https://technet.microsoft.com/en-us/library/dn655136.aspx

- Updated the https://technet.microsoft.com/en-us/library/dn655136.aspx#BKMK_SupportedApplications section for minor clarifications to the list of Office applications.

https://technet.microsoft.com/en-us/library/jj585004.aspx

- Updated the https://technet.microsoft.com/en-us/library/jj585004(Azure.100).aspx#BKMK_SharePointIntro section, to clarify that Azure RMS applies usage restrictions and data encryption for documents when they are downloaded from SharePoint, and not when the document is first created in SharePoint or uploaded to the library. For information about how documents are protected before they are downloaded, see https://technet.microsoft.com/library/dn905447.aspx from the SharePoint documentation.

https://technet.microsoft.com/en-us/library/dn750853.aspx

- New entry for a question that isn't new or even specific to Azure RMS, but we've been hearing a lot recently:

  • Can Rights Management prevent screen captures?

https://technet.microsoft.com/en-us/library/dn858447.aspx

- Updated https://technet.microsoft.com/en-us/library/dn858447.aspx#BKMK_Step4Migration with instructions if your AD RMS templates included the ANYONE group, with a PowerShell script to help you identify these templates.  Kudos to Jaroslav Zikmund (Premier Field Engineer) and Shantanu Vinze (Support Escalation Engineer) for their PowerShell expertise and contributions to this section.

https://technet.microsoft.com/en-us/library/dn642472.aspx

- Removed the reference to adding users from outside the organization by selecting contacts in the Azure portal. Instead, use PowerShell to do this by defining rights definition objects and updating the template with these. Exporting templates before you make updates like this is a good practice so that you can revert to a known, working version, if necessary.

https://technet.microsoft.com/en-us/library/mt169423.aspx

- Added 2 new sections:

  • Rights included in permissions levels : Unofficially, we often call the Viewer, Reviewer, Co-Author, and Co-Owner options "bundled rights" or "roles". But the official term for these are permissions levels . While the UI often summarizes the individual rights, it doesn't list all the individual rights. If you need to know these at a granular level, use the information in this section.
  • Rights included in the default templates : Although you can easily see the individual rights for the default templates in the Azure portal, sometimes you just need to know what they are without having to sign in to the portal. You'll find the rights listed in this section.

https://technet.microsoft.com/en-us/library/dn375964.aspx

- Update to the https://technet.microsoft.com/en-us/library/dn375964.aspx#ConfiguringServers section, adding an example of how to run the server configuration tool locally for each of the roles that the RMS connector supports.

https://msdn.microsoft.com/en-us/library/azure/dn727080.aspx https://technet.microsoft.com/en-us/library/dn529121.aspx

- Updated the https://technet.microsoft.com/en-us/library/dn529121.aspx#BKMK_Interpret section, for the current version 1.1 blob format, and additional entries in the typical request types table.

https://msdn.microsoft.com/en-us/library/azure/dn727080.aspx

- Added a tip how to define the hidden and automatically created "AllStaff" group, which defines all users in your organization. A new example includes using this group.

https://msdn.microsoft.com/en-us/library/azure/dn727076.aspx

- Updated the description with a warning that when you update properties of a custom template (for example, users and rights), the existing settings for those properties will be overwritten without warning, so be sure to specify all the settings that you need for the properties that you are updating. As a best practice, back up the existing template before you run this cmdlet, by using the https://msdn.microsoft.com/en-us/library/azure/dn727078.aspx cmdlet. Then, if you need to revert to the original configuration, you can use the https://msdn.microsoft.com/en-us/library/azure/dn727077.aspx cmdlet to restore the previous version of the template.

This cmdlet now has two new examples that show how to add users and rights to an existing template. Example 2 creates a rights definition object for new users and rights, a rights definition object for existing users and rights, and then updates the template with these. Example 3 defines the new users and rights as rights definition objects and adds these to the existing users and rights without having to specify the existing users and rights individually. Kudos to Sandor Teglasy (from Customer Support Services) for this final example.

Published Sep 08, 2018
Version 1.0
No CommentsBe the first to comment