Forum Discussion

Copper Contributor

Aug 24, 2018

Solved

Azure Information Protection License

I have Azure RMS enabled in my environment. I also have a few AIP licenses. So I created a few labels, some of these labels have protection enabled. I created a new user, UNLICENSED. I opened Microso...

information protection and governance

microsoft information protection

Rights Management

Carol Bailey
Aug 25, 2018
As you discovered, the Azure Information Protection client doesn't do license enforcement.

To prevent a computer without an Azure Information Protection license from displaying labels, see https://docs.microsoft.com/en-us/azure/information-protection/configure-policy#subscription-support.

To prevent a computer without an Azure Rights Management license from displaying protection templates, use onboarding controls: https://docs.microsoft.com/en-us/azure/information-protection/activate-service#configuring-onboarding-controls-for-a-phased-deployment.

Carol Bailey

Microsoft

Aug 25, 2018

As you discovered, the Azure Information Protection client doesn't do license enforcement.

To prevent a computer without an Azure Information Protection license from displaying labels, see https://docs.microsoft.com/en-us/azure/information-protection/configure-policy#subscription-support.

To prevent a computer without an Azure Rights Management license from displaying protection templates, use onboarding controls: https://docs.microsoft.com/en-us/azure/information-protection/activate-service#configuring-onboarding-controls-for-a-phased-deployment.

thesmilingguru

Copper Contributor

Aug 13, 2019

Carol Bailey

To use unified client, do we need to enable unified labeling in AIP?

If yes then why?

Because even if it is not activated, we can still the UL client.

The clarification would be helpful for our testing

Pål Winther
Iron Contributor
Aug 13, 2019
thesmilingguruThe unified labeling client get its configuration from the Office 365 portal (Security & Compliance) or the Microsoft 365 Security/Microsoft 365 Compliance portal. This doesn't neccessarily mean you have to "activate" unified labeling, but it means the configuration you have (if any) in the Azure Portal (under Azure Information Protection) will not be available for your UL client.

So, to use the UL client, you need to have labels defined in the Office 365/M365 portal, either because you have created them there, or because you have activated unified labeling, and published the "synchronised" labels there.