We are in a proof of concept with Azure RMS. We want to allow external users to read and print the document, but not to change or edit. Also internal users are not allowed to change the document aftre it has been sent. The external users are not known in our Azure and Office365 tenant, and it can be other users every time we sent new documents. They don't all have microsoft live accounts.