SOLVED

Using Multiple Email Accounts and AIP labeling

%3CLINGO-SUB%20id%3D%22lingo-sub-325446%22%20slang%3D%22en-US%22%3ERe%3A%20Using%20Multiple%20Email%20Accounts%20and%20AIP%20labeling%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-325446%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20problem%20is%20that%20you%20can%20only%20configure%20the%20AIP%20client%2Fadd-in%20with%20a%20single%20account.%20Unlike%20with%20RMS%2C%20where%20Outlook%20will%20happily%20connect%20to%20multiple%20servers%20using%20multiple%20IDs.%20Sadly%2C%20the%20team%20has%20no%20plans%20of%20supporting%20multiple%20IDs%2C%20even%20though%20we've%20brought%20it%20up%20several%20times.%20There's%20also%20an%20open%20UserVoice%20item%3A%20%3CA%20href%3D%22https%3A%2F%2Fmsip.uservoice.com%2Fforums%2F600097-azure-information-protection%2Fsuggestions%2F19602148-the-aip-client-supports-multiple-users-and-login-o%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmsip.uservoice.com%2Fforums%2F600097-azure-information-protection%2Fsuggestions%2F19602148-the-aip-client-supports-multiple-users-and-login-o%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20any%20case%2C%20for%20your%20particular%20scenario%20you%20can%20simply%20open%20the%20settings%20and%20use%20the%20Reset%20Settings%20option.%20If%20that%20doesn't%20re-trigger%20the%20authentication%20process%2C%20you%20will%20have%20to%20clear%20the%20local%20cache%20and%20credentials.%20Last%20time%20I%20had%20to%20do%20this%2C%20I%20followed%20this%20process%3A%20%3CA%20href%3D%22https%3A%2F%2Fwww.michev.info%2FBlog%2FPost%2F1822%2Fclearing-aip-client-and-powershell-module-token-cache%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.michev.info%2FBlog%2FPost%2F1822%2Fclearing-aip-client-and-powershell-module-token-cache%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-325189%22%20slang%3D%22en-US%22%3EUsing%20Multiple%20Email%20Accounts%20and%20AIP%20labeling%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-325189%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20two%20email%20accounts%20signed%20into%20Outlook%20(365%20ProPlus%2C%20Insider%20track).%20Account%20%231%20is%20my%20main%20account%20that%20I%20use%20as%20my%20daily%20driver.%20Account%20%232%20is%20a%20random%20admin%20account.%20Whenever%20I%20apply%20an%20AIP%20label%20onto%20a%20new%20email%20is%20says%20%22Permission%20Granted%20by%20Account%20%232%22%2C%20even%20though%20I'm%20sending%20it%20from%20Account%20%231.%20When%20I%20click%20the%20%22Protect%22%20drop%20down%20on%20a%20new%20email%20and%20select%20%22Help%20and%20Feedback%22%20it%20says%20%22Connected%20as%20Account%20%231%22.%20This%20is%20causing%20me%20issues%20because%20when%20I%20go%20back%20into%20my%20sent%20items%20folder%20and%20view%20the%20permissions%20on%20the%20item%20it%20says%20I%20don't%20have%20owner%20permissions%20and%20therefor%20don't%20have%20rights%20to%20edit%20permissions%20or%20revoke%20the%20message.%20I%20think%20this%20has%20something%20to%20do%20with%20the%20order%20that%20I%20signed%20into%20my%20Office%20accounts%20when%20I%20opened%20Outlook%20the%20first%20time.%20I%20signed%20into%20Account%20%231%20first%20and%20Account%20%232%20last.%20The%20default%20should%20be%20to%20force%20permissions%20to%20be%20applied%20from%20the%20account%20sending%20the%20email%2C%20and%20not%20the%20last%20one%20signed%20into%20Outlook.%20Will%20be%20opening%20a%20ticket%20on%20this%20too%2C%20just%20wanted%20to%20post%20it%20here%20in%20case%20anyone%20else%20was%20having%20similar%20problems.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-325189%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EInformation%20Protection%20%26amp%3B%20Governance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Information%20Protection%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOutlook%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Frequent Contributor

I have two email accounts signed into Outlook (365 ProPlus, Insider track). Account #1 is my main account that I use as my daily driver. Account #2 is a random admin account. Whenever I apply an AIP label onto a new email is says "Permission Granted by Account #2", even though I'm sending it from Account #1. When I click the "Protect" drop down on a new email and select "Help and Feedback" it says "Connected as Account #1". This is causing me issues because when I go back into my sent items folder and view the permissions on the item it says I don't have owner permissions and therefor don't have rights to edit permissions or revoke the message. I think this has something to do with the order that I signed into my Office accounts when I opened Outlook the first time. I signed into Account #1 first and Account #2 last. The default should be to force permissions to be applied from the account sending the email, and not the last one signed into Outlook. Will be opening a ticket on this too, just wanted to post it here in case anyone else was having similar problems.

1 Reply
best response confirmed by Paul Youngberg (Frequent Contributor)
Solution

The problem is that you can only configure the AIP client/add-in with a single account. Unlike with RMS, where Outlook will happily connect to multiple servers using multiple IDs. Sadly, the team has no plans of supporting multiple IDs, even though we've brought it up several times. There's also an open UserVoice item: https://msip.uservoice.com/forums/600097-azure-information-protection/suggestions/19602148-the-aip-c...

 

In any case, for your particular scenario you can simply open the settings and use the Reset Settings option. If that doesn't re-trigger the authentication process, you will have to clear the local cache and credentials. Last time I had to do this, I followed this process: https://www.michev.info/Blog/Post/1822/clearing-aip-client-and-powershell-module-token-cache