Remove IRM on protected files in Document Library while IRM already has been disabled

%3CLINGO-SUB%20id%3D%22lingo-sub-3213494%22%20slang%3D%22en-US%22%3ERemove%20IRM%20on%20protected%20files%20in%20Document%20Library%20while%20IRM%20already%20has%20been%20disabled%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3213494%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20anybody%20have%20any%20idea%20if%20its%20possible%20to%20recover%20the%20access%20to%20restricted%20documents%20in%20a%20Document%20Library%20which%20was%20protected%20with%20Information%20Rights%20Management%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBack%20in%202018%20IRM%20was%20disabled%20on%20this%20library%20and%20throughout%20the%20SPO-ADMIN%20Center.%3C%2FP%3E%3CP%3EAlle%20files%20before%202018%20are%20still%20protected%20and%20not%20accesable.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20anyone%20have%20any%20idea%20how%20to%20get%20access%20or%20unprotect%20these%20online%20files%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlready%20tried%20with%20a%20support%20case%20via%20Microsoft%20but%20that%20hasnt%20helped%20a%20bit.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3213494%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDocument%20Library%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Efiles%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPowerShell%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3213708%22%20slang%3D%22en-US%22%3ERe%3A%20Remove%20IRM%20on%20protected%20files%20in%20Document%20Library%20while%20IRM%20already%20has%20been%20disabled%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3213708%22%20slang%3D%22en-US%22%3EI%20suppose%20you're%20talking%20about%20the%20legacy%20SharePoint%20IRM%20feature%20here.%20I%20haven't%20used%20that%20but%20as%20IRM%20uses%20Azure%20Rights%20Management%20I'm%20thinking%20you%20might%20be%20able%20to%20use%20any%20of%20these%20permissions.%3CBR%20%2F%3E%3CBR%20%2F%3EExport%20or%20Full%20control%2C%20rights%20management%20issuer%2Fowner%20or%20for%20sure%20the%20super%20user%20feature.%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20could%20try%20this%20cmdlet%20too%20as%20SharePoint%20or%20Global%20admin%20%3CBR%20%2F%3EUnlock-SPOSensitivityLabelEncryptedFile%20%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fsharepoint-online%2Funlock-sposensitivitylabelencryptedfile%3Fview%3Dsharepoint-ps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fsharepoint-online%2Funlock-sposensitivitylabelencryptedfile%3Fview%3Dsharepoint-ps%3C%2FA%3E%3C%2FLINGO-BODY%3E
Contributor

Does anybody have any idea if its possible to recover the access to restricted documents in a Document Library which was protected with Information Rights Management?

 

Back in 2018 IRM was disabled on this library and throughout the SPO-ADMIN Center.

Alle files before 2018 are still protected and not accesable.

 

Does anyone have any idea how to get access or unprotect these online files?

 

Already tried with a support case via Microsoft but that hasnt helped a bit.

7 Replies
I suppose you're talking about the legacy SharePoint IRM feature here. I haven't used that but as IRM uses Azure Rights Management I'm thinking you might be able to use any of these permissions.

Export or Full control, rights management issuer/owner or for sure the super user feature.

You could try this cmdlet too as SharePoint or Global admin
Unlock-SPOSensitivityLabelEncryptedFile

https://docs.microsoft.com/en-us/powershell/module/sharepoint-online/unlock-sposensitivitylabelencry...
Hi Christian,

Thanks for your suggestions but the Unlock-SPOSensitivityLabelEncryptedFile doesnt change a thing.
Also the Unprotect-RMSfiles didnt help us.

Anyone with any other suggestion?
Super user will do it. If not, I have no idea and you better reach out to the official support.

https://docs.microsoft.com/en-us/azure/information-protection/configure-super-users
What do you mean by Super User will do it? I executed all commands from a global admin account.

Read the article. Global admin won't solve anything if it's not enabled.

Sorry ;)

SuperUser looks like the way the go but how can i execute a set-aiplabel command against a sharepoint online path/location? Or do i have to download or connect over webdav to execute such?
As documented you cannot use SPO path or webdav.. so I suppose you need to move those files elsewhere, especially if there are many. You can look at the -Path parameter to see what's supported. Good luck!