We will start with the connection to the Azure RMS service and the management of the super users feature. This feature is disabled by default. To use its functionality, we need to enable the feature and assign a mail-enabled group to it. We highly recommend adding the AIP Scanner account permanently to the group, and all the other required users as and when required. It doesn't matter when the user is added to decrypt information from the past.
The Azure RMS super users feature provides the following functionality in Azure RMS:
- Full control over all rights-protected content that is managed by rights management
- Full owner rights to super users for all user licenses that are issued by the subscriber's organization
- Decryption ...
