You have a Microsoft 365 subscription. You plan to enable Microsoft Azure Information Protection. You need to ensure that only the members of a group named PilotUsers can protect content. What…

The correct answer is D. Run the Set-AadrmOnboardingControlPolicy cmdlet. If you don't want all users to be able to protect documents and emails immediately by using Azure Rights Management, you can configure user onboarding controls by using the Set- AadrmOnboardingControlPolicy…

Submitted by salim_om· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

You have a Microsoft 365 subscription. You plan to enable Microsoft Azure Information Protection. You need to ensure that only the members of a group named PilotUsers can protect content. What should you do?

Options

ARun the Add-AadrmRoleBasedAdministrator cmdlet.
BCreate an Azure Information Protection policy.
CConfigure the protection activation status for Azure Information Protection.
DRun the Set-AadrmOnboardingControlPolicy cmdlet.

How the community answered

(57 responses)

A
12% (7)
B
26% (15)
C
5% (3)
D
56% (32)

Explanation

If you don't want all users to be able to protect documents and emails immediately by using Azure Rights Management, you can configure user onboarding controls by using the Set- AadrmOnboardingControlPolicy https://docs.microsoft.com/en-us/azure/information-protection/activate-service

Topics

#AIP scoped protection#Group-based access#AADRM policy#Onboarding control

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice