You are a Microsoft 365 administrator for a company. Employees use Microsoft Office 365 ProPlus to create documents. You need to implement document classification and protection by using Microsoft Azu

Azure Information Protection requires an Azure subscription linked to your Microsoft 365 tenant. Without an Azure subscription, you cannot activate or configure Azure Information Protection services, as AIP is an Azure-based service that needs subscription-level access.

The Azure Information Protection client is not strictly required when using Office 365 ProPlus, as AIP labeling can be built into Office applications natively or enabled through the default policy without a separate client installation.

Creating a custom policy with the Confidential label is unnecessary because the default Azure Information Protection policy already includes a Confidential label, making this step redundant.

The default Azure Information Protection policy includes pre-configured labels such as Personal, Public, General, Confidential, and Highly Confidential, which provide immediate classification and protection capabilities. Enabling this default policy is the quickest and most appropriate way to implement document classification and protection without needing custom configuration.

The Rights Management Service (RMS) client is not required as a separate installation because the RMS functionality is already integrated into Office 365 ProPlus and Azure Information Protection services.