The AIP Super User feature in AIP is needed in scenarios where access to a protected document is needed but the person who protected it has left the organisation. Super Users can give themselves full control permissions on protected documents. Global Administrators can assign the Super User feature.
-
First connect to Azure Rights Management
Connect-AadrmService
-
Check if the superuser feature is enabled
Get-AadrmSuperUserFeature
The result will be true or false as shown below
-
Check members of the Rights Management Role
Get-AadrmRoleBasedAdministrator
-
Check who has been assigned the Super User role
Get-AadrmSuperUser
-
Enable Super User feature
Enable-AadrmSuperUserFeature
-
Add a user as a super user
Add-AadrmSuperUser -EmailAddress “firstname.lastname@securecloud365.com”
-
Unprotect a file
Unprotect-RMSFile -File “C:\protectedfile.docx” -OutputFolder “C:\output”
