In the IRM policy settings in a document library in SharePoint Online there is an option to "Allow Group Protection".
From what I know of the IRM settings they apply to all document within a document library where the settings are turned on.
But with this "Allow Group Protection" it seems to mean that you can target a specific AD group only with the IRM settings but I cannot find any clear documentation on what it actually does but I did find the link below which is also not clear as it seems to say that by adding a group in there you can share with that group.
In my scenario I have an external group which we want to keep restricted but do not want to apply the IRM settings to our internal users who use the documents in that document library.
Can somebody bring some clarity to this setting?