In the IRM policy settings in a document library in SharePoint Online there is an option to "Allow Group Protection".

From what I know of the IRM settings they apply to all document within a document library where the settings are turned on.

But with this "Allow Group Protection" it seems to mean that you can target a specific AD group only with the IRM settings but I cannot find any clear documentation on what it actually does but I did find the link below which is also not clear as it seems to say that by adding a group in there you can share with that group.

In my scenario I have an external group which we want to keep restricted but do not want to apply the IRM settings to our internal users who use the documents in that document library.


Can somebody bring some clarity to this setting?

1 Answer 1


The “allow Group Protection” allow members of an AD group to share the document with each other.

To restricted external users but internal users to use the documents in the document library, I recommend you to disable external sharing in Office 365 and SharePoint site.

More information check the article: External Users with SharePoint Online in Office 365

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.