Script to locate IRM enabled Library within SharePoint sites

Question

I have found that IRM is enabled at the tenant level for SharePoint sites. Is there a script that can be used to determine which sites/libraries/documents have IRM enabled? The other script posted here calls for loading SharePoint CSOM Assemblies. Not sure how to do that.

Accepted Answer

Hi @jpcapone ,

I Got you.

My test environment also has MFA enabled. You can try my steps:

Run PowerShell 7.x as an administrator.
Register an App for PnP PowerShell and get the Client Id:

Register-PnPEntraIDAppForInteractiveLogin -ApplicationName "PnP PowerShell" -SharePointDelegatePermissions "AllSites.FullControl" -Tenant domain.onmicrosoft.com -Interactive

For more details, please see:

https://www.sharepointdiary.com/2021/02/how-to-install-pnp-powershell-module-for-sharepoint-online.html#step-3-register-a-new-azure-ad-application-and-grant-access-to-the-tenant

Non-official, just for reference.

Use the Client Id to connect to SharePoint Online:

# Parameter
$TenantAdminUrl = "https://domain-admin.sharepoint.com"
$ClientID = "clientidstring"

# Connect to Admin Center
Connect-PnPOnline -Url $TenantAdminUrl -Interactive -ClientId $ClientID

#Get All Site collections - Exclude: Seach Center, Redirect site, Mysite Host, App Catalog, Content Type Hub, eDiscovery and Bot Sites
$SiteCollections = Get-PnPTenantSite | Where -Property Template -NotIn ("SRCHCEN#0", "REDIRECTSITE#0", "SPSMSITEHOST#0", "APPCATALOG#0", "POINTPUBLISHINGHUB#0", "EDISC#0", "STS#-1")
    
#Loop through each site collection
ForEach($Site in $SiteCollections)
{
	# Connect to SharePoint
	Connect-PnPOnline -Url $Site.URL -Interactive -ClientId $ClientID   

	# Get all document libraries and lists
	$lists = Get-PnPList

	# Check IRM settings
	foreach ($list in $lists) {
    		if ($list.IrmEnabled) {
        	Write-Host "IRM is enabled in $($Site.Url) for list: $($list.Title)"
		}
	}    
}

Hope this helps.

If the answer is helpful, please click "Accept as Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer

You can leverage the PnP module, which is built on top of CSOM. For example, the Get-PnPListInformationRightsManagement cmdlet will tell you the IRM status of a given list/library: https://pnp.github.io/powershell/cmdlets/Get-PnPListInformationRightsManagement.html

Answer

Hi @jpcapone ,

Welcome to Q&A forum!

According to my test, you can use the following PowerShell script to get the lists and libraries of IRM-enabled tenants:

# Load SharePoint CSOM Assemblies 
Add-Type -Path "C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\16\ISAPI\Microsoft.SharePoint.Client.dll" 
Add-Type -Path "C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\16\ISAPI\Microsoft.SharePoint.Client.Runtime.dll"

# Parameter
$TenantAdminUrl = "https://domain-admin.sharepoint.com"

# Connect to Admin Center
Connect-PnPOnline -Url $TenantAdminUrl -Interactive 

#Get All Site collections - Exclude: Seach Center, Redirect site, Mysite Host, App Catalog, Content Type Hub, eDiscovery and Bot Sites
$SiteCollections = Get-PnPTenantSite | Where -Property Template -NotIn ("SRCHCEN#0", "REDIRECTSITE#0", "SPSMSITEHOST#0", "APPCATALOG#0", "POINTPUBLISHINGHUB#0", "EDISC#0", "STS#-1")
    
#Loop through each site collection
ForEach($Site in $SiteCollections)
{
	# Connect to SharePoint
	Connect-PnPOnline -Url $Site.URL -Interactive
    
	# Get all document libraries and lists
	$lists = Get-PnPList

	# Check IRM settings
	foreach ($list in $lists) {
    		if ($list.IrmEnabled) {
        	Write-Host "IRM is enabled in $($Site.Url) for list: $($list.Title)"
			}
	}
    
}

And the result:

112101

Good day!

If the answer is helpful, please click "Accept as Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Share via

Script to locate IRM enabled Library within SharePoint sites

3 additional answers

Your answer