Basic FAQ about SHIELD DRM
Service Related
Q1. What is SHIELD DRM?
A cloud-native DRM (Digital Rights Management) service that provides document security optimized for the Microsoft 365 environment. It automatically converts existing DRM documents into AIP (Azure Information Protection) documents, enabling cloud collaboration (viewing/editing/co-authoring).
Q2. What are the main features?
- Providing compatibility through DRM ↔ AIP conversion (including BYOK/HYOK)
- Optimization of cloud collaboration tools such as Teams, OneDrive, and SharePoint integration
- Policy Linkage and Operational Visibility (Linkage of Policy Establishment and Application)
Q3. What is the actual usage flow?
When you upload a file to Teams/OneDrive/SharePoint, an AIP label is automatically applied after a certain period of time. Once applied, the modifier will show 'SharePoint app', and 'Protected by SHIELD DRM' will be displayed at the bottom of the document. DRM documents can also be uploaded and used immediately without being released.
Q4. What should be prepared before the introduction?
(1) Administrator Permissions/License (Global Administrator·E3 Recommended) (2) AIP Label Creation/Publication (3) Check Tenant Name (4) Security365 Portal Subscription/Setup (5) Firewall Allowed URL Registration Required
Q5. What is Microsoft Throttling and what impact does it have?
Throttling is a mechanism by which Microsoft applies rate limiting to API requests, queries, networks, etc., for service stability and fair usage. Since it may be limited during bulk processing/bursts, operational considerations such as retry and backoff strategies are necessary.
Q6. SharePoint Add-In is being discontinued, how should we respond?
Microsoft will terminate ACS (Azure Access Control Service) and SharePoint Add-In on 2026-04-02. Accordingly, it is necessary to switch to the Event Receiver method, and the migration procedure on the SHIELD DRM admin page will transition to (check → consent → execute).
Authentication/Integration
Q7. Where can I find the 'App credentials (App ID + App Secret)', and how do I apply them in the DS management console?
Copy the security token combined with the App ID and App Secret displayed in the Admin Page → Settings → App Credentials, and use it in the custom policy of the DS management console.s365_app_dataIt is used by pasting into the item.
- Applicable Version (DS Console Module)
SCPD_DS365.dll6.0.3.24 or higherSCPD_DS36564.dll6.0.3.24 or higher
Reference link
- Mandatory checks before introduction →Preparation Requirements
- Actual Usage Procedure →Usage Instructions
- Operational Issues →MS Throttling Guide
- Response to Policy ChangesMigration Guide