{"id":987517324,"date":"2025-01-09T22:10:12","date_gmt":"2025-01-09T22:10:12","guid":{"rendered":"https:\/\/workspace.trace.pt\/prevent-the-downloading-printing-or-copying-of-files-by-all-users-with-enhanced-irm-for-google-drive-data-loss-prevention\/"},"modified":"2025-01-09T22:10:12","modified_gmt":"2025-01-09T22:10:12","slug":"prevent-the-downloading-printing-or-copying-of-files-by-all-users-with-enhanced-irm-for-google-drive-data-loss-prevention","status":"publish","type":"post","link":"https:\/\/workspace.trace.pt\/en\/prevent-the-downloading-printing-or-copying-of-files-by-all-users-with-enhanced-irm-for-google-drive-data-loss-prevention\/","title":{"rendered":"Prevent the downloading, printing, or copying of files by all users with Enhanced IRM for Google Drive Data-Loss Prevention"},"content":{"rendered":"<h3>What\u2019s changing\u00a0<\/h3>\n<div>Google Drive\u2019s Information Rights Management (IRM) capability protects documents from data exfiltration actions, specifically downloading, printing, and copying. This is useful for making sure that sensitive content is protected from data leakage.\u00a0<\/div>\n<div><\/div>\n<div><\/div>\n<div>Historically, this feature has only been applicable to users with either the \u201cviewer\u201d or \u201ccommenter\u201d role, which has left administrators unable to apply the setting to users with either \u201cowner\u201d or \u201ceditor\u201d roles. To address this, we\u2019re expanding IRM to be applicable to all users, including file editors and owners, when it is applied by a Data Loss Prevention (DLP) rule.\n<\/div>\n<div><\/div>\n<div class=\"separator\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjK8Wmwht_hjBRmWzRcOHzzGi4dK0T3bdZQ3FJD1bsgKlWzglqbljzUvJwYkCibp8Loyt1vFCqaMRpzw1MJvwEighHaA6H9Zy3XPTVfRuYYMTz9rEFCUplshy1jGCuBX-WdORe88DInTJTrHVaxMdrErQ9OSo9FtOLukrKeSPOH4efzj3phZzHeHohyphenhyphen5Go\/s1211\/irm1.png\"><img decoding=\"async\" border=\"0\" data-original-height=\"349\" data-original-width=\"1211\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjK8Wmwht_hjBRmWzRcOHzzGi4dK0T3bdZQ3FJD1bsgKlWzglqbljzUvJwYkCibp8Loyt1vFCqaMRpzw1MJvwEighHaA6H9Zy3XPTVfRuYYMTz9rEFCUplshy1jGCuBX-WdORe88DInTJTrHVaxMdrErQ9OSo9FtOLukrKeSPOH4efzj3phZzHeHohyphenhyphen5Go\/s16000\/irm1.png\"><\/a><\/div>\n<div class=\"separator\"><i><span>The new Enhanced IRM action, as seen in the DLP Rule creation flow.<\/span><\/i><\/div>\n<div class=\"separator\"><\/div>\n<div class=\"separator\">\n<div><\/div>\n<div><\/div>\n<\/div>\n<div>\n<h3>Additional details<\/h3>\n<div>When an editor or owner is affected by IRM, they will retain the ability to copy and paste document content, but they may only do so within that document. Attempting to paste content outside of the document will not succeed. For more information, please refer to the help center content.<\/div>\n<div><\/div>\n<div><\/div>\n<h3>Getting started<\/h3>\n<div>\n<ul>\n<li><b>Admins: <\/b>DLP rules and CAA levels are applied per-file based on <a href=\"https:\/\/support.google.com\/a\/answer\/13447476#zippy=%2Cexample-block-download-of-sensitive-content-on-a-device-which-is-not-admin-approved-drive-beta\">how these rules are configured<\/a>.<\/li>\n<li><b>End users<\/b>: Only administrators can set IRM for all user roles on a file. File owners may still only set IRM for viewers and commenters. If a file has both an administrator-applied IRM setting and a file owner setting on it, <b>the administrator setting takes priority<\/b>. Once this feature is enabled, all entry points for downloading, printing, and copying will be removed from Google Drive, Docs, Sheets, and Slides on all platforms. Visit the Help Center to learn more about <a href=\"https:\/\/support.google.com\/docs\/answer\/2494893\">stopping, limiting, or changing how your files are shared<\/a>.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div>\n<div class=\"separator\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhVCZWs4ATgV9J7Si8iY5Dw3YehJ3awpkw1B3MP1ERlwshuXoR1vVkGvCtK0eCq6QaTkFiKM25Djd8QeWpUejtfTgNqYMNy2R5w7waqmGsBrxthEkb1NmHwb7qvhkzg8UzUHotT9QiNeIUZmvPnVGDx1Cs-9Bt9ZVUViDwfp8s6EHdZdArhymjUOTtwA4I\/s897\/irm2.png\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" data-original-height=\"423\" data-original-width=\"897\" height=\"302\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhVCZWs4ATgV9J7Si8iY5Dw3YehJ3awpkw1B3MP1ERlwshuXoR1vVkGvCtK0eCq6QaTkFiKM25Djd8QeWpUejtfTgNqYMNy2R5w7waqmGsBrxthEkb1NmHwb7qvhkzg8UzUHotT9QiNeIUZmvPnVGDx1Cs-9Bt9ZVUViDwfp8s6EHdZdArhymjUOTtwA4I\/w640-h302\/irm2.png\" width=\"640\"><\/a><\/div>\n<div class=\"separator\"><i><span>A view of the file owner\u2019s IRM setting when an overriding administrator setting is present.<\/span><\/i><\/div>\n<div class=\"separator\">\n<div><\/div>\n<\/div>\n<h3>Rollout pace<\/h3>\n<div>\n<ul>\n<li><a href=\"https:\/\/support.google.com\/a\/answer\/172177\">Rapid and Scheduled Release domains<\/a>: Gradual rollout (up to 15 days for feature visibility) starting on January 9, 2025<\/li>\n<\/ul>\n<\/div>\n<div><\/div>\n<h3>Availability<\/h3>\n<div>\n<ul>\n<li><b>IRM controls<\/b> are available for all Google Workspace customers<\/li>\n<li><b>Data Loss Prevention Rules and Context-Aware Access conditions are available for Google Workspace:<\/b><\/li>\n<ul>\n<li><b>Enterprise<\/b> Standard and Plus<\/li>\n<li><b>Education<\/b> Fundamentals, Standard, Plus, and the Teaching and Learning add-on<\/li>\n<li><b>Frontline<\/b> Standard<\/li>\n<li>Enterprise <b>Essentials <\/b>and\u00a0Enterprise Essentials Plus<\/li>\n<\/ul>\n<\/ul>\n<\/div>\n<div><\/div>\n<h3>Resources<\/h3>\n<div>\n<ul>\n<li><a href=\"https:\/\/support.google.com\/docs\/answer\/2494893\">Google Help: Stop, limit, or change sharing<\/a><\/li>\n<li><a href=\"https:\/\/support.google.com\/drive\/answer\/15697599?hl=en\">Google Drive Help: View security limitations on Google Drive files<\/a><\/li>\n<li><a href=\"https:\/\/support.google.com\/a\/answer\/13447476#zippy=%2Cexample-block-download-of-sensitive-content-on-a-device-which-is-not-admin-approved-drive-beta\">Google Workspace Admin Help: Combine DLP rules with Context-Aware Access conditions<\/a><\/li>\n<li><a href=\"https:\/\/support.google.com\/a\/answer\/9656855?#irmfaq\">Google Workspace Admin Help: Prevent commenters and viewers from downloading, printing, or copying files FAQ<\/a><\/li>\n<li><a href=\"https:\/\/support.google.com\/a\/answer\/12645308?sjid=12873822272074096537-NC\">Google Workspace Admin Help: Control access to apps based on user &amp; device context<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div><\/div>","protected":false},"excerpt":{"rendered":"<p>What\u2019s changing\u00a0 Google Drive\u2019s Information Rights Management (IRM) capability protects documents from data exfiltration actions, specifically downloading, printing, and copying. This is useful for making sure that sensitive content is protected from data leakage.\u00a0 Historically, this feature has only been applicable to users with either the \u201cviewer\u201d or \u201ccommenter\u201d role, which has left administrators unable [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-987517324","post","type-post","status-publish","format-standard","hentry","category-noticias"],"acf":[],"_links":{"self":[{"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/posts\/987517324","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/comments?post=987517324"}],"version-history":[{"count":0,"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/posts\/987517324\/revisions"}],"wp:attachment":[{"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/media?parent=987517324"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/categories?post=987517324"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/tags?post=987517324"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}