應用程式如何支援 Azure Rights Management ServiceHow applications support the Azure Rights Management service

*適用于Azure 資訊保護Office 365**Applies to: Azure Information Protection, Office 365*

*適用于AIP 統一標籤用戶端和傳統用戶端。 **Relevant for: AIP unified labeling client and classic client.*

使用下列資訊可協助您瞭解最常使用的使用者應用程式和服務如何從 Azure 資訊保護使用 Azure Rights Management 服務,以協助保護貴組織的檔和電子郵件。Use the following information to help you understand how the most commonly used end-user applications and services can use the Azure Rights Management service from Azure Information Protection to help protect your organization's documents and emails. 這些應用程式包括 Word、Excel、PowerPoint 及 Outlook。These applications include Word, Excel, PowerPoint, and Outlook. 這些服務包括 Exchange 和 Microsoft SharePoint。The services include Exchange and Microsoft SharePoint.

注意

若要確認 Azure Rights Management 服務支援的應用程式與版本,請參閱支援 Azure Rights Management 資料保護的應用程式To verify the applications and versions that the Azure Rights Management service supports, see Applications that support Azure Rights Management data protection.

在某些情況下,Azure Rights Management Service 會根據系統管理員設定的原則自動套用保護。In some cases, the Azure Rights Management service automatically applies protection, according to policies that administrators configure. 例如,SharePoint 文件庫和 Exchange 傳輸規則就是這樣的情況。For example, this is the case with SharePoint libraries and Exchange transport rules. 在其他情況下,使用者必須從他們的應用程式自行套用保護。In other cases, end users must apply the protection themselves from their applications. 例如,使用者選取設定為套用保護的分類標籤,或是他們選取範本或選取特定選項。For example, users select a classification label that is configured to apply protection, or they select a template, or select specific options. 由使用者套用的保護常見於使用者保護要分享的檔案,同時針對選取的使用者或組織外部使用者限制存取或使用時。Protection that is applied by users is typical when users protect a file to share and they also restrict access or usage to selected users or to users outside the organization.

範本可讓使用者 (和設定原則的系統管理員) 更容易套用正確的保護層級,以及對貴組織內部的人員限制存取。Templates make it easier for users (and administrators who configure policies) to apply the correct level of protection and restrict access to people inside your organization. 雖然 Azure Rights Management Service 隨附兩個預設範本,但是您可能會想要建立自訂範本,以縮減使用者和系統管理員必須指定個別選項的時間。Although the Azure Rights Management service comes with two default templates, you probably want to create custom templates to reduce the times when users and administrators have to specify individual options. 如需範本的詳細資訊,請參閱設定及管理 Azure 資訊保護的範本For more information about templates, see Configuring and managing templates for Azure Information Protection.

針對使用者必須自行套用保護的情況,請務必提供他們如何及何時套用保護的指示和指導。For the cases where users must apply the protection themselves, be sure to provide them with instructions and guidance how and when to do this. 請提供使用者使用的應用程式和版本,以及如何使用它們的特定指示。Make the instructions specific for the application and versions that they use and how they use them. 同時提供使用者應該如何及何時套用其業務所適用之保護的指導。Also provide guidance for when and how users should apply the protection that is appropriate for your business. 如需詳細資訊,請參閱協助使用者使用 Azure Rights Management 服務來保護檔案For more information, see Helping users to protect files by using the Azure Rights Management service.

如需如何設定 Azure 資訊保護之 Azure Rights Management 服務應用程式的資訊,請參閱設定 Azure Rights Management 的應用程式For information about how to configure these applications for the Azure Rights Management service from Azure Information Protection, see Configuring applications for Azure Rights Management.

搜尋服務可以透過不同的方式與 Rights Management 整合。Search services can integrate with Rights Management in different ways. 例如:For example:

  • Exchange Online 和 Exchange Server 使用服務端編製索引,因此使用者的受保護電子郵件會自動顯示在其搜尋結果中。Exchange Online and Exchange Server use service-side indexing so that a user's protected emails are automatically displayed in their search results.

  • Microsoft 365 和 SharePoint Server 中的 SharePoint 只會在下載時將 Rights Management 保護套用至檔案。SharePoint in Microsoft 365 and SharePoint Server apply Rights Management protection to files only on download. 這項實作表示 SharePoint 上的索引和搜尋結果不會受到此文件保護解決方案影響。This implementation means that indexing and search results on SharePoint are not affected by this document protection solution. 不過,如果您有一份文件想要儲存在 SharePoint 中,而且此文件不應該傳回到搜尋結果,請先保護此文件,再將它上傳至 SharePoint。However, if you have a document that you want to store in SharePoint and this document should not be returned in search results, protect the document before uploading it to SharePoint.

  • Windows 桌面搜尋在裝置的不同使用者之間使用共用的索引;因此,為了保持受保護文件中資料的安全,不會對受保護的檔案編製索引。Windows desktop search uses a shared index between different users of the device, so to keep the data in the protected documents secure, it does not index protected files. 這表示,雖然您的搜尋結果不包含您已保護的檔案,但是您可以確保包含機密資料的檔案不會顯示在可能登入電腦的其他使用者的搜尋結果中,或連接到您的電腦。This means that although your search results don't include files that you have protected, you can be assured that your files that contain sensitive data are not displayed in search results for other users who might sign in to your PC, or connect to your PC.

後續步驟Next steps

深入了解下列每個應用程式與服務如何支援 Azure Rights Management 服務:Learn more about how each of the following applications and services supports the Azure Rights Management service: