# Azure Rights Management service is activated
The Azure Rights Management service provides the foundational encryption and access control technology for Microsoft Purview Information Protection.
Source: https://maester.dev/docs/tests/ZTA.35024
## Overview
The Azure Rights Management service provides the foundational encryption and access control technology for Microsoft Purview Information Protection. It's used with sensitivity labels that apply encryption, protects emails with Microsoft Purview Message Encryption, and even used with the older protection technologies such as SharePoint IRM and mail flow rules that apply encryption. This service should be activated for the tenant before you configure any other information protection features.
## Remediation
- [Activate the Azure Rights Management service](https://learn.microsoft.com/purview/activate-rights-management-service?wt.mc_id=zerotrustrecommendations_automation_content_cnl_csasci)
## Run it
The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:
```powershell
Install-Module ZeroTrustAssessment -Scope CurrentUser
Connect-Maester
Invoke-Maester -Pack ZTA -SkipBuiltIn
```
Leave out `-SkipBuiltIn` to run Maester's own checks in the same run.
About this check
| | |
| --- | --- |
| Severity | High |
| Effort to fix | Low |
| Impact on users | High |
| Pillar | Data, AI |
| Category | Rights Management Service |
| Product | [Purview](/docs/tests/products/purview) |
| Feature | Information protection |
| Area | Data protection |
| Licence | RMS_S_PREMIUM, Microsoft 365 E3 |
| Tenant | Workforce |
Product, feature, area and ATT&CK are Maester's: the assessment does not record them, so Maester keeps them in the pack's `taxonomy.json`.