{"id":"e9307842-a592-4ef0-baee-eb942680fa24","shortId":"DW2gXb","kind":"skill","title":"azure-information-protection","tagline":"Expert knowledge for Azure Information Protection development including best practices, decision making, configuration, and deployment. Use when choosing Azure RMS vs AD RMS, migrating keys/policies, configuring RMS connector/MSIPC, or monitoring RMS logs, and other Azure Informa","description":"# Azure Information Protection Skill\n\nThis skill provides expert guidance for Azure Information Protection. Covers best practices, decision making, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Best Practices | L32-L36 | Monitoring and troubleshooting Azure RMS connector health, tracking Azure Rights Management usage, and interpreting logs/metrics for ongoing protection service reliability. |\n| Decision Making | L37-L41 | Guidance on choosing between Azure Rights Management and on-premises AD RMS, including feature, deployment, security, and migration considerations. |\n| Configuration | L42-L46 | Configuring and deploying the Windows RMS (MSIPC) client and setting required registry values for RMS connectors on servers for Azure Information Protection. |\n| Deployment | L47-L61 | Deploying the RMS connector and step-by-step guidance for migrating on-prem AD RMS (keys and policies) to Azure Information Protection, including HSM and software key migration. |\n\n### Best Practices\n| Topic | URL |\n|-------|-----|\n| Monitor RMS connector health and Azure RMS usage | https://learn.microsoft.com/en-us/azure/information-protection/monitor-rms-connector |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Decide between Azure Rights Management and AD RMS | https://learn.microsoft.com/en-us/azure/information-protection/compare-on-premise |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Configure RMS connector registry settings on servers | https://learn.microsoft.com/en-us/azure/information-protection/rms-connector-registry-settings |\n\n### Deployment\n| Topic | URL |\n|-------|-----|\n| Configure on-premises servers to use the RMS connector | https://learn.microsoft.com/en-us/azure/information-protection/configure-servers-rms-connector |\n| Deploy Microsoft Rights Management connector for on-premises servers | https://learn.microsoft.com/en-us/azure/information-protection/deploy-rms-connector |\n| Install and configure the RMS connector for AIP | https://learn.microsoft.com/en-us/azure/information-protection/install-configure-rms-connector |\n| Prepare environment for Phase 1 AD RMS to AIP migration | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase1 |\n| Execute Phase 2 of AD RMS to AIP migration | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase2 |\n| Complete Phase 3 of AD RMS to AIP migration | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase3 |\n| Run Phase 4 tasks for AD RMS to AIP migration | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase4 |\n| Finalize Phase 5 of AD RMS to AIP migration | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase5 |\n| Migrate AD RMS deployments to Azure Information Protection | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-to-azure-rms |\n| Migrate HSM-protected AD RMS key to AIP HSM key | https://learn.microsoft.com/en-us/azure/information-protection/migrate-hsmkey-to-hsmkey |\n| Migrate software-protected AD RMS key to AIP HSM key | https://learn.microsoft.com/en-us/azure/information-protection/migrate-softwarekey-to-hsmkey |\n| Migrate software-protected AD RMS key to AIP software key | https://learn.microsoft.com/en-us/azure/information-protection/migrate-softwarekey-to-softwarekey |","tags":["azure","information","protection","agent","skills","microsoftdocs","agent-skills","agentic-skills","agentskill","ai-agents","ai-coding","azure-functions"],"capabilities":["skill","source-microsoftdocs","skill-azure-information-protection","topic-agent","topic-agent-skills","topic-agentic-skills","topic-agentskill","topic-ai-agents","topic-ai-coding","topic-azure","topic-azure-functions","topic-azure-kubernetes-service","topic-azure-openai","topic-azure-sql-database","topic-azure-storage"],"categories":["Agent-Skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-information-protection","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add MicrosoftDocs/Agent-Skills","source_repo":"https://github.com/MicrosoftDocs/Agent-Skills","install_from":"skills.sh"}},"qualityScore":"0.700","qualityRationale":"deterministic score 0.70 from registry signals: · indexed on github topic:agent-skills · 549 github stars · SKILL.md body (4,505 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T18:53:54.352Z","embedding":null,"createdAt":"2026-04-18T21:59:14.575Z","updatedAt":"2026-05-18T18:53:54.352Z","lastSeenAt":"2026-05-18T18:53:54.352Z","tsv":"'/en-us/azure/information-protection/compare-on-premise':348 '/en-us/azure/information-protection/configure-servers-rms-connector':377 '/en-us/azure/information-protection/deploy-rms-connector':390 '/en-us/azure/information-protection/install-configure-rms-connector':401 '/en-us/azure/information-protection/migrate-from-ad-rms-phase1':414 '/en-us/azure/information-protection/migrate-from-ad-rms-phase2':426 '/en-us/azure/information-protection/migrate-from-ad-rms-phase3':438 '/en-us/azure/information-protection/migrate-from-ad-rms-phase4':451 '/en-us/azure/information-protection/migrate-from-ad-rms-phase5':463 '/en-us/azure/information-protection/migrate-from-ad-rms-to-azure-rms':474 '/en-us/azure/information-protection/migrate-hsmkey-to-hsmkey':488 '/en-us/azure/information-protection/migrate-softwarekey-to-hsmkey':502 '/en-us/azure/information-protection/migrate-softwarekey-to-softwarekey':516 '/en-us/azure/information-protection/monitor-rms-connector':333 '/en-us/azure/information-protection/rms-connector-registry-settings':361 '/microsoftdocs/mcp/blob/main/readme.md)':161 '1':406 '2':417 '3':132,429 '4':441 '5':454 'accept':200 'access':166 'ad':26,250,304,344,407,419,431,444,456,465,479,493,507 'agent':81,125,184,198 'aip':398,410,422,434,447,459,483,497,511 'avail':151 'azur':2,8,23,39,41,51,217,222,243,282,310,328,340,469 'azure-information-protect':1 'best':13,55,209,319 'capabl':73 'categori':84,92,108,204,206 'choos':22,241 'client':270 'combin':63 'complet':427 'configur':17,30,59,259,263,349,352,365,393 'connector':219,278,292,325,354,374,382,396 'connector/msipc':32 'consider':258 'content':68,170 'cover':54 'decid':338 'decis':15,57,234,334 'deploy':19,61,254,265,285,289,362,378,467 'descript':208 'develop':11 'doc':176 'document':71,169 'e.g':96,112 'environ':403 'execut':415 'expert':5,48 'fallback':188 'featur':253 'fetch':72,168,177,190 'file':102,110,117,122 'final':452 'github.com':160 'github.com/microsoftdocs/mcp/blob/main/readme.md)':159 'guid':158 'guidanc':49,239,298 'health':220,326 'hsm':314,477,484,498 'hsm-protect':476 'import':79,123 'includ':12,252,313 'index':85,205 'inform':3,9,42,52,283,311,470 'informa':40 'instal':155,157,391 'interpret':227 'key':306,317,481,485,495,499,509,513 'keys/policies':29 'knowledg':6 'l120':99 'l32':212 'l32-l36':211 'l35':98 'l35-l120':97 'l36':213 'l37':237 'l37-l41':236 'l41':238 'l42':261 'l42-l46':260 'l46':262 'l47':287 'l47-l61':286 'l61':288 'latest':140 'learn':183,197 'learn-agent-skil':182,196 'learn.microsoft.com':332,347,360,376,389,400,413,425,437,450,462,473,487,501,515 'learn.microsoft.com/en-us/azure/information-protection/compare-on-premise':346 'learn.microsoft.com/en-us/azure/information-protection/configure-servers-rms-connector':375 'learn.microsoft.com/en-us/azure/information-protection/deploy-rms-connector':388 'learn.microsoft.com/en-us/azure/information-protection/install-configure-rms-connector':399 'learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase1':412 'learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase2':424 'learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase3':436 'learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase4':449 'learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase5':461 'learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-to-azure-rms':472 'learn.microsoft.com/en-us/azure/information-protection/migrate-hsmkey-to-hsmkey':486 'learn.microsoft.com/en-us/azure/information-protection/migrate-softwarekey-to-hsmkey':500 'learn.microsoft.com/en-us/azure/information-protection/migrate-softwarekey-to-softwarekey':514 'learn.microsoft.com/en-us/azure/information-protection/monitor-rms-connector':331 'learn.microsoft.com/en-us/azure/information-protection/rms-connector-registry-settings':359 'line':94,106,207 'link':111,120 'local':64 'locat':88 'log':36 'logs/metrics':228 'make':16,58,235,335 'manag':224,245,342,381 'markdown':187,203 'mcp':146,173 'metadata.generated':127 'microsoft':175,379 'microsoftdoc':147,174 'migrat':28,257,300,318,411,423,435,448,460,464,475,489,503 'monitor':34,214,323 'month':133 'msipc':269 'network':165 'old':134 'on-prem':301 'on-premis':247,366,384 'ongo':230 'phase':405,416,428,440,453 'polici':308 'practic':14,56,210,320 'prefer':171 'prem':303 'premis':249,368,386 'prepar':402 'protect':4,10,43,53,231,284,312,471,478,492,506 'provid':47 'pull':138 'queri':179,193 'quick':66 'quick-refer':65 'rang':95 'read':101,116 'refer':67,121 'registri':274,355 'relev':89 'reliabl':233 'remot':70 'repositori':144 'requir':164,273 'return':186,202 'right':223,244,341,380 'rms':24,27,31,35,218,251,268,277,291,305,324,329,345,353,373,395,408,420,432,445,457,466,480,494,508 'run':439 'section':90 'secur':255 'security.md':113,114 'server':280,358,369,387 'servic':232 'set':272,356 'skill':44,46,78,163,185,199 'skill-azure-information-protection' 'softwar':316,491,505,512 'software-protect':490,504 'source-microsoftdocs' 'specifi':105 'step':295,297 'step-by-step':294 'string':180,194 'suggest':135,152 'task':442 'text/markdown':201 'tool':148 'topic':321,336,350,363 'topic-agent' 'topic-agent-skills' 'topic-agentic-skills' 'topic-agentskill' 'topic-ai-agents' 'topic-ai-coding' 'topic-azure' 'topic-azure-functions' 'topic-azure-kubernetes-service' 'topic-azure-openai' 'topic-azure-sql-database' 'topic-azure-storage' 'track':221 'troubleshoot':216 'url':322,337,351,364 'usag':225,330 'use':20,76,82,100,115,172,189,371 'user':137,154 'valu':275 'version':141 'vs':25 'webpag':191 'window':267","prices":[{"id":"7ccbc3f9-8451-460c-b551-8b39a4a3e1ba","listingId":"e9307842-a592-4ef0-baee-eb942680fa24","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"MicrosoftDocs","category":"Agent-Skills","install_from":"skills.sh"},"createdAt":"2026-04-18T21:59:14.575Z"}],"sources":[{"listingId":"e9307842-a592-4ef0-baee-eb942680fa24","source":"github","sourceId":"MicrosoftDocs/Agent-Skills/azure-information-protection","sourceUrl":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-information-protection","isPrimary":false,"firstSeenAt":"2026-04-18T21:59:14.575Z","lastSeenAt":"2026-05-18T18:53:54.352Z"}],"details":{"listingId":"e9307842-a592-4ef0-baee-eb942680fa24","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"MicrosoftDocs","slug":"azure-information-protection","github":{"repo":"MicrosoftDocs/Agent-Skills","stars":549,"topics":["agent","agent-skills","agentic-skills","agentskill","ai","ai-agents","ai-coding","azure","azure-functions","azure-kubernetes-service","azure-openai","azure-sql-database","azure-storage","azure-virtual-machine","claude-code","github-copilot","microsoft-learn","openai-codex","skills"],"license":"cc-by-4.0","html_url":"https://github.com/MicrosoftDocs/Agent-Skills","pushed_at":"2026-05-17T02:50:05Z","description":"Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.","skill_md_sha":"0872ea7b03f4c30f57422ffee1e726371b7b3ee5","skill_md_path":"skills/azure-information-protection/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-information-protection"},"layout":"multi","source":"github","category":"Agent-Skills","frontmatter":{"name":"azure-information-protection","description":"Expert knowledge for Azure Information Protection development including best practices, decision making, configuration, and deployment. Use when choosing Azure RMS vs AD RMS, migrating keys/policies, configuring RMS connector/MSIPC, or monitoring RMS logs, and other Azure Information Protection related development tasks. Not for Azure Key Vault (use azure-key-vault), Azure Security (use azure-security), Azure Defender For Cloud (use azure-defender-for-cloud), Azure Sentinel (use azure-sentinel).","compatibility":"Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation."},"skills_sh_url":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-information-protection"},"updatedAt":"2026-05-18T18:53:54.352Z"}}