As you know, Azure RMS Premium is part of the Enterprise Mobility Suite. Microsoft Intune and Azure RMS team are coming together to provide more cohesive experiences for your Information workers. Shalini from our team and Max from Intune team are here to explain the first of these join efforts.
RMS sharing app on iOS and Android devices helps you view protected files that others have shared with you. Taking a step further to provide a unified experience to protect your devices, apps and data – the app on Android is now integrated with Intune Mobile Application Management (MAM) capabilities (iOS has built in viewers and thus this is not necessary on that platform).
You can use the new RMS sharing app on Android to view PDF, image and audio/video files from Intune managed applications like Microsoft Outlook. IT can also configure policies for the content viewed through the app, restricting actions such as cut, copy, paste, and “save as” of corporate data between managed and unmanaged apps (ex. personal apps such as Twitter or Facebook). The device doesn’t need to be enrolled for management in order for Intune to manage the app. This is great for BYOD scenarios where employees use their own unenrolled devices for work.
The current RMS sharing app capabilities of view protected PDF, images and text continue to be available in a non-Intune environment.
If you’re interested in learning more about Intune MAM policies in Intune, this article is a great place to start. Here are a few FAQ questions:
Q: Do I need Intune subscription to use the RMS sharing app on Android?
A: The existing capabilities of RMS sharing app do not require Intune subscription. In order to use Intune MAM capabilities for the RMS sharing app, you’ll need an Intune subscription.
Q: Can I continue using the existing Intune viewer apps for PDF, AV and image?
A: You can but we’re in the process of deprecating these viewers. There will be notifications for organizations using these viewer apps. We encourage you to use the RMS sharing app to view PDF, audio/video and image files.
Q: What restrictions can be applied to prevent data loss from this app?
A: Following restrictions can be applied when the RMS sharing app on Android is Intune managed –
- Data relocation: Prevent corporate app data from being transferred to personal apps and locations including backup, copy and paste, and sharing data to other apps or cloud services.
- Screenshots: Prevent user from taking screenshots while in the application on Android. On iOS, this can be configured via device policy.
- Application access: When the user is opens app, require a PIN or corporate credentials to be entered.
Shalini and Max.