We have a SharePoint Online library with IRM enabled. View only in browser, no download, and 99.9999% of staff are seeing it at the permission level of "View Only." The only exception is me (Site Collection Admin) and the person maintaining the library. It is mission-critical stuff.
We just launched the other day, and I'm getting hit with approval requests every time someone wants to share any document using the SHARE tool, even when both sender and recipient have the same rights to it (View Only). So, Employee 1 goes to SHARE the document with Employee 2 (in the sense of "Here's that information you were looking for") and I'm having to approve each time. This doesn't work as a process...they should be able to freely share the document to each other.
I see a setting in IRM for "Allow Group Protection," which SEEMS from what I can read, allow members of a group to share the document with each other. However, I can't select any SharePoint Group for that permission! All of our employees are coming in under the "Team Site Visitors" label. It seems to accept only Active Directory groups.
I do have an AD group with everyone in it, but will A.) adding this group into that box generate some kind of message to everyone (which I do not want to happen), and B.) will this do what I hope, which is to allow employees to freely share documents without me getting involved?
Thanks!