You receive an email protected by Information Rights Management in Outlook, but you cannot open it. The message states you lack the necessary permissions or the rights license is invalid. This error occurs when your Outlook client cannot obtain or validate the digital license from the Microsoft 365 service. This article explains how to verify your rights license and resolve common access issues.
Key Takeaways: Fixing IRM Email Access
- File > Info > Manage Protection: Use this menu to verify your current permissions and request new access for a protected email.
- Sign out and back into Office: Refreshes your authentication token, which can resolve a corrupted or expired rights license.
- Control Panel > Programs > Programs and Features > Microsoft Office > Change > Online Repair: Repairs Office components that handle IRM licensing and connectivity.
Why Outlook Cannot Open IRM-Protected Messages
Information Rights Management is a Microsoft 365 feature that encrypts emails and restricts actions like forwarding or printing. To open an IRM-protected message, your Outlook client must download a valid rights license from the Microsoft licensing server. This license is a small digital certificate that proves your identity and defines your permissions for that specific message.
The failure typically happens during this license acquisition process. Your computer might be offline, your Microsoft 365 account credentials could be cached incorrectly, or the licensing service might be temporarily unavailable. The license is also tied to the specific email address you used when the message was sent. If you are trying to open it in a different Outlook profile or on a different device, the license validation can fail.
Prerequisites for IRM to Work
Your organization must have Microsoft 365 or Azure Rights Management services enabled. You must be signed into Outlook with a work or school account from that organization. You need an active internet connection the first time you open a protected message from a specific sender to fetch the license. After the initial download, licenses are cached for offline use.
Steps to Verify and Fix Your IRM Rights License
Follow these steps in order to diagnose and resolve the license error. Start with the simplest verification within Outlook before moving to system-level repairs.
- Check your account and connection
Ensure you are connected to the internet. In Outlook, go to File > Account Settings. Verify the account listed is the correct work or school account. Select it and click Repair if the status shows any issues. - Verify permissions on the specific email
Select the IRM-protected email in your inbox. Go to the File tab on the ribbon, then select Info. In the Protect section, click Manage Protection. A dialog will show your current permission level. If it shows an error, click the button to request new permissions. - Sign out and back into Office
Close Outlook completely. Open any other Office app like Word. Go to File > Account and click Sign Out. Close the app, restart your computer, then open Word and sign back in with your work account. Finally, reopen Outlook and try the email again. - Run the Office Online Repair tool
Close all Office applications. Open the Windows Start menu, type “Control Panel,” and open it. Go to Programs > Programs and Features. Find your Microsoft 365 installation in the list, select it, and click Change. In the window that opens, select Online Repair and then click Repair. This process will fix corrupted IRM components.
Using the Microsoft Support and Recovery Assistant
If the manual steps do not work, download and run the Microsoft Support and Recovery Assistant. Select Outlook as the product and choose “I can’t open an email protected by IRM” as the scenario. The tool will automatically diagnose licensing, account, and Outlook configuration problems.
If Outlook Still Cannot Open the IRM Email
After trying the core steps, specific failure patterns may require targeted fixes.
“Your organization’s policies do not allow you to view this message”
This error means your account is not authorized for the specific protection template used. Contact the person who sent the email and ask them to verify your email address is correct. Alternatively, ask your IT department to confirm your account is included in the Azure Rights Management user group for that policy.
IRM email opens but all options are grayed out
You have successfully obtained a license, but it is a “view-only” license. This is intended behavior set by the sender. You cannot reply, forward, or print. To gain different permissions, you must contact the original sender and ask them to send a new message with expanded rights.
Error occurs only on one computer or device
The license is cached per device. If it works on your phone but not your desktop, the desktop cache is likely corrupted. Use the Outlook desktop app’s built-in repair: Go to File > Office Account. Under Office Updates, select Update Options > Repair. Choose Quick Repair first, then try the email again.
IRM License Verification Methods Compared
| Item | Manual Verification in Outlook | Automated Repair via SaRA Tool |
|---|---|---|
| Primary Use Case | Quick check for a single problematic email | Diagnosing persistent, complex license failures |
| Time Required | 1-2 minutes | 10-15 minutes for full scan |
| User Skill Level | Basic Outlook navigation | Ability to download and run a support tool |
| Scope of Fix | Refreshes license for selected message only | Resets account credentials, repairs Office, clears global license cache |
| Internet Required | Yes, to contact licensing service | Yes, to download tool and validate account |
You can now verify and fix rights license errors for IRM-protected emails in Outlook. Start by using the Manage Protection feature in the File menu to request new permissions. If the problem affects multiple messages, run the Office Online Repair tool from the Windows Control Panel. For advanced troubleshooting, use the Windows Event Viewer to check for errors from the source “MSIPC” which indicate Rights Management client failures.