Turning Aip protection on for a specific security group only fails, if the instructions followed

[kkovago]

Set-AipServiceOnboardingControlPolicy -UseRmsUserLicense $False -SecurityGroupObjectId
fails if everything is followed this page says. The error is:

Set-AipServiceOnboardingControlPolicy : The Azure Information Protection service failed to set tenant user on-boarding
control policy.
The correlation ID is ababb2c6-233a-4662-8f8a-53a0b931037c. Please note and provide this value if asked by support for
it.
At line:1 char:1

• Set-AipServiceOnboardingControlPolicy -UseRmsUserLicense $False -Secu ...

•   + CategoryInfo          : NotSpecified: (:) [Set-AipServiceOnboardingControlPolicy], ApplicationFailedException
    + FullyQualifiedErrorId : NotSpecified,Microsoft.RightsManagementServices.Online.Admin.PowerShell.SetAipServiceOnb
   oardingControlPolicy
  
  

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 1f1e91b8-4dcb-d53f-b07a-05f2c47a636c
• Version Independent ID: 5ae10df9-4624-8f25-7c85-bf717a18f323
• Content: Activating the protection service from Azure Information Protection (AIP)
• Content Source: Azure-RMSDocs/activate-service.md
• Service: information-protection
• Sub-service: azurerms
• GitHub Login: @aashishr
• Microsoft Alias: aashishr