What is the role required for implementing AIP in Office 365 . Is security admin role is sufficient for implementing AIP, for installing unified labeling clients and scanners? Automated classification and labeling solution including protection. Please also mention if we need any add on roles like compliance reader role?