Documents can be created to include metadata associated with rights management information that applies to the entire document and/or to one or more applicable sub-portions of the document. When a user places such a document to be scanned on a multi-function device (MFD) in a rights management environment, the MFD recognizes metadata associated with user rights management regarding the document and/or applicable sub-portions. The MFD automatically commences a rights management scheme to authenticate the user to a rights management system, query such system for information and permissions related to the document and/or applicable sub-portions, including deciphering the metadata read from the document, and determine if the user-requested function, such as scanning or copying, is permitted to be undertaken on this document and/or applicable sub-portions by this user on this device at this time. The system automatically executes or aborts the user-requested function based on the imposed rights management scheme.