Restrict users from downloading, printing, and opening in client application.

A) Firstly we configured IRM on your OneDrive for Business default library.

Adding an IRM policy to a library

You can use IRM to help control and protect files that are downloaded from lists or libraries.

1.  Navigate to the library/list you want to configure IRM

2.  On the ribbon, click the Library tab, and then click Library Settings (If you are working in a list, click the List tab, and then click List Settings).

3.  Under Permissions and Management, click Information Rights Management. 

If the Information Rights Management link does not appear, IRM might not be enabled for your site.

4.  On the Information Rights Management Settings page, select the Restrict permission to documents in this library on download check box to apply restricted permission to documents that are downloaded from this list or library.

We simply gave the policy title and added policy description, clicked on okay.

B) Secondly we checked there were no view permission on your personal site. We created custom view only permission by following the below steps:

Settings > Site Settings > Site Permissions > Permission level  > Add Permission level

C) To change permission for that file we followed the below steps:

-Click on file / folder

-Click on information panel

-Click on advanced

-Click on grant user permission

-Click on Show options and choose the "view only" permission

D)To restrict user from sharing Post Approval from Administrator:

- Go to Settings > Site Settings > Site Permissions

- Click on Access Request Settings > and Select only 'Allow access requests'

- Which allowed users to share however the email invitation will be sent to user post approval of Administrator from (Settings > Site Settings >Access Request and Invitations.)