Skip to content

Commit 07e3e3a

Browse files
authored
Add config info to quarantine release request
Testing this out on our tenant, trying to configure who receives these alerts. Cannot be done in powershell, apparently.
1 parent 8f0208b commit 07e3e3a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

defender-office-365/quarantine-quarantine-notifications.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -82,7 +82,7 @@ The actions that are available for messages in the quarantine notification depen
8282

8383
- **Request release**: Available for messages that were quarantined by features using a quarantine policy with the **Limited access** permission group or the individual **Allow recipients to request a message to be released from quarantine** (_PermissionToRequestRelease_) permission. For example, custom quarantine policies.
8484

85-
Selecting the action opens an informational web page that acknowledges the request to release the message from quarantine (**The message release request has been initiated. The tenant admin will determine if the request should be approved or denied.**). The **Release status** value of the message on the **Email** tab of the **Quarantine** page is **Release requested**.
85+
Selecting the action opens an informational web page that acknowledges the request to release the message from quarantine (**The message release request has been initiated. The tenant admin will determine if the request should be approved or denied.**). The **Release status** value of the message on the **Email** tab of the **Quarantine** page is **Release requested**. The "Request to release quarantined message" is sent by default to the "TenantAdmin" hidden group - all users with admin privileges. This can be configured within **Threat Policies** > **Alert Policies** through the web portal, but configuring via PowerShell cannot be done without an Enterprise license.
8686

8787
- **Block Sender**: Available for messages that were quarantined by features using a custom quarantine policy with the **Block sender** (_PermissionToBlockSender_) permission.
8888

0 commit comments

Comments
 (0)