Skip to content

Commit 28bd28a

Browse files
authored
Merge pull request #209 from Yebbenbe/patch-3
Add config info to quarantine release request
2 parents cd25afe + d588bee commit 28bd28a

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

defender-office-365/quarantine-quarantine-notifications.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ ms.custom:
2020
- seo-marvel-apr2020
2121
description: Admins can learn about end-user spam notifications for quarantined messages in Exchange Online Protection (EOP).
2222
ms.service: defender-office-365
23-
ms.date: 12/11/2023
23+
ms.date: 03/02/2025
2424
appliesto:
2525
- ✅ <a href="https://learn.microsoft.com/defender-office-365/eop-about" target="_blank">Exchange Online Protection</a>
2626
- ✅ <a href="https://learn.microsoft.com/defender-office-365/mdo-about#defender-for-office-365-plan-1-vs-plan-2-cheat-sheet" target="_blank">Microsoft Defender for Office 365 Plan 1 and Plan 2</a>
@@ -83,6 +83,8 @@ The actions that are available for messages in the quarantine notification depen
8383
- **Request release**: Available for messages that were quarantined by features using a quarantine policy with the **Limited access** permission group or the individual **Allow recipients to request a message to be released from quarantine** (_PermissionToRequestRelease_) permission. For example, custom quarantine policies.
8484

8585
Selecting the action opens an informational web page that acknowledges the request to release the message from quarantine (**The message release request has been initiated. The tenant admin will determine if the request should be approved or denied.**). The **Release status** value of the message on the **Email** tab of the **Quarantine** page is **Release requested**.
86+
87+
By default, release requests are sent to members of the hidden TenantAdmins role group (all users with admin privileges) as configured in the **User requested to release a quarantined message** alert policy on the **Alert policy** page in the Defender portal at <https://security.microsoft.com/alertpoliciesv2>.
8688

8789
- **Block Sender**: Available for messages that were quarantined by features using a custom quarantine policy with the **Block sender** (_PermissionToBlockSender_) permission.
8890

0 commit comments

Comments
 (0)