Skip to content

Commit ce42c05

Browse files
authored
Update quarantine-policies.md
There was a customers' confusion we're seeing is specifically around the built-in AdminOnlyAccessPolicy, which is not editable and has the notification setting hardcoded to “Off”. This means: Admins cannot enable or disable notifications for this policy. End users should never receive notifications if this default policy is applied. The problem arises because the documentation presents notification settings as configurable, which leads some customers to believe this includes the built-in AdminOnlyAccessPolicy. As a result, they open cases wondering why end users receive notifications or asking how to turn them off—when in fact, the default policy doesn’t even allow that. (knowing that by analysis, we can share why users are receiving notifications, based on what is set for this kind of threat SCL level, maybe because it is identified SPAM and he doesn't have the AdminOnly action set for SPAM mails in his custom quarantine policy ) To reduce this confusion, I suggest we consider explicitly stating in documentation that: The default AdminOnlyAccessPolicy is immutable It always has notifications disabled If notifications are needed alongside restricted access, admins should use a custom policy with "No access" and configure notifications accordingly. Discussed with our Beta engineer, Mithun and confirmed to update the documentation with the pulled information
1 parent 4295dde commit ce42c05

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

defender-office-365/quarantine-policies.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -745,6 +745,14 @@ The effect of **No access** permissions (admin only access) on user capabilities
745745
- **Quarantine notifications turned on**:
746746
- **On the Quarantine page**: Quarantined messages are visible to users, but the only available action is :::image type="icon" source="media/m365-cc-sc-view-message-headers-icon.png" border="false"::: [View message headers](quarantine-end-user.md#view-email-message-headers).
747747
- **In quarantine notifications**: Users receive quarantine notifications, but the only available action is **Review message**.
748+
> **Note:**
749+
> 💡 The **default `AdminOnlyAccessPolicy`** is **immutable** and **always has notifications disabled**.
750+
> To enable notifications while maintaining restricted access:
751+
> - **Create a custom quarantine policy**
752+
> - Set **Access: No access**
753+
> - Configure **notifications** as needed
754+
755+
<!-- You may need to use a plugin or CSS styling in your Markdown tool to display this in pink -->
748756

749757
##### Limited access
750758

0 commit comments

Comments
 (0)