---
title: Azure Portals | Sittadel Knowledge Base
description: Comprehensive instructions for performing changes in each Azure portal.
---

[Skip to content](https://knowledge.sittadel.com/azure-portals#main-content)

[![Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent copy](https://knowledge.sittadel.com/hs-fs/hubfs/Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent%20copy.png?width=55&height=55&name=Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent%20copy.png)](https://sittadel.com/)

- [About Sittadel](https://sittadel.com/about/)
- [Capabilities](https://sittadel.com/capabilities/microsoft-office365-azure-security/)
  
  Show submenu for Capabilities

    - [Microsoft Security Architecture](https://sittadel.com/capabilities/microsoft-office365-azure-security/)
    - [Detection & Response](https://sittadel.com/capabilities/managed-detection-and-response/)
    - [Employee Training](https://sittadel.com/capabilities/security-awareness-training/)
    - [Security Risk Advisors](https://sittadel.com/capabilities/virtual-information-security-officer/)
- [Resources](https://sittadel.com/resources/)
- [Knowledge Base](https://knowledge.sittadel.com/)

Open main navigation

Close main navigation

- [About Sittadel](https://sittadel.com/about/)
- [Capabilities](https://sittadel.com/capabilities/microsoft-office365-azure-security/)
  
  Show submenu for Capabilities

    - [Microsoft Security Architecture](https://sittadel.com/capabilities/microsoft-office365-azure-security/)
    - [Detection & Response](https://sittadel.com/capabilities/managed-detection-and-response/)
    - [Employee Training](https://sittadel.com/capabilities/security-awareness-training/)
    - [Security Risk Advisors](https://sittadel.com/capabilities/virtual-information-security-officer/)
- [Resources](https://sittadel.com/resources/)
- [Knowledge Base](https://knowledge.sittadel.com/)
- [Get Sittadel](https://sittadel.com/start/)

[Get Sittadel](https://sittadel.com/start/)

 Find answers to your security questions.

- There are no suggestions because the search field is empty.

1. [Sittadel Knowledge Base](https://knowledge.sittadel.com/)
2. [Azure Portals](https://knowledge.sittadel.com/azure-portals)

# Azure Portals

 Comprehensive instructions for performing changes in each Azure portal.

## Entra ID

- [Conditional Access Policy App Exception](https://knowledge.sittadel.com/conditional-access-policy-app-exception)
- [Conditional Access Policy User Exception](https://knowledge.sittadel.com/conditional-access-policy-user-exception)
- [Group Membership Addition](https://knowledge.sittadel.com/group-membership-addition)
- [Group Membership Removal](https://knowledge.sittadel.com/group-membership-removal)
- [External User Account Addition](https://knowledge.sittadel.com/external-user-account-addition)
- [User Account MFA Reset](https://knowledge.sittadel.com/user-account-mfa-reset)
- [User Account Disablement Action](https://knowledge.sittadel.com/user-account-disablement-action)
- [User Account Password Reset](https://knowledge.sittadel.com/user-account-password-reset)
- [User Account Device Removal](https://knowledge.sittadel.com/user-account-device-removal)
- [User PIM Eligibility Addition](https://knowledge.sittadel.com/user-pim-eligibility-addition)
- [User PIM Eligibility Removal](https://knowledge.sittadel.com/user-pim-eligibility-removal)
- [Entra ID Audit Log Report](https://knowledge.sittadel.com/entra-id-audit-log-report)
- [User Sign-In Log Report](https://knowledge.sittadel.com/user-sign-in-log-report)
- [Conditional Access Policy Creation](https://knowledge.sittadel.com/conditional-access-policy-creation)
- [Conditional Access Policy Modification](https://knowledge.sittadel.com/conditional-access-policy-modification)
- [User Account Session Revocation Action](https://knowledge.sittadel.com/user-account-session-revocation-action)
- [Admin Group Membership Removal](https://knowledge.sittadel.com/admin-group-membership-removal)
- [Admin Group Membership Addition](https://knowledge.sittadel.com/admin-group-membership-addition)
- [App Consent Queue](https://knowledge.sittadel.com/app-consent-queue)
- [Cross-Tenant Domain Removal](https://knowledge.sittadel.com/cross-tenant-domain-removal)
- [Entra ID Collaboration Domain Removal](https://knowledge.sittadel.com/entra-id-collaboration-domain-removal)
- [External User Account Removal](https://knowledge.sittadel.com/external-user-account-removal)
- [Cross-Tenant Domain Addition](https://knowledge.sittadel.com/cross-tenant-domain-addition)
- [Cross-Tenant Outbound Domain Removal](https://knowledge.sittadel.com/cross-tenant-outbound-domain-removal)
- [App Consent Queue Approval Action](https://knowledge.sittadel.com/app-consent-queue-approval-action)
- [App Consent Queue Denial Action](https://knowledge.sittadel.com/app-consent-queue-denial-action)
- [Internal User Account Addition](https://knowledge.sittadel.com/internal-user-account-addition)
- [Internal User Account Removal](https://knowledge.sittadel.com/internal-user-account-removal)
- [Banned Password Addition](https://knowledge.sittadel.com/banned-password-addition)
- [Banned Password Removal](https://knowledge.sittadel.com/banned-password-removal)
- [Named Locations Country Addition](https://knowledge.sittadel.com/named-locations-country-addition)
- [Named Locations Country Removal](https://knowledge.sittadel.com/named-locations-country-removal)
- [Identity Protection Confirm Sign-In Compromised Action](https://knowledge.sittadel.com/identity-protection-confirm-sign-in-compromised-action)
- [Identity Protection Confirm Sign-In Safe Action](https://knowledge.sittadel.com/identity-protection-confirm-sign-in-safe-action)
- [Identity Protection Dismiss Sign-In Risk Action](https://knowledge.sittadel.com/identity-protection-dismiss-sign-in-risk-action)
- [Identity Protection Risky Sign-Ins Queue](https://knowledge.sittadel.com/identity-protection-risky-sign-ins-queue)
- [Identity Protection Confirm User Compromised Action](https://knowledge.sittadel.com/identity-protection-confirm-user-compromised-action)
- [Identity Protection Confirm User Safe Action](https://knowledge.sittadel.com/identity-protection-confirm-user-safe-action)
- [Identity Protection Dismiss User Risk Action](https://knowledge.sittadel.com/identity-protection-dismiss-user-risk-action)
- [Identity Protection Reset Password Action](https://knowledge.sittadel.com/identity-protection-reset-password-action)
- [Identity Protection Risky Users Queue](https://knowledge.sittadel.com/identity-protection-risky-users-queue)
- [Identity Protection Unblock User Action](https://knowledge.sittadel.com/identity-protection-unblock-user-action)
- [MFA Registration Campaign Exception](https://knowledge.sittadel.com/mfa-registration-campaign-exception)
- [User Account Enablement Action](https://knowledge.sittadel.com/user-account-enablement-action)
- [User Password Reset Events Report](https://knowledge.sittadel.com/user-password-reset-events-report)
- [User MFA Registration & Reset Events Report](https://knowledge.sittadel.com/user-mfa-registration-reset-events-report)
- [User Terms of Use Events Report](https://knowledge.sittadel.com/user-terms-of-use-events-report)
- [User MFA Deployment Report](https://knowledge.sittadel.com/user-mfa-deployment-report)
- [User MFA Enforcement Report](https://knowledge.sittadel.com/user-mfa-enforcement-report)
- [Conditional Access Enforcement Report](https://knowledge.sittadel.com/conditional-access-enforcement-report)
- [MFA Registration Campaign Modification](https://knowledge.sittadel.com/mfa-registration-campaign-modification)
- [Enterprise Application Removal](https://knowledge.sittadel.com/enterprise-application-removal)
- [MFA Authentication Methods User Removal](https://knowledge.sittadel.com/mfa-authentication-methods-user-removal)
- [Cross-Tenant Inbound Domain Addition](https://knowledge.sittadel.com/cross-tenant-inbound-domain-addition)
- [Cross-Tenant Outbound Domain Addition](https://knowledge.sittadel.com/cross-tenant-outbound-domain-addition)
- [User Login - Sign-in Using TAP](https://knowledge.sittadel.com/user-login-sign-in-using-tap)
- [Enterprise Application Addition](https://knowledge.sittadel.com/enterprise-application-addition)
- [Cross-Tenant Inbound Domain Removal](https://knowledge.sittadel.com/cross-tenant-inbound-domain-removal)
- [Entra ID Collaboration Domain Addition](https://knowledge.sittadel.com/entra-id-collaboration-domain-addition)
- [MFA Authentication Methods User Addition](https://knowledge.sittadel.com/mfa-authentication-methods-user-addition)
- [Identity Protection Block User Action](https://knowledge.sittadel.com/identity-protection-block-user-action)
- [Manage Temporary Access Pass (TAP)](https://knowledge.sittadel.com/manage-temporary-access-pass-tap)

See less ▼

## Intune

- [Configuring a Temporary Access Pass (TAP) for Intune OOBE Onboarding](https://knowledge.sittadel.com/configuring-a-temporary-access-pass-tap-for-intune-oobe-onboarding)
- [Windows LAPS Password Retrieval](https://knowledge.sittadel.com/windows-laps-password-retrieval)
- [Defender Web Filter Policy Creation](https://knowledge.sittadel.com/defender-web-filter-policy-creation)
- [Device Autopilot Reset Action](https://knowledge.sittadel.com/device-autopilot-reset-action)
- [Device Defender Intelligence Update Action](https://knowledge.sittadel.com/device-defender-intelligence-update-action)
- [Device Deletion](https://knowledge.sittadel.com/device-deletion)
- [Device BitLocker Drive Unlock Action](https://knowledge.sittadel.com/device-bitlocker-drive-unlock-action)
- [Device BitLocker Key Rotation Action](https://knowledge.sittadel.com/device-bitlocker-key-rotation-action)
- [Device Full Scan Action](https://knowledge.sittadel.com/device-full-scan-action)
- [Device Admin Approval Action](https://knowledge.sittadel.com/device-admin-approval-action)
- [Device Quick Scan Action](https://knowledge.sittadel.com/device-quick-scan-action)
- [Device Rename Action](https://knowledge.sittadel.com/device-rename-action)
- [Device Restart Action](https://knowledge.sittadel.com/device-restart-action)
- [Device Retire Action](https://knowledge.sittadel.com/device-retire-action)
- [Device Sync Action](https://knowledge.sittadel.com/device-sync-action)
- [Device Wipe Action](https://knowledge.sittadel.com/device-wipe-action)
- [Device Compliance Enforcement Report](https://knowledge.sittadel.com/device-compliance-enforcement-report)
- [Device Configuration Profile Deployment Report](https://knowledge.sittadel.com/device-configuration-profile-deployment-report)
- [Win32 Application Creation](https://knowledge.sittadel.com/win32-application-creation)
- [Win32 Application Modification](https://knowledge.sittadel.com/win32-application-modification)
- [Win32 Application Packaging](https://knowledge.sittadel.com/win32-application-packaging)
- [Attack Surface Reduction Policy Creation](https://knowledge.sittadel.com/attack-surface-reduction-policy-creation)
- [Attack Surface Reduction Policy Modification](https://knowledge.sittadel.com/attack-surface-reduction-policy-modification)
- [Configuration Profile Policy Creation](https://knowledge.sittadel.com/configuration-profile-policy-creation)
- [Configuration Profile Policy Modification](https://knowledge.sittadel.com/configuration-profile-policy-modification)
- [Compliance Policy Modification](https://knowledge.sittadel.com/compliance-policy-modification)
- [Controlled Folder Access Policy Creation](https://knowledge.sittadel.com/controlled-folder-access-policy-creation)
- [Controlled Folder Access Policy Modification](https://knowledge.sittadel.com/controlled-folder-access-policy-modification)
- [Defender Antivirus Policy Creation](https://knowledge.sittadel.com/defender-antivirus-policy-creation)
- [Defender Antivirus Policy Modification](https://knowledge.sittadel.com/defender-antivirus-policy-modification)
- [Firewall Policy Creation](https://knowledge.sittadel.com/firewall-policy-creation)
- [Firewall Policy Modification](https://knowledge.sittadel.com/firewall-policy-modification)
- [BitLocker Policy Modification](https://knowledge.sittadel.com/bitlocker-policy-modification)
- [BitLocker Policy Creation](https://knowledge.sittadel.com/bitlocker-policy-creation)
- [USB Access Policy Creation](https://knowledge.sittadel.com/usb-access-policy-creation)
- [USB Access Policy Modification](https://knowledge.sittadel.com/usb-access-policy-modification)
- [Compliance Policy Creation](https://knowledge.sittadel.com/compliance-policy-creation)
- [Mobile Device Application Protection Policy Creation](https://knowledge.sittadel.com/mobile-device-application-protection-policy-creation)
- [Mobile Device Application Protection Policy Modification](https://knowledge.sittadel.com/mobile-device-application-protection-policy-modification)
- [Defender Attack Surface Reduction Per-Rule Exception](https://knowledge.sittadel.com/defender-attack-surface-reduction-per-rule-exception)
- [Defender Attack Surface Reduction All-Rule Exception](https://knowledge.sittadel.com/defender-attack-surface-reduction-all-rule-exception)
- [Defender Controlled Folder Access Application Exception](https://knowledge.sittadel.com/defender-controlled-folder-access-application-exception)
- [Defender Antivirus Extension Exception](https://knowledge.sittadel.com/defender-antivirus-extension-exception)
- [Defender Antivirus Path Exception](https://knowledge.sittadel.com/defender-antivirus-path-exception)
- [Defender Antivirus Process Exception](https://knowledge.sittadel.com/defender-antivirus-process-exception)
- [Defender Extension Exception (macOS)](https://knowledge.sittadel.com/defender-extension-exception-macos)
- [Defender Path Exception (macOS)](https://knowledge.sittadel.com/defender-path-exception-macos)
- [Defender Process Exception (macOS)](https://knowledge.sittadel.com/defender-process-exception-macos)
- [Device FileVault Drive Unlock Action (macOS)](https://knowledge.sittadel.com/device-filevault-drive-unlock-action-macos)
- [Mobile Device Selective Wipe Action](https://knowledge.sittadel.com/mobile-device-selective-wipe-action)
- [Defender Firewall Rule Addition](https://knowledge.sittadel.com/defender-firewall-rule-addition)
- [Defender Firewall Rule Removal](https://knowledge.sittadel.com/defender-firewall-rule-removal)
- [Defender Controlled Folder Access Folder Addition](https://knowledge.sittadel.com/defender-controlled-folder-access-folder-addition)
- [Defender Controlled Folder Access Folder Removal](https://knowledge.sittadel.com/defender-controlled-folder-access-folder-removal)
- [Browser Extension Addition](https://knowledge.sittadel.com/browser-extension-addition)
- [Browser Extension Removal](https://knowledge.sittadel.com/browser-extension-removal)
- [Browser Bookmark Addition](https://knowledge.sittadel.com/browser-bookmark-addition)
- [Browser Bookmark Removal](https://knowledge.sittadel.com/browser-bookmark-removal)
- [USB Access Device Identifier Rule Addition](https://knowledge.sittadel.com/usb-access-device-identifier-rule-addition)
- [USB Access Setup Class Rule Addition](https://knowledge.sittadel.com/usb-access-setup-class-rule-addition)
- [USB Access Device Instance Identifier Rule Addition](https://knowledge.sittadel.com/usb-access-device-instance-identifier-rule-addition)
- [USB Access Read & Write Allowance](https://knowledge.sittadel.com/usb-access-read-write-allowance)
- [USB Access Write Allowance](https://knowledge.sittadel.com/usb-access-write-allowance)
- [USB Access Write Block](https://knowledge.sittadel.com/usb-access-write-block)
- [USB Access Read & Write Block](https://knowledge.sittadel.com/usb-access-read-write-block)
- [USB Access Rule Removal](https://knowledge.sittadel.com/usb-access-rule-removal)
- [Wi-Fi Network Addition](https://knowledge.sittadel.com/wi-fi-network-addition)
- [Wi-Fi Network Removal](https://knowledge.sittadel.com/wi-fi-network-removal)
- [Intune Audit Log Report](https://knowledge.sittadel.com/intune-audit-log-report)
- [Device Action Events Report](https://knowledge.sittadel.com/device-action-events-report)
- [Mobile Device App Protection Deployment Report](https://knowledge.sittadel.com/mobile-device-app-protection-deployment-report)
- [Defender Antivirus Enforcement Report](https://knowledge.sittadel.com/defender-antivirus-enforcement-report)
- [Defender Antivirus Events Report](https://knowledge.sittadel.com/defender-antivirus-events-report)
- [Defender Firewall Enforcement Report](https://knowledge.sittadel.com/defender-firewall-enforcement-report)
- [Device Application Deployment Report](https://knowledge.sittadel.com/device-application-deployment-report)
- [Device Management Enforcement Report](https://knowledge.sittadel.com/device-management-enforcement-report)
- [Device Autopilot Enforcement Report](https://knowledge.sittadel.com/device-autopilot-enforcement-report)
- [Device Autopilot Events Report](https://knowledge.sittadel.com/device-autopilot-events-report)
- [AutoPilot Deployment Profile Creation](https://knowledge.sittadel.com/autopilot-deployment-profile-creation)
- [Autopilot Deployment Profile Modification](https://knowledge.sittadel.com/autopilot-deployment-profile-modification)
- [Security Baseline Creation](https://knowledge.sittadel.com/security-baseline-creation)
- [Security Baseline Modification](https://knowledge.sittadel.com/security-baseline-modification)
- [Device Fresh Start Action](https://knowledge.sittadel.com/device-fresh-start-action)

See less ▼

## Defender

- [Defender Vulnerability Management Exception Action](https://knowledge.sittadel.com/defender-vulnerability-management-exception-action)
- [Defender Vulnerability Management Remediation Action](https://knowledge.sittadel.com/defender-vulnerability-management-remediation-action)
- [Defender Vulnerability Events Report](https://knowledge.sittadel.com/defender-vulnerability-events-report)
- [Defender Web Filter Events Report](https://knowledge.sittadel.com/defender-web-filter-events-report)
- [Defender for Email Quarantine Release & Allow Action](https://knowledge.sittadel.com/defender-for-email-quarantine-release-and-allow-action)
- [Defender for Email Quarantine Release Action](https://knowledge.sittadel.com/defender-for-email-quarantine-release-action)
- [Defender for Email Tenant Block](https://knowledge.sittadel.com/defender-for-email-tenant-block)
- [Defender for Email File Block](https://knowledge.sittadel.com/defender-for-email-file-block)
- [Defender for Email Policy Anti-Malware Exception](https://knowledge.sittadel.com/defender-for-email-policy-anti-malware-exception)
- [Defender for Email Policy Anti-Phishing Exception](https://knowledge.sittadel.com/defender-for-email-policy-anti-phishing-exception)
- [Defender for Email Policy Anti-Spam Exception](https://knowledge.sittadel.com/defender-for-email-policy-anti-spam-exception)
- [Defender for Email Policy Attachment Scanning Exception](https://knowledge.sittadel.com/defender-for-email-policy-attachment-scanning-exception)
- [Defender for Email Policy URL Scanning Exception](https://knowledge.sittadel.com/defender-for-email-policy-url-scanning-exception)
- [Defender for Email URL Block](https://knowledge.sittadel.com/defender-for-email-url-block)
- [Defender for Email Awareness Training Campaign Creation](https://knowledge.sittadel.com/defender-for-email-awareness-training-campaign-creation)
- [Defender for Email Attack Simulation Campaign Creation](https://knowledge.sittadel.com/defender-for-email-attack-simulation-campaign-creation)
- [Defender for Email DKIM Domain Creation](https://knowledge.sittadel.com/defender-for-email-dkim-domain-creation)
- [Defender Web Filter Policy Modification](https://knowledge.sittadel.com/defender-web-filter-policy-modification)
- [Defender for Email Anti-Malware Policy Creation](https://knowledge.sittadel.com/defender-for-email-anti-malware-policy-creation)
- [Defender for Email Anti-Malware Policy Modification](https://knowledge.sittadel.com/defender-for-email-anti-malware-policy-modification)
- [Defender for Email Anti-Phishing Policy Creation](https://knowledge.sittadel.com/defender-for-email-anti-phishing-policy-creation)
- [Defender for Email Anti-Phishing Policy Modification](https://knowledge.sittadel.com/defender-for-email-anti-phishing-policy-modification)
- [Defender for Email Anti-Spam Policy Creation](https://knowledge.sittadel.com/defender-for-email-anti-spam-policy-creation)
- [Defender for Email Anti-Spam Policy Modification](https://knowledge.sittadel.com/defender-for-email-anti-spam-policy-modification)
- [Defender for Email Attachment Scanning Policy Creation](https://knowledge.sittadel.com/defender-for-email-attachment-scanning-policy-creation)
- [Defender for Email Attachment Scanning Policy Modification](https://knowledge.sittadel.com/defender-for-email-attachment-scanning-policy-modification)
- [Defender for Email Link Scanning Policy Creation](https://knowledge.sittadel.com/defender-for-email-link-scanning-policy-creation)
- [Defender for Email Link Scanning Policy Modification](https://knowledge.sittadel.com/defender-for-email-link-scanning-policy-modification)
- [Defender for Email Block Sender Action](https://knowledge.sittadel.com/defender-for-email-block-sender-action)
- [Defender for Email Attack Simulation Launch Action](https://knowledge.sittadel.com/defender-for-email-attack-simulation-launch-action)
- [Defender for Email Restricted Sender Re-Enable Action](https://knowledge.sittadel.com/defender-for-email-restricted-sender-re-enable-action)
- [Defender for Email High Volume Sender Exception](https://knowledge.sittadel.com/defender-for-email-high-volume-sender-exception)
- [Investigating External Traffic](https://knowledge.sittadel.com/investigating-external-traffic)
- [Investigating Connector Configuration](https://knowledge.sittadel.com/investigating-connector-configuration)
- [Investigating Mail Delivery](https://knowledge.sittadel.com/investigating-mail-delivery)
- [Investigating Reply-All Impact](https://knowledge.sittadel.com/investigating-reply-all-impact)
- [Investigating URL Clicks](https://knowledge.sittadel.com/investigating-url-clicks)
- [Investigating Tenant Wide External Traffic](https://knowledge.sittadel.com/investigating-tenant-wide-external-traffic)
- [Defender for Endpoint App Execution De-Restriction Action](https://knowledge.sittadel.com/defender-for-endpoint-app-execution-de-restriction-action)
- [Defender for Endpoint App Execution Restriction Action](https://knowledge.sittadel.com/defender-for-endpoint-app-execution-restriction-action)
- [Defender for Endpoint De-Isolation Action](https://knowledge.sittadel.com/defender-for-endpoint-de-isolation-action)
- [Defender for Endpoint Isolation Action](https://knowledge.sittadel.com/defender-for-endpoint-isolation-action)
- [Defender for Endpoint Certificate IOC Block](https://knowledge.sittadel.com/defender-for-endpoint-certificate-ioc-block)
- [Defender for Endpoint IP IOC Block](https://knowledge.sittadel.com/defender-for-endpoint-ip-ioc-block)
- [Defender for Endpoint URL/Domain IOC Block](https://knowledge.sittadel.com/defender-for-endpoint-url-domain-ioc-block)
- [Defender for Email Download Message Action](https://knowledge.sittadel.com/defender-for-email-download-message-action)
- [Defender for Email Quarantine Delete Action](https://knowledge.sittadel.com/defender-for-email-quarantine-delete-action)
- [Defender for Email Share Message Action](https://knowledge.sittadel.com/defender-for-email-share-message-action)
- [Defender for Email View Message Headers Action](https://knowledge.sittadel.com/defender-for-email-view-message-headers-action)
- [Defender for Email Alert Queue](https://knowledge.sittadel.com/defender-for-email-alert-queue)
- [Defender for Email Alert Resolved Action](https://knowledge.sittadel.com/defender-for-email-alert-resolved-action)
- [Defender for Email Incident Queue](https://knowledge.sittadel.com/defender-for-email-incident-queue)
- [Defender for Email Incident Resolved Action](https://knowledge.sittadel.com/defender-for-email-incident-resolved-action)
- [Defender for Email User Submission Queue](https://knowledge.sittadel.com/defender-for-email-user-submission-queue)
- [Defender for Email Mark & Notify Spam Action](https://knowledge.sittadel.com/defender-for-email-mark-notify-spam-action)
- [Defender for Email Mark & Notify Phishing Action](https://knowledge.sittadel.com/defender-for-email-mark-notify-phishing-action)
- [Defender for Email Mark & Notify No Threats Action](https://knowledge.sittadel.com/defender-for-email-mark-notify-no-threats-action)
- [Defender for Email Action Center Approval Action](https://knowledge.sittadel.com/defender-for-email-action-center-approval-action)
- [Defender for Email Submit and Block Action](https://knowledge.sittadel.com/defender-for-email-submit-and-block-action)
- [Defender Attack Surface Reduction Events Report](https://knowledge.sittadel.com/defender-attack-surface-reduction-events-report)
- [Defender Device Security Action Center Queue](https://knowledge.sittadel.com/defender-device-security-action-center-queue)
- [Defender Device Security Incident Queue](https://knowledge.sittadel.com/defender-device-security-incident-queue)
- [Defender Device Security Alert Queue](https://knowledge.sittadel.com/defender-device-security-alert-queue)
- [Defender Web Filter Category Allowance](https://knowledge.sittadel.com/defender-web-filter-category-allowance)
- [Defender Web Filter Category Block](https://knowledge.sittadel.com/defender-web-filter-category-block)
- [Defender for Email Spoof Block](https://knowledge.sittadel.com/defender-for-email-spoof-block)
- [Defender for Email Spam Block](https://knowledge.sittadel.com/defender-for-email-spam-block)
- [Defender for Email File Submit and Allow Action](https://knowledge.sittadel.com/defender-for-email-file-submit-and-allow-action)
- [Defender for Email URL Submit and Allow Action](https://knowledge.sittadel.com/defender-for-email-url-submit-and-allow-action)
- [Defender for Email URL Click Events Report](https://knowledge.sittadel.com/defender-for-email-url-click-events-report)
- [Defender for Email Message Delivery Events Report](https://knowledge.sittadel.com/defender-for-email-message-delivery-events-report)
- [Defender for Email DKIM Domain Modification](https://knowledge.sittadel.com/defender-for-email-dkim-domain-modification)
- [Defender for Email DKIM Domain Removal](https://knowledge.sittadel.com/defender-for-email-dkim-domain-removal)
- [Defender for Email Impersonation Allowance](https://knowledge.sittadel.com/defender-for-email-impersonation-allowance)
- [Defender Alert Report](https://knowledge.sittadel.com/defender-alert-report)
- [Defender Incident Report](https://knowledge.sittadel.com/defender-incident-report)
- [Defender Firewall Events Report](https://knowledge.sittadel.com/defender-firewall-events-report)
- [Defender USB Events Report](https://knowledge.sittadel.com/defender-usb-events-report)
- [Defender for Endpoint Enforcement Report](https://knowledge.sittadel.com/defender-for-endpoint-enforcement-report)
- [Defender for Email Phishing Events Report](https://knowledge.sittadel.com/defender-for-email-phishing-events-report)
- [Defender for Email Malware Events Report](https://knowledge.sittadel.com/defender-for-email-malware-events-report)
- [Defender for Email Deployment Report](https://knowledge.sittadel.com/defender-for-email-deployment-report)
- [Investigating Transport Rule Creation](https://knowledge.sittadel.com/investigating-transport-rule-creation)
- [Defender for Email Security Awareness Training Assignment Action](https://knowledge.sittadel.com/defender-for-email-security-awareness-training-assignment-action)
- [Defender Device Security Alert Resolved Action](https://knowledge.sittadel.com/defender-device-security-alert-resolved-action)
- [Defender Device Security Incident Resolved Action](https://knowledge.sittadel.com/defender-device-security-incident-resolved-action)
- [Defender for Endpoint Certificate IOC Allowance](https://knowledge.sittadel.com/defender-for-endpoint-certificate-ioc-allowance)
- [Defender for Email Quarantine Queue](https://knowledge.sittadel.com/defender-for-email-quarantine-queue)
- [Defender for Email Preview Message Action](https://knowledge.sittadel.com/defender-for-email-preview-message-action)
- [Defender for Email Action Center Queue](https://knowledge.sittadel.com/defender-for-email-action-center-queue)
- [Defender for Email Action Center Denial Action](https://knowledge.sittadel.com/defender-for-email-action-center-denial-action)
- [Defender for Endpoint File Hash IOC Allowance](https://knowledge.sittadel.com/defender-for-endpoint-file-hash-ioc-allowance)
- [Defender for Endpoint IP IOC Allowance](https://knowledge.sittadel.com/defender-for-endpoint-ip-ioc-allowance)
- [Defender for Endpoint URL/Domain IOC Allowance](https://knowledge.sittadel.com/defender-for-endpoint-url-domain-ioc-allowance)
- [Defender for Email IP Address Allowance](https://knowledge.sittadel.com/defender-for-email-ip-address-allowance)
- [Defender for Email IP Address Block](https://knowledge.sittadel.com/defender-for-email-ip-address-block)
- [Defender for Endpoint File Hash IOC Block](https://knowledge.sittadel.com/defender-for-endpoint-file-hash-ioc-block)
- [Defender for Email Spam Allowance](https://knowledge.sittadel.com/defender-for-email-spam-allowance)
- [Defender for Email Spoof Allowance](https://knowledge.sittadel.com/defender-for-email-spoof-allowance)
- [Defender for Email Submit and Allow Action](https://knowledge.sittadel.com/defender-for-email-submit-and-allow-action)

See less ▼

## Purview

- [Sensitive Info Type Creation](https://knowledge.sittadel.com/sensitive-info-type-creation)
- [Sensitive Info Type Modification](https://knowledge.sittadel.com/sensitive-info-type-modification)
- [Sensitivity Label Creation](https://knowledge.sittadel.com/sensitivity-label-creation)
- [Sensitivity Label Modification](https://knowledge.sittadel.com/sensitivity-label-modification)
- [Sensitivity Label Publication Creation](https://knowledge.sittadel.com/sensitivity-label-publication-creation)
- [Sensitivity Label Publication Modification](https://knowledge.sittadel.com/sensitivity-label-publication-modification)
- [DLP Policy Modification](https://knowledge.sittadel.com/dlp-policy-modification)
- [Retention Label Auto-Apply Policy Creation](https://knowledge.sittadel.com/retention-label-auto-apply-policy-creation)
- [Retention Label Auto-Apply Policy Modification](https://knowledge.sittadel.com/retention-label-auto-apply-policy-modification)
- [Retention Label Creation](https://knowledge.sittadel.com/retention-label-creation)
- [Retention Label Modification](https://knowledge.sittadel.com/retention-label-modification)
- [Retention Policy Creation](https://knowledge.sittadel.com/retention-policy-creation)
- [Retention Policy Modification](https://knowledge.sittadel.com/retention-policy-modification)
- [DLP Policy Creation Procedure](https://knowledge.sittadel.com/dlp-policy-creation-procedure)
- [Purview Audit Export Action](https://knowledge.sittadel.com/purview-audit-export-action)
- [Purview Audit Search Action](https://knowledge.sittadel.com/purview-audit-search-report)

See less ▼

## SharePoint Admin Center

- [SharePoint Site File Share Report](https://knowledge.sittadel.com/sharepoint-site-file-share-report)
- [SharePoint Collaboration Domain Addition](https://knowledge.sittadel.com/sharepoint-collaboration-domain-addition)
- [SharePoint Collaboration Domain Removal](https://knowledge.sittadel.com/sharepoint-collaboration-domain-removal)
- [OneDrive Site External Share Events Report](https://knowledge.sittadel.com/onedrive-site-external-share-events-report)

## Teams Admin Center

- [Teams Collaboration Policy Modification](https://knowledge.sittadel.com/teams-collaboration-policy-modification)
- [Teams Domain Collaboration Removal](https://knowledge.sittadel.com/teams-domain-collaboration-removal)
- [Teams Domain Collaboration Addition](https://knowledge.sittadel.com/teams-domain-collaboration-addition)

## Admin Center

- [Admin Center Tenant Licensure Addition](https://knowledge.sittadel.com/admin-center-tenant-licensure-addition)
- [Admin Center User License Removal](https://knowledge.sittadel.com/admin-center-user-license-removal)
- [Admin Center User License Assignment](https://knowledge.sittadel.com/admin-center-user-license-assignment)

## Exchange Admin Center

- [Email Connector Creation](https://knowledge.sittadel.com/email-connector-creation)
- [Email Connector Modification](https://knowledge.sittadel.com/email-connector-modification)
- [Exchange Message Delivery Events Report](https://knowledge.sittadel.com/exchange-message-delivery-events-report)
- [Email Connector TLS Exception](https://knowledge.sittadel.com/email-connector-tls-exception)
- [Exchange TLS Encryption Enforcement Report](https://knowledge.sittadel.com/exchange-tls-encryption-enforcement-report)
- [Exchange Queued Message Events Report](https://knowledge.sittadel.com/exchange-queued-message-events-report)
- [Exchange Reply-All Storm Events Report](https://knowledge.sittadel.com/exchange-reply-all-storm-events-report)
- [Exchange Transport Rule Enforcement Report](https://knowledge.sittadel.com/exchange-transport-rule-enforcement-report)

See less ▼

- [UserOps](https://knowledge.sittadel.com/userops#main-content)

    - [Access & Permissions](https://knowledge.sittadel.com/userops#access-permissions)
    - [Account](https://knowledge.sittadel.com/userops#account)
    - [Devices](https://knowledge.sittadel.com/userops#devices)
    - [Document Sharing](https://knowledge.sittadel.com/userops#document-sharing)
    - [Email](https://knowledge.sittadel.com/userops#email)
    - [Requests](https://knowledge.sittadel.com/userops#requests)
    - [Troubleshoot](https://knowledge.sittadel.com/userops#troubleshoot)
- [TechOps](https://knowledge.sittadel.com/techops#main-content)

    - [Tenant Foundations](https://knowledge.sittadel.com/techops#tenant-foundations)
    - [Collaboration Security](https://knowledge.sittadel.com/techops#collaboration-security)
    - [Email Security](https://knowledge.sittadel.com/techops#email-security)
    - [Device Security](https://knowledge.sittadel.com/techops#device-security)
    - [Identity Security](https://knowledge.sittadel.com/techops#identity-security)
- [SecOps](https://knowledge.sittadel.com/secops#main-content)

    - [Email SOC](https://knowledge.sittadel.com/secops#email-soc)
    - [Identity SOC](https://knowledge.sittadel.com/secops#identity-soc)
    - [Tenant SOC](https://knowledge.sittadel.com/secops#tenant-soc)
    - [Device SOC](https://knowledge.sittadel.com/secops#device-soc)
- [Deploy Intune](https://knowledge.sittadel.com/deploy-intune)
- [Deploy MDE](https://knowledge.sittadel.com/deploy-mde#main-content)

    - [Overview](https://knowledge.sittadel.com/deploy-mde#overview)
    - [Intune Deployment](https://knowledge.sittadel.com/deploy-mde#intune-deployment)
    - [Hands-On Deployment](https://knowledge.sittadel.com/deploy-mde#hands-on-deployment)
    - [Azure Arc Deployment](https://knowledge.sittadel.com/deploy-mde#azure-arc-deployment)
    - [RMM Tool Deployment](https://knowledge.sittadel.com/deploy-mde#rmm-tool-deployment)
    - [MECM/SCCM Deployment](https://knowledge.sittadel.com/deploy-mde#mecm-sccm-deployment)
    - [GPO Deployment](https://knowledge.sittadel.com/deploy-mde#gpo-deployment)
- [Deploy Services](https://knowledge.sittadel.com/deploy-services#main-content)

    - [Cloud Enclave](https://knowledge.sittadel.com/deploy-services#cloud-enclave)
- [Azure Portals](https://knowledge.sittadel.com/azure-portals#main-content)

    - [Entra ID](https://knowledge.sittadel.com/azure-portals#entra-id)
    - [Intune](https://knowledge.sittadel.com/azure-portals#intune)
    - [Defender](https://knowledge.sittadel.com/azure-portals#defender)
    - [Purview](https://knowledge.sittadel.com/azure-portals#purview)
    - [SharePoint Admin Center](https://knowledge.sittadel.com/azure-portals#sharepoint-admin-center)
    - [Teams Admin Center](https://knowledge.sittadel.com/azure-portals#teams-admin-center)
    - [Admin Center](https://knowledge.sittadel.com/azure-portals#admin-center)
    - [Exchange Admin Center](https://knowledge.sittadel.com/azure-portals#exchange-admin-center)

[![](https://knowledge.sittadel.com/hs-fs/hubfs/Sittadel_LogoH_Color_BlackText.png?width=186&height=55&name=Sittadel_LogoH_Color_BlackText.png)](https://Sittadel.com)

Security for Humans.

Copyright © 2026, Sittadel

<https://www.linkedin.com/company/sittadel> <https://outlook.office365.com/book/StartSittadelcom@sittadel.com/?ismsaljsauthenabled=true> <https://outlook.office365.com/book/StartSittadelcom@sittadel.com/?ismsaljsauthenabled=true>