This guide will show an administrator how to release a quarantined email to the intended recipient and create an allowance for the sender.
Role Requirements
Procedure Scope: Administrators
Required Group Membership: Admin.Security
Handbook Reference
Package: TBD
Domain: TBD
Modifies: TBD
Defender for Email Quarantine Release and Allow Action
- Navigate to the Quarantine – Microsoft Defender portal, locate and select an email followed by selecting the Release Email action. This will allow the email to be delivered to the intended recipient(s).
- Select Release to All Recipients. Check the Submit the Message to Microsoft checkbox, along with entering a timeline to remove the allow entry. Optionally, a reason for the submission can help justify entries later on. Submitting allows the algorithm to be trained to allow emails like those in the future, and the allow entry puts that bypass in place until the algorithm catches up. Click Release Message.
Need Assistance?
Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.