Defender for Office 365 Email Quarantine Release & Allow Action

This guide will show an administrator how to release a quarantined email to the intended recipient and create an allowance for the sender.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

O365 Admin Email Release and Allow

  1. Navigate to the Quarantine – Microsoft Defender portal, locate and select the email that needs releasing and select the Release Email option.
  2. Select Release to All Recipients. Check the Submit the Message to Microsoft checkbox, along with entering a timeline to remove the allow entry. Submitting allows the algorithm to be trained to allow emails like those in the future, and the allow entry puts that bypass in place until the algorithm catches up. Click Release Message.

Need Assistance?

Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.