Forum Discussion
Deny-Option in quarantined Emails grayed out
Hi,
We check daily the Emails in Quarantines of MS Defender in a Teams. Is there any Probability to move the reviewed Mails in other List or remark it anyway? So that my next Colleague in Teams could go on reviewing the next Mails in Quarantine, but not double review the Mails again which I checked last time? Otherwise I see the Deny-Option is always grayed out. How could we enable it?
Thanks for your Support!
1 Reply
Which role are you having? Most likely, the “Deny” option in the quarantine portal (usually under Actions → Deny or Report as false positive/negative) is grayed out when:
- The email is already categorized as spam, phish, or malware, and no override (e.g., allow list) is pending.
- You are not assigned the necessary role in Defender (requires “Security Administrator” or “Security Reader + Quarantine role”).
- You're using a non-supported view — for example, if accessing quarantine from Teams directly or via a shared link, it may be limited.
