Forum Discussion

Barry14850's avatar
Barry14850
Copper Contributor
Feb 14, 2024

What is the difference from approve release and release in Microsoft 365 Quarantine?

What is the difference from approve release and release in Microsoft 365 Quarantine? Why is that the approve release is grayed out?
microsoft defender for office 365
G_Wilson3468's avatar
G_Wilson3468
Iron Contributor
Feb 14, 2024

Barry14850 

So "release" allows the quarantined email to be released after being quarantined. Its set off directly to the intended recipient.

 

"Approved Release" is when a quarantined items has some sort of security concern. This could be a policy violation or something else that is concerning. The item needs to be reviewed by a human with appropriate permissions to do so. If approved, the email wont immediately get to the recipient. It is rechecked again for security issues and then sent once completed. 

 

It may be grayed out because you don't aren't in a role that can do that or there is some policy that forbids manual approvals. 

Barry14850's avatar
Barry14850
Copper Contributor
Feb 14, 2024
Thank you. Sounds like a workflow that is not needed for my tiny organization. I am the admin and can release messages. I couldn't find any documentation on what "Approved Release" meant or how it fits in a workflow. I was hoping for functionality within the spam release policy that could let me flag a false positive to be added to the safe senders list since it is cumbersome to do that separately, and I was hoping that button might be it. But alas, I guess not.
  • HeikeRitter's avatar
    HeikeRitter
    Icon for Microsoft rankMicrosoft
    Feb 15, 2024

    Barry14850 I found the following docs article: Manage quarantined messages and files as an admin | Microsoft Learn

    "

    Users can request the release of email messages if the quarantine policy used Allow recipients to request a message to be released from quarantine (PermissionToRequestRelease permission) instead of Allow recipients to release a message from quarantine (PermissionToRelease permission) when the message was quarantined. For more information, see Create quarantine policies in the Microsoft Defender portal.

    After a recipient requests the release of the email message, the Release status value changes to Release requested, and an admin can approve or deny the request.

    "

Resources