
We allow subsequent messages that contain variations of the original URL. We create allow entries for URLs that were determined to be malicious by our filters during mail flow or at time of click. For instructions, see Report good URLs to Microsoft. When you submit a blocked URL as Should not have been blocked (False positive), you can select Allow this URL to add and allow entry for the URL on the URLs tab on the Tenant Allow/Block Lists page.

Instead, you use the URLs tab on the Submissions page at. Unnecessary allow entries expose your organization to malicious email that would have been filtered by the system. You can't create allow entries for URLs directly in the Tenant Allow/Block List. Azure AD RBAC: Membership in the Global Administrator, Security Administrator, Global Reader, or Security Reader roles gives users the required permissions and permissions for other features in Microsoft 365.Read-only access to the Tenant Allow/Block List: Membership in one of the following role groups:.Security Operator (Tenant AllowBlockList Manager).Organization Management or Security Administrator (Security admin role).Add and remove entries from the Tenant Allow/Block List: Membership in one of the following role groups:.You need to be assigned permissions before you can do the procedures in this article. You can enter a maximum of 250 characters in a URL entry.Īn entry should be active within 30 minutes, but it might take up to 24 hours for the entry to be active. To connect to standalone EOP PowerShell, see Connect to Exchange Online Protection PowerShell.įor URL entry syntax, see the URL syntax for the Tenant Allow/Block List section later in this article.įor URLs, the maximum number of allow entries is 500, and the maximum number of block entries is 500 (1000 URL entries total). To connect to Exchange Online PowerShell, see Connect to Exchange Online PowerShell. To go directly to the Submissions page, use. To go directly to the Tenant Allow/Block List page, use.

You open the Microsoft 365 Defender portal at. What do you need to know before you begin? This article describes how admins can manage entries for URLs in the Microsoft 365 Defender Portal and in Exchange Online PowerShell. To allow phishing URLs from third-party phishing simulations, use the advanced delivery configuration to specify the URLs.
