MC1227625 – User reported security signals in Teams admin center

Product:

Defender, Defender for Office 365, Defender XDR, Entra, Microsoft 365 admin center, Microsoft 365 Apps, Teams, Windows

Platform:

Android, iOS, Linux, Mac, Online, Web, Windows Desktop, World tenant

Status:

In development

Change type:

New feature, User impact, Admin impact

Links:

MC1223828
MC1147984
MC1037768
536571

Details:

Summary:
Teams admins will soon access a new Protection reports section in the Teams admin center to review and export user-reported security submissions for calls (from mid-April 2026) and later for chats and channels. This requires enabling user reporting settings and helps improve organizational security monitoring.

Details:
[Introduction]
As part of our ongoing protection investments in Microsoft Teams, we will continue expanding the ways users can report suspicious or incorrect activity. Users can already report security concerns and incorrect detections in chats and channels (MC1037768, MC1147984), and more recently in calls (MC1223828). These user‑submitted reports help identify potential malicious activity and strengthen your organization's security posture.
Building on this foundation, we will introduce new capabilities that allow Teams administrators to review and export user‑reported security submissions directly in the Teams admin center. A new Protection reports section will be added under Analytics and reports, giving admins unified visibility into user‑reported calls, chats, and channels.
This message relates to Microsoft 365 Roadmap ID 536571.
[When this will happen]
Phase 1 - User‑reported call data
Targeted Release: Rollout will begin in mid‑March 2026 and complete in late March 2026.
General Availability (Worldwide): Rollout will begin in mid‑April 2026 and complete in late April 2026.
Phase 2 - User‑reported chats and channels
This phase will add message‑level reporting for security concerns and incorrect detections.
The timeline will be communicated in a future update to this Message center post.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Targeted Release

Created:
2026-02-06

updated:
2026-02-06

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

Starting in 2026, Microsoft Teams will introduce a "Protection reports" section in the Teams admin center, allowing administrators to view and export user-submitted reports on suspicious activities in calls, chats, and channels, with specific settings required for activation.

Direct effects for Operations**

User Reporting Feature Implementation
If the user reporting settings are not enabled prior to the rollout, Teams administrators will not have access to user-reported security submissions, leading to potential delays in identifying and responding to security threats.
   - roles: Teams Administrators, Security Analysts
   - references: https://www.microsoft.com/microsoft-365/roadmap?searchterms=536571#Roadmap

Data Access and Compliance Monitoring
Without preparation, the change may lead to confusion among Teams administrators regarding the new data access protocols, potentially resulting in non-compliance with security monitoring requirements.
   - roles: Compliance Officers, Teams Administrators
   - references: https://www.microsoft.com/microsoft-365/roadmap?searchterms=536571#Roadmap

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only