check before: 2024-06-25
Product:
Defender, Defender XDR, Exchange
Platform:
Online, US Instances, World tenant
Status:
Change type:
Feature update, User impact, Admin impact
Links:

Details:
Summary:
In Microsoft Defender XDR services, the 'Approve release' action will be merged with the 'Release' action starting mid-July 2024, streamlining the process for admins to approve end user release requests. No admin action is required for this update.
Details:
In Microsoft Defender XDR services, the Approve release action will be consolidated into the Release action.
[When this will happen:]
General Availability (Worldwide): We will begin rolling out mid-July 2024 and expect to complete by late July 2024.
General Availability (GCC, GCC High, DoD): We will begin rolling out late July 2024 and expect to complete by early August 2024.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2024-06-11
updated:
2024-06-11
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
Pictures
XXXXXXX ... free basic plan only
Direct effects for Operations**
- Direct Impact on IT Operations
- Streamlined Approval Process
- The consolidation of the 'Approve release' and 'Release' actions may lead to a more efficient workflow for handling end-user release requests.
- Roles Impacted: IT Administrators, Security Operations Team
- Potential for Increased User Requests
- With the removal of the 'Approve release' action, end users may submit more requests for email releases, potentially increasing the workload for IT admins.
- Roles Impacted: IT Administrators, Helpdesk Support
- Changes in Documentation and Training
- IT teams will need to update internal documentation and possibly conduct training sessions to familiarize users with the new process.
- Roles Impacted: IT Administrators, Training Coordinators
- Direct Impact on IT Services
- Modification of PowerShell Cmdlets
- The elimination of the 'Approve action type' from the Release-QuarantineMessage cmdlet may affect automated scripts or processes that rely on this cmdlet.
- Roles Impacted: IT Administrators, DevOps Engineers
- Dependency on Microsoft Defender XDR
- The change may affect integrations with other security services or tools that rely on the Defender XDR for email quarantine management.
- Roles Impacted: IT Administrators, Security Analysts
- User Experience Changes
- End users may experience a change in how they request email releases, which could lead to confusion if not communicated effectively.
- Roles Impacted: End Users, IT Support Staff
- Direct Impact on IT Users
- Change in User Workflow
- Users will need to adapt to the new process of requesting email releases without the 'Approve release' step, which may initially cause confusion.
- Roles Impacted: End Users
- Increased Visibility of Requests
- Users may have a clearer understanding of their requests being processed through the consolidated action, potentially improving user satisfaction.
- Roles Impacted: End Users
- Need for User Communication
- Effective communication regarding the change will be essential to minimize disruptions and ensure users are aware of the new process.
- Roles Impacted: IT Administrators, Communication Officers
References:
- Microsoft Learn: [Manage quarantined messages and files as an admin](https://learn.microsoft.com/defender-office-365/quarantine-admin-manage-messages-files)
- Microsoft Learn: [Manage quarantined messages and files as a user](https://learn.microsoft.com/defender-office-365/quarantine-end-user)
- Microsoft Learn: [Release-QuarantineMessage (ExchangePowerShell)](https://learn.microsoft.com/powershell/module/exchange/release-quarantinemessage?view=exchange-ps-actiontype)
Opportunities**
- Streamlined Approval Process
- Opportunity: The consolidation of the 'Approve release' and 'Release' actions will simplify the workflow for admins, reducing the time spent on managing release requests.
- Roles that might profit: IT Administrators, Security Operations Team
- Reference: [Microsoft Defender XDR Services Documentation](https://learn.microsoft.com/defender-office-365/quarantine-admin-manage-messages-files)
- Enhanced User Experience
- Opportunity: End users will have a more straightforward process for requesting the release of quarantined emails, potentially leading to quicker resolution times and improved satisfaction.
- Roles that might profit: End Users, Help Desk Support
- Reference: [Manage quarantined messages and files as a user](https://learn.microsoft.com/defender-office-365/quarantine-end-user)
- Reduced Administrative Overhead
- Opportunity: By eliminating the 'Approve release' action, the administrative burden is reduced, allowing IT staff to focus on more strategic tasks rather than repetitive approval processes.
- Roles that might profit: IT Operations, Compliance Teams
- Reference: [Release-QuarantineMessage Cmdlet Documentation](https://learn.microsoft.com/powershell/module/exchange/release-quarantinemessage?view=exchange-ps-actiontype)
Potentional Risks**
XXXXXXX ... paid membership only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 5 months ago