M365 Changelog: (Updated) Migrating the Safe Links Block List to Tenant Allow Block List

MC373880 – Updated January 10, 2023: Beginning February 13th 2023 the Safe Links Block List will no longer be enforced. Entries on this list will not be blocked at time of click. All entries should be moved to the Tenant Block List. The list will remain for an additional 30 days from February 13th 2023, until the end of March 2023 when it will be retired.

Microsoft has stopped the automated migration efforts to migrate all entries from your Safe Links Block List to the Tenant Allow Block List. Organizations will have the ability to review and take action on the entries that were unable to be migrated. Any entries that are unable to be migrated will be marked as such and organizations will have the ability to resolve that entry and run the migration again. Tenants will have until January 2023 to complete this activity, at which point the Safe Links Global Block List will be retired.

Note: Any entry migrated from the Safe Links Block List to the Tenant Allow/Block List will adopt the behavior of TABL. This means that any message with the URL present will be moved to Quarantine. If deleting an already migrated entry from TABL, it needs to be removed from BlockURLS to avoid migration.

As a reminder beginning in June tenants will no longer have the ability to add to the Safe Links Block List in the Global Setting menu. Then Microsoft will attempt to migrate the Safe Links Block List to the Tenant Allow Block List (TABL) on behalf of the organization. Any entries that are unable to be successfully migrated, they will be marked as such in the Block List and organizations will have the ability to take action as needed beginning in July.

Another update will be sent closer to July as a reminder for tenants to review the migration status of the Block List. Beginning in June organizations will no longer have the ability to add to the Safe Links Block List in the Global Setting menu. Following this, Microsoft will attempt to migrate the Safe Links Block List to the Tenant Allow Block List (TABL) on behalf of the organization. For any entries that Microsoft is unable to migrate, they will be marked as such in the Block List and organizations will have the ability to take action as needed.

When this will happen:

  • Early June: Organizations will no longer have the ability to add to the URL/Domain entries to the Safe Links Block List in the Global Settings flyout and we will attempt to migrate all the entries in an organization’s Safe Links Block List to TABL on their behalf
  • Mid-June through December: Organizations will have the ability review entries that were not able to be migrated and resolve the issue(s)
  • January: The Safe Links Block List will be retired

How this will affect your organization:

Organizations who are utilizing the Safe Links Block List will need to review the list to ensure all entries were migrated successfully. Any entries that are unable to be migrated will be marked as such and organizations will have the ability to resolve that entry, at which point migration will run again.

Organizations will use the Tenant Allow Block List to manage URL/Domain blocks moving forward.

What you need to do to prepare:

In June an update to this Message center post will be sent notifying organizations that the first migration has been completed and they will need to review their Safe Links Block Lists for potential actions.