M365 Changelog: (Updated) Quarantine Admin Role Required for Exchange Admins for Quarantine Operations

MC447339 – Updated February 7, 2023: Microsoft has updated the timing for this change. Thank you for your patience.

Tenant Exchange Administrators who visit the Quarantine Security Portal (https://security.microsoft.com/quarantine) need to be a Quarantine Administrator to perform Quarantine operations in the portal.

When this will happen 

Starting early June 2023 (prev early February 2023) we will stop honoring the execution of Quarantine operations by Exchange Administrators who are not Quarantine Administrators, Security Administrators or Global Administrators in the security portal

We will first provision a Quarantine Admin role for all Exchange Administrators who have performed Quarantine operations in the past on the security portal. This will allow those Exchange Admins to continue executing Quarantine operations successfully in the security portal in early to late May 2023 (early to late January 2023).

How this will affect your organization

Exchange Admins were able to perform Quarantine operations (such as release, delete, download, preview of quarantined messages) in the security portal on behalf of users in their organization without being in the Quarantine Administrator role. With this change, Exchange Administrators will also need to be assigned a Quarantine Administrators to perform these Quarantine operations.

What you need to do to prepare

Admins should update their organization roles as they see fit and update and relevant training documentation.

Learn More:

• Manage Quarantined Messages and Files as an Admin in EOP
• Permissions in the Microsoft 365 Defender Portal