M365 Changelog: Microsoft Defender XDR services: Consolidation of Approve release and Release action

Summary

In Microsoft Defender XDR services, the 'Approve release' action will be merged with the 'Release' action starting mid-July 2024, streamlining the process for admins to approve end user release requests. No admin action is required for this update.

MC800492 – In Microsoft Defender XDR services, the Approve release action will be consolidated into the Release action. 

When this will happen:

General Availability (Worldwide): Microsoft will begin rolling out mid-July 2024 and expects to complete by late July 2024.

General Availability (GCC, GCC High, DoD): Microsoft will begin rolling out late July 2024 and expects to complete by early August 2024.

How this will affect your organization:

Previously, the Approve release action was used by admins to approve a release request that was coming from an end user. We are consolidating the Approve release and Release actions so admins can use the Release action to approve release requests coming from end users.  

End users can use the Request release action of a quarantined email.

RW1lXTG?ver=a0ec
View image in new tab

Admins can use the Release email action to approve the requested release coming from the end user. 

RW1lVjj?ver=ef14
View image in new tab

The Approve release action will be eliminated.

RW1lXTM?ver=1afd
View image in new tab

 Approved filtering status will be eliminated.

RW1lXTP?ver=d3ad
View image in new tab

Note that the Approve action type will be eliminated from the Release-QuarantineMessage cmdlet. For more Approve action type information, see Release-QuarantineMessage (ExchangePowerShell) | Microsoft Learn.

For additional information about this feature update, visit:

This feature update is available by default.

What you need to do to prepare:

This rollout will happen automatically with no admin action required. You may want to notify your users about this change and update any relevant documentation as appropriate.