M365 Changelog: Microsoft Defender for Office 365 empowers end users to report suspicious messages from shared/delegate mailboxes

MC553274 – Updated May 11, 2023: Microsoft has updated the content below with additional information. Thank you for your patience.

Soon, end-users will be able to report messages from shared mailboxes and delegate mailboxes using the built-in Report button in Outlook on the web.

To refresh your memory, these screenshots show the Report buttons in Outlook on the web if you have the simplified ribbon turned on:

View image in new tab

View image in new tab

Information to keep in mind:

• If the reporting feature is turned off in the Microsoft 365 Defender portal > user reported settings page or if you’re using a third-party add-in, you won’t be affected by this change. 
• Other Outlook clients for Mac, Windows, and iOS and Android will remain unaffected by this change. 
• The Microsoft Report Message and Report Phishing add-ins don’t have support for shared and delegate mailboxes in Outlook on the web or in other Outlook clients. 
• You need to assign Send As or Send On Behalf permission when you set up shared mailboxes for users in your organization. Otherwise, the user will get an error in Outlook on the web when they try to report messages from a shared mailbox.  Learn more.
• You need to assign Send As or Send On Behalf permission, along with Read and Manage permissions for delegate access in another user’s mailbox. Otherwise, delegates will get an error in Outlook on the web when they try to report messages from the mailbox. Learn more.
• You need to educate users to assign Send As or Send On Behalf permissions, along with Read and Manage permissions when they delegate access to their mailbox. Otherwise, delegates will get an error in Outlook on the web when they try to report messages from the mailbox. Learn more how to educate end users.

This message is associated with Microsoft 365 Roadmap ID 115507

When this will happen:

This change will start rolling out in mid-May and should be completed by the early June. 

How this will affect your organization:

If message reporting using the built-in button in Outlook is turned on at the user reported settings page, end-users will be able to report messages as Phish, Junk or Not junk from shared mailboxes, delegate mailboxes.

What you need to do to prepare:

No changes are required as your current settings in the user reported settings page will not be changed.

If you have any feedback, please provide it from this Message center post using the text box after you do thumbs up or thumbs down as it will directly reach the responsible team.