Microsoft Defender for Office 365
Email and collaboration

Submissions Teams

In brief

The Teams submission steps were lightly reworded, and the documentation now states that reporting requires users with online Teams mailboxes and an Exchange Online reporting mailbox. On-premises mailboxes aren't supported. A related submissions link was also added.

What Defender admins need to know

Verify that Teams reporting users and the configured reporting mailbox meet these Exchange Online requirements.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Report malicious messages in Teams

ToFollow these steps to report a malicious message in Teams, perform the following steps:Teams:

  1. In the Microsoft Teams client, hover over the malicious message without selecting it, and then select :::image type="icon" source="media/defender-portal-icon-more-actions.png" border="false"::: More options > Report this message.

    :::image type="content" source="media/submissions-user-report-message-in-teams-client-click-path.png" alt-text="Screenshot of the select path to report a message in the Microsoft Teams client." lightbox="media/submissions-user-report-message-in-teams-client-click-path.png":::

Report non-malicious messages in Teams

ToFollow these steps to report a non-malicious message in Teams, use the following steps:Teams:

  1. In the Teams chat or channel, hover over the message without selecting it, and then select :::image type="icon" source="media/defender-portal-icon-more-actions.png" border="false"::: More options > Report this message.

  2. In the reportReport this message dialog that opens, select Not a security concern, and then select Report.

Report calls in Teams

Currently, only completed or missed one-to-one calls are supported.

  1. In the Microsoft Teams client, go to the call history view and then select :::image type="icon" source="media/defender-portal-icon-more-actions.png" border="false"::: More options > Report call.

    :::image type="content" source="media/submissions-user-report-calls-in-teams-client-click-path.png" alt-text="Screenshot of the select path to report a call in the Microsoft Teams client." lightbox="media/submissions-user-report-calls-in-teams-client-click-path.png":::

What happens to a user reported Teams item depends on the settings in the Reported items destinations section on the User reported settings page at https://security.microsoft.com/securitysettings/userSubmission:

User reporting in Teams is supported only for users with an online Teams mailbox. The reporting mailbox configured in User reported settings must also be an Exchange Online mailbox. On-premises mailboxes aren't supported in either scenario.

  • Send the reported items to > Microsoft and my reporting mailbox: The default user reporting mailbox is the Exchange Online mailbox of the global admin. The value for older Microsoft 365 organizations is unchanged.
  • Send the reported items to > Microsoft only
  • Send the reported items to > My reporting mailbox only

View and triage user reported items in Teams

Information about user reported items in Teams is available on the User reported tab on the Submissions page at https://security.microsoft.com/reportsubmission?viewid=user. For more information, see View user reported items to Microsoft.

Related content

Use the Submissions page to submit suspected spam, phish, URLs, legitimate email getting blocked, and email attachments to Microsoft \ No newline at end of file