Microsoft Defender for Office 365
Email and collaboration

Submissions Teams

In brief

The article now points administrators to the Teams user reported settings page and documents Exchange Online PowerShell commands for viewing and configuring Teams report destinations: Microsoft, a reporting mailbox, or both.

What Defender admins need to know

Administrators can use the updated portal path or PowerShell examples to verify and manage Teams user reporting settings.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

  • sfi-ga-nochange description: Admins can configure whether users can report malicious messages or calls in Microsoft Teams. ms.service: defender-office-365 ms.date: 2026-09-21T00:28T00:00:00.0000000Z ai-usage: ai-assisted locale: en-us document_id: 1d442262-3a46-5714-423c-d3a453a7b613

The Monitor reported items in Microsoft Teams setting is meaningful only if Teams message or call reporting is turned on in the Teams admin center.

  1. In the Microsoft Defender portal at https://security.microsoft.com, go to Settings > Email & collaboration > UserTeams user reported settings tab. To go directly to the UserTeams user reported settings page, use https://security.microsoft.com/securitysettings/userSubmissionhttps://security.microsoft.com/securitysettings/teamsUserSubmission.

  2. On the UserTeams user reported settings page, go to the Microsoft Teams section for the Monitor reported items in Microsoft Teams setting.

    The Monitor reported items in Microsoft Teams setting is turned on by default for new tenants; existing tenants need to enable it. Typically, you leave it turned on if message or call reporting is also turned on in Teams admin center. For more information, see Report suspicious email messages to Microsoft.

    Screenshot of the 'Monitor reported items in Microsoft Teams' setting in the Microsoft Defender portal.

For more information about email user reported itemsitem settings in the Defender portal, see Email user reported settings.

Use Exchange Online PowerShell to configure user reporting in Teams

To view or configure user reporting in Teams by using PowerShell, connect to Exchange Online PowerShell.

To view the current Teams user reporting configuration, run the following command:

Get-ReportSubmissionPolicy -Identity DefaultReportSubmissionPolicy |
    Format-List ReportChatMessageEnabled,ReportChatMessageToCustomizedAddressEnabled,ReportChatMessageAddresses

For detailed syntax and parameter information, see Set-ReportSubmissionPolicy.

Send reported Teams items to Microsoft only

Tip

The value -ReportChatMessageEnabled $true is required to achieve Send reported items to > Microsoft only. The values -EnableUserEmailNotification $true and -ReportChatMessageToCustomizedAddressEnabled $false are also required.

Set-ReportSubmissionPolicy -Identity DefaultReportSubmissionPolicy `
    -ReportChatMessageEnabled $true `
    -ReportChatMessageToCustomizedAddressEnabled $false `
    -EnableUserEmailNotification $true

Send reported Teams items to the reporting mailbox only

Tip

The value -ReportChatMessageEnabled $false is required to achieve Send reported items to > My reporting mailbox only. The value -ReportChatMessageToCustomizedAddressEnabled $true is also required.

Set-ReportSubmissionPolicy -Identity DefaultReportSubmissionPolicy `
    -ReportChatMessageEnabled $false `
    -ReportChatMessageToCustomizedAddressEnabled $true `
    -ReportChatMessageAddresses "[email protected]"

Send reported Teams items to Microsoft and the reporting mailbox

Set-ReportSubmissionPolicy -Identity DefaultReportSubmissionPolicy `
    -ReportChatMessageEnabled $true `
    -ReportChatMessageToCustomizedAddressEnabled $true `
    -ReportChatMessageAddresses "[email protected]"

To change the reporting mailbox without changing the reported item destination, run the following command:

Set-ReportSubmissionPolicy -Identity DefaultReportSubmissionPolicy `
    -ReportChatMessageAddresses "[email protected]"

How users report items in Teams