Defender portal "Restricted Entities", how to notify the user that was restricted

Question

Hello team,

I got an user in the Defender portal/email and collaboration\review\restrited entities.

This will block the users to send emails.

The user didn't understand the problem and how to solve it.

If a user entity is moved to this restricted location, he can't send more emails.

Is there any way to generate an alert for the user informing him that is restricted in this location to be able to contact support and explain the issue?

Answer 1

Hi @Sergio Londono ,

Thanks for posting in our Q&A forum.

By research, there are some alert policies that can notify admins and specific people when a user is restricted from sending email. However, I could not find any way to generate an alert for the user himself.

Reference:

The default alert policy named User restricted from sending email automatically notifies admins:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/removing-user-from-restricted-users-portal-after-spam?view=o365-worldwide#verify-the-alert-settings-for-restricted-users

Alert policy settings:

https://learn.microsoft.com/en-us/purview/alert-policies?view=o365-worldwide

Hope the above can help!

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.