Data Loss Prevention DLP: Email Action_Request approval manager: What happen if manager doesn't do anything, is there any backup for the approval?

Sergio Londono 201 Reputation points
2023-10-30T02:02:13.2833333+00:00

Hello team,

I have a question for DLP when location EXO, action: "Forward the message for approval to sender's Manager"

What happens if the manager doesn't deny or approve the email?

Is there any way to have a backup approver or fallback in case no one approves or denies it after a specific period of time?

the sender believes the email was sent correctly, but it is on hold waiting for manager approval or denial, but if the manager doesn't do anything, what will happen with this email,

can this approval be sent to someone else, is there any way to add a backup?

User's image

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
2,690 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Erkan Sahin 825 Reputation points
    2023-10-31T15:30:52.9933333+00:00

    In Microsoft Exchange Online, when a Data Loss Prevention (DLP) rule triggers an action to forward a message for approval to the sender's manager, several outcomes can occur based on the manager's response or lack thereof. The configuration you described pertains to a DLP policy rule action where messages that trigger certain conditions are sent to the sender's manager for approval oai_citation:1,Common message approval scenarios in Exchange Online. This action operates effectively if the sender's Manager attribute is defined in the system; otherwise, the message gets delivered to the recipients without moderation oai_citation:2,Mail flow rule actions in Exchange Online | Microsoft Learn.

    Now, regarding your specific queries:

    1. Unresponded Approval Requests: If the manager doesn't approve or deny the message within a specific timeframe (the expiration time is two days for Exchange Online), the sender will receive an expiration message. The processing of expired moderated messages runs every seven days, meaning a moderated message can expire anytime between two and nine days post the approval request oai_citation:3,Common message approval scenarios in Exchange Online | Microsoft Learn.
    2. Backup Approver or Fallback Mechanism: For setting up a multi-level approval chain, you could create multiple mail flow rules, each for a different level of approval. For instance, a message could first be sent to a manager for approval, and then to a compliance officer for a second approval. Each rule will detect the same patterns in the messages and forward them to the respective approvers. However, if any of the moderators in the chain reject the approval request or if any of the requests aren't approved within the expiration time, the sender receives the corresponding rejection or expiration message oai_citation:4,Common message approval scenarios in Exchange Online | Microsoft Learn.

    This multi-level approval setup could serve as a fallback mechanism, ensuring that another individual reviews the message if the primary approver (e.g., the manager) doesn't respond within a stipulated time. Yet, the specifics would depend on how the mail flow rules are configured in your organization's Exchange Online setup.

    Please mark my answer if it was helpful