Share via

customizedReportRecipientEmailAddress always empty on non-microsoft report add-in

Kasper Rynning-Tønnesen 1 Reputation point
2024-04-11T12:09:09.8966667+00:00

When requesting data from https://graph.microsoft.com/beta/security/threatSubmission/emailThreatSubmissionPolicies/, the field

customizedReportRecipientEmailAddress is always empty whenever we define the settings to "Use non-Microsoft Report add-in" which seems like the non-wanted behaviour.

From the documentation on third-party reporting tools (https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/submissions-user-reported-messages-custom-mailbox?view=o365-worldwide#message-submission-format-for-third-party-reporting-tools), it is specified that emails should be sent to the "reporting mailbox" (e.g. what is stored at https://security.microsoft.com/securitysettings/userSubmission). Through this it would make sense that the inbox for reporting emails is exposed through graph-api, for any third-party tool to be able to fetch if they have the necessary permission to read these settings, as the reporting still goes through microsofts user-submission.

Microsoft Security | Microsoft Graph
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.