Protect your c-suite with priority account protection

Priority account protection helps IT and security teams ensure a high quality of service and protection for the critical people within your organization. Tagging an account as a priority account will enable the additional protection tuned for the mail flow patterns targeting company executives, along with extra visibility in reports, alerts, and investigations.

What you'll need

  • Microsoft Defender for Office 365 Plan 2 (included as part of E5 plans)
  • Sufficient permissions (Security Administrator role)
  • 5 minutes to perform the steps below.

Tag Priority users

  1. Identify the users, groups, or domains you would like to tag as priority accounts.
  2. Login to the Microsoft Security Portal and navigate to Settings on the left navigation bar.
  3. Select Email & collaboration on the page that loads and then click User tags
  4. On the User tags page, select the Priority account tag and press Edit tag
  5. On the flyout that appears, select Add members
  6. Search for the users you wish to tag, select one or more users and press Add
  7. Review the members you have selected and press Next
  8. Press Submit to confirm the changes

To learn what priority account tags are see Manage and monitor priority accounts - Microsoft 365 admin | Microsoft Docs.

Next Steps

Review the differentiated protection for users tagged as priority accounts.

PowerShell configuration

If you want to achieve these steps via PowerShell, you can do this using the following cmdlets:

  1. View a list of priority accounts: Get-User -IsVIP | select Identity
  2. Add user to list of priority accounts: Set-User -VIP:$true -Identity <Identity>
  3. Remove user from list of priority accounts: Set-User -VIP:$false -Identity <Identity>