How to Configure Microsoft 365 DLP Line Manager Moderation
Question details
Understand and configure Data Loss Prevention (DLP) line-manager moderation in Microsoft 365 to properly route approval requests.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Setting up email moderation and approval workflows for compliance policies within a Microsoft 365 environment.
- Observed behavior
- Approval requests are routed based on the Manager attribute in Exchange. If blank, messages may bypass moderation. If the manager is absent, simple email forwarding does not provide approval controls.
Ensure you have Microsoft 365 Global Administrator or Exchange Administrator credentials to access the Exchange admin center and modify mailbox attributes.
Assign a Manager for DLP Moderation in Exchange Admin Center
Configure the Manager attribute for the sender's mailbox in the Exchange admin center so that DLP approval requests are correctly routed to their line manager.
Microsoft 365 DLP line-manager moderation relies heavily on the 'Manager' attribute configured in Exchange. When a policy requires line-manager approval, the system looks up this attribute for the sender.
It is crucial to set this up properly, as forwarding approval emails to another user will not transfer the actual 'Approve' or 'Reject' actionable controls.
Log into the Microsoft 365 admin center using your administrator credentials, then open the Exchange admin center.
In the left-hand navigation menu, expand the 'Recipients' section and click on 'Mailboxes'.
Search for the specific user whose outbound emails need to be moderated by a line manager, and click on their mailbox to open the properties panel.
Navigate to the 'Organization' tab within the mailbox properties. Locate the 'Manager' field and browse the directory to assign the correct line manager, then save your changes.
Looking for a Lightweight, Everyday Alternative to Microsoft Office?
While Microsoft 365 provides complex server-side compliance features like DLP for enterprise administrators, it can be resource-intensive and costly. If your team is looking for a highly compatible, affordable, and lightweight office suite for daily document creation, WPS Office is the perfect solution.
- 1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install the Software: Run the downloaded installation file and follow the on-screen prompts to complete the setup in minutes.
- 3. Open and Edit Documents: Launch WPS Office and instantly open your existing Word, Excel, or PowerPoint files without losing any formatting.
Frequently Asked Questions
What happens if the Manager field is left blank in Exchange?
If the Manager attribute is blank for a sender, the message that triggers the DLP policy may be delivered directly to the recipient without undergoing any moderation.
Can a line manager simply forward DLP approval emails to someone else while on vacation?
No. Forwarding approval emails alone does not transfer the actionable Approve or Reject controls. The administrator must formally delegate access to another user in Exchange.
Where do I configure the Manager attribute for Microsoft 365 users?
You can configure this by going to the Exchange admin center, navigating to Recipients > Mailboxes, selecting the specific user's mailbox, and updating the Manager field under the Organization tab.
