Modifying an existing safe attachments policy in O365

Modifying an existing safe attachments policy

The following steps illustrate how you would use the Security & Compliance Center to modify an existing safe attachments policy named SA block policy to exempt a security analyst named Ellie. The policy is configured with the following options:

• The policy is enabled.
• The action is Block.
• The policy is applied to everyone in the tenant domain.

1. Go to the Security & Compliance Center. Sign in using your admin account credentials.
2. In the Security & Compliance Center, in the left navigation pane, click Threat management > Policy.
3. Click ATP Safe Attachments.
4. Select the policy to be modified from the list of safe attachments policies.
5. Click the Edit icon (looks like a pencil) to open the SA block policy page.

6. Click applied to.
7. Under Except if…, click the add exception button.
8. Select the recipient from the drop-down list and select Investigator Ellie from the Select Members dialog box, click add, and then click OK.

9. When you have finished with the settings, click Save.