Commands › Exchange Online

New-ExoSecOpsOverrideRule

Exchange Online ExchangeOnlineManagement New-*

Create SecOps mailbox override rules that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

Quick start script

# New-ExoSecOpsOverrideRule — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-ExoSecOpsOverrideRule
$before | Format-List

# 3. Make the change (dry run first)
New-ExoSecOpsOverrideRule -Policy <PolicyIdParameter> -WhatIf
New-ExoSecOpsOverrideRule -Policy <PolicyIdParameter>

# 4. Verify and diff
$after = Get-ExoSecOpsOverrideRule
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

New-ExoSecOpsOverrideRule -Policy <PolicyIdParametert>
 [-Comment <String>]
 [-Confirm]
 [-DomainController <Fqdn>]
 [-Name <String>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (6)

Parameter	Type	Required	What it controls
-Policy	PolicyIdParameter	yes	The Policy parameter specifies the phishing simulation override policy that's associated with the rule. You can use any value that uniquely identifies the policy. For example:
-Comment	String		The Comment parameter specifies an optional comment. If you specify a value that contains spaces, enclose the value in quotation marks ("), for example: "This is an admin note".
-Confirm	SwitchParameter		This parameter is reserved for internal Microsoft use.
-DomainController	Fqdn		This parameter is reserved for internal Microsoft use.
-Name	String		The Name parameter specifies the name for the policy. Regardless of the value you specify, the name is `_Exe:SecOpsOverrid:<GUID>` \[sic\] where \<GUID\> is a unique GUID value (for example,...
-WhatIf	SwitchParameter		This parameter is reserved for internal Microsoft use.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.