Commands › Exchange Online

New-SupervisoryReviewRule

Exchange Online ExchangeOnlineManagement New-*

For more information, see Security & Compliance PowerShell. Use the New-SupervisoryReviewRule cmdlet to create supervisory review rules in the Microsoft Purview compliance portal. Supervisory review lets you define policies that capture communications in your organization so they can be examined by internal or external reviewers.

Quick start script

# New-SupervisoryReviewRule — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-SupervisoryReviewRule
$before | Format-List

# 3. Make the change (dry run first)
New-SupervisoryReviewRule -Name <String> -Policy <PolicyIdParameter> -WhatIf
New-SupervisoryReviewRule -Name <String> -Policy <PolicyIdParameter>

# 4. Verify and diff
$after = Get-SupervisoryReviewRule
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

New-SupervisoryReviewRule [-Name] <String> -Policy <PolicyIdParameter>
 [-AdvancedRule <String>]
 [-CcsiDataModelOperator <String>]
 [-Condition <String>]
 [-Confirm]
 [-ContentContainsSensitiveInformation <PswsHashtable[]>]
 [-ContentMatchesDataModel <String>]
 [-ContentSources <String[]>]
 [-DayXInsights <Boolean>]
 [-ExceptIfFrom <MultiValuedProperty>]
 [-ExceptIfRecipientDomainIs <MultiValuedProperty>]
 [-ExceptIfRevieweeIs <MultiValuedProperty>]
 [-ExceptIfSenderDomainIs <MultiValuedProperty>]
 [-ExceptIfSentTo <MultiValuedProperty>]
 [-ExceptIfSubjectOrBodyContainsWords <MultiValuedProperty>]
 [-From <MultiValuedProperty>]
 [-IncludeAdaptiveScopes <String[]>]
 [-InPurviewFilter <String>]
 [-Ocr <Boolean>]
 [-PolicyRBACScopes <MultiValuedProperty>]
 [-SamplingRate <Int32>]
 [-SentTo <MultiValuedProperty>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (24)

ParameterTypeRequiredWhat it controls
-Name String yes The Name parameter specifies the unique name for the supervisory review rule. The name can't exceed 64 characters. If the value contains spaces, enclose the value in quotation marks (").
-Policy PolicyIdParameter yes The Policy parameter specifies the supervisory review policy that's assigned to the rule. You can use any value that uniquely identifies the policy. For example:
-AdvancedRule String {{ Fill AdvancedRule Description }}
-CcsiDataModelOperator String {{ Fill CcsiDataModelOperator Description }}
-Condition String The Condition parameter specifies the conditions and exceptions for the rule. This parameter uses the following syntax:
-Confirm SwitchParameter The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-ContentContainsSensitiveInformation PswsHashtable[] {{ Fill ContentContainsSensitiveInformation Description }}
-ContentMatchesDataModel String {{ Fill ContentMatchesDataModel Description }}
-ContentSources String[] {{ Fill ContentSources Description }}
-DayXInsights Boolean {{ Fill DayXInsights Description }}
-ExceptIfFrom MultiValuedProperty {{ Fill ExceptIfFrom Description }}
-ExceptIfRecipientDomainIs MultiValuedProperty {{ Fill ExceptIfRecipientDomainIs Description }}
-ExceptIfRevieweeIs MultiValuedProperty {{ Fill ExceptIfRevieweeIs Description }}
-ExceptIfSenderDomainIs MultiValuedProperty {{ Fill ExceptIfSenderDomainIs Description }}
-ExceptIfSentTo MultiValuedProperty {{ Fill ExceptIfSentTo Description }}
-ExceptIfSubjectOrBodyContainsWords MultiValuedProperty {{ Fill ExceptIfSubjectOrBodyContainsWords Description }}
-From MultiValuedProperty {{ Fill From Description }}
-IncludeAdaptiveScopes String[] {{ Fill IncludeAdaptiveScopes Description }}
-InPurviewFilter String {{ Fill InPurviewFilter Description }}
-Ocr Boolean {{ Fill Ocr Description }}
-PolicyRBACScopes MultiValuedProperty {{ Fill PolicyRBACScopes Description }}
-SamplingRate Int32 The SamplingRate parameter specifies the percentage of communications for review. If you want reviewers to review all detected items, use the value 100.
-SentTo MultiValuedProperty {{ Fill SentTo Description }}
-WhatIf SwitchParameter The WhatIf switch doesn't work in Security & Compliance PowerShell.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.