Commands › Exchange Online

Set-QuarantinePermissions

Exchange Online ExchangeOnlineManagement Set-*

**Note**: Instead of using this cmdlet to set quarantine policy permissions, we recommend using the EndUserQuarantinePermissionsValue parameter on the New-QuarantinePolicy and Set-QuarantinePolicy cmdlets. Use the Set-QuarantinePermissions cmdlet to modify quarantine permissions objects that were created by the New-QuarantinePermissions and stored as a variable in the current PowerShell session. You use the variable as a value for the EndUserQuarantinePermission parameter on the New-QuarantinePolicy or Set-QuarantinePolicy cmdlets in the same PowerShell session.

Quick start script

# Set-QuarantinePermissions — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-QuarantinePermissions
$before | Format-List

# 3. Make the change
Set-QuarantinePermissions -QuarantinePermissionsObject <QuarantinePermissions>

# 4. Verify and diff
$after = Get-QuarantinePermissions
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

Set-QuarantinePermissions -QuarantinePermissionsObject <QuarantinePermissions>
 [[-PermissionToAllowSender] <Boolean>]
 [[-PermissionToBlockSender] <Boolean>]
 [[-PermissionToDelete] <Boolean>]
 [[-PermissionToDownload] <Boolean>]
 [[-PermissionToPreview] <Boolean>]
 [[-PermissionToRelease] <Boolean>]
 [[-PermissionToRequestRelease] <Boolean>]
 [[-PermissionToViewHeader] <Boolean>]
 [<CommonParameters>]

Parameters (9)

Parameter	Type	Required	What it controls
-QuarantinePermissionsObject	QuarantinePermissions	yes	The QuarantinePermissionsObject parameter specifies the existing variable that contains quarantine permissions that you want to modify. For example if you previously ran the command `$Perms =...
-PermissionToAllowSender	Boolean		The PermissionToBlockSender parameter specifies whether users are allowed to add the quarantined message sender to their Safe Senders list. Valid values are:
-PermissionToBlockSender	Boolean		The PermissionToBlockSender parameter specifies whether users are allowed to add the quarantined message sender to their Blocked Senders list. Valid values are:
-PermissionToDelete	Boolean		The PermissionToDelete parameter specifies whether users are allowed to delete messages from quarantine. Valid values are:
-PermissionToDownload	Boolean		The PermissionToDownload parameter specifies whether users are allowed to download messages from quarantine. Valid values are:
-PermissionToPreview	Boolean		The PermissionToPreview parameter specifies whether users are allowed to preview quarantined messages. Valid values are:
-PermissionToRelease	Boolean		The PermissionToRelease parameter specifies whether users are allowed to directly release affected messages from quarantine. Valid values are:
-PermissionToRequestRelease	Boolean		The PermissionToRequestRelease parameter specifies whether users are allowed to request messages to be released from quarantine. The request must be approved by an admin. Valid values are:
-PermissionToViewHeader	Boolean		The PermissionToViewHeader parameter specifies whether users are allowed to view the message headers of quarantined messages. Valid values are:

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.