Feedback by UserVoice

Office 365 Security & Compliance

We have partnered with UserVoice, a third-party service and your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy. Please do not send any novel or patentable ideas, copyrighted materials, samples or demos for which you do not want to grant a license to Microsoft.

Welcome to the Security (Protection) & Compliance UserVoice forum. We’re happy you’re here! If you have suggestions or ideas on how to improve Security or Compliance related features in O365, we’d love to hear them!

How it works
◾Check out the ideas others have suggested and vote on your favorites
◾If you have a suggestion that’s not listed yet, submit your own — 25 words or less, please
◾Include one suggestion per post

Thanks for joining our community and helping improve these features in Office 365!

Need Tech Support? Please see the O365 Community for the product or feature you are having issues with, or open a support ticket through your Office 365 administrator portal.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. OneDrive for Business unable to perform delete folder directly caused by Retention Policy

    Dear Microsoft,

    OneDrive for Business is one of the useful tools for cloud storage whereby end user should be able to folders (even got files inside) easily even being applied with retention policy.

    Retention policy is suppose used on backend which not suppose to affect on OneDrive for Business usage. We are have 500 users getting impact on this. (and i assume all users having this issue as Microsoft support tested having this issue - "behaviour")

    I was informed by Microsoft that this is by default preservation policy design behaviour, which I think this is not consider design behavior anymore…

    613 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  2. Preservation Lock enable and disable with special permission or at least with Microsoft Support.

    Preservation Lock can be set so easily that if you click on the policy on the right it will give you the option of on and Off resulting in a lock that even Support can not remove. Either provide a secure way of enabling disabling to the user or at least give it to Microsoft Support to do it on Client's behalf.

    249 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  3. Allow dynamic retention policy based on group membership

    The below is too great a restriction and renders the retention policy useless.

    Groups selection confirmation

    The specified groups will be expanded so that an In-Place Hold can be put on the mailboxes in these groups. Only the mailboxes that are currently members of these groups will be placed on hold. Mailboxes added to or removed from these groups won't be added or removed from this hold. After setting the group for the location, the new member changes for this group will not auto apply to this location settings. Do you want to expand these groups?

    126 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  4. Need to have the limit of 100 site collections increased for inclusion/exclusion in a retention policy.

    Need to have the limit of 100 site collections increased for inclusion/exclusion in a retention policy. To meet business requirements where they may be thousands of site collections but not all require the same retention policy, this is very limiting limit.

    88 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  5. Retention Policy - Office 365 Groups - Separate Deletion settings for Exchange & SharePoint workload

    Retention Policies for Office 365 Groups currently treat all resources the same (i.e. Exchange and SharePoint). We need the ability to configure email items to delete after X years, but not delete documents stored on SharePoint.

    86 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  6. Raise limit for specific inclusion / exclusion policies for retention and deletion

    A retention policy for specific inclusions / exclusions can contain no more than 1,000 mailboxes and 100 site collections. A tenant can contain no more than 10,000 retention policies. Our organizational entities are more than the limits, which blocks us from using this feature. See: https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-policies

    56 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  7. Retention Compliance Rule - Exclude Item Classes

    Provide the capability to exclude item classes from a Retention Compliance Rule. This will allow for excluding Notes, Tasks, and Calendar items

    MS has published articles detailing how to do this for hold policies dating back to January of 2018, but the cmdlets still do not exist.

    https://support.office.com/en-us/article/overview-of-retention-policies-5e377752-700d-4870-9b6d-12bfc12d2423

    Set-RetentionComplianceRule [-ExcludedItemClasses <MultiValuedProperty>

    32 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  8. skype For Business Org-wide Retention Policy

    Add the ability to have an organization wide conversation retention policy for Skype For Business the current limit of 1000 users dosent help when you have 10k + users

    32 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  9. Retention Label when defined as record don't allow change metadata

    When define a Retention Label as a record don't allow to change metadata (columns) in SharePoint. Now it only not permite change a file, but we can change metadata related to the file in document library.

    27 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  10. Record retention label - Disable "Record Status" toggling feature

    Based on Microsoft new feature release in Jan 2020, it allows user to toggle "Record status" to lock / unlock for a documents that are being applied with record retention labels. This feature is undesirable whereby it allows users with "members" rights to unlock and modify a record. We wish to have more control in terms of record handling and wish to disable this feature. Is there a way to hide this option from users and only allow site collection administrator to do so?

    26 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  11. Retention label rules should also apply to Document Sets in SharePoint

    Currently it's possible to apply a retention label to a Document Set in SharePoint, which means that all documents in it are retained and disposed according to the rules set on the label. But the Document Set are not disposed of, only documents within it. As Document Sets usually have custom metadata (e.g. Personal Identifiable Information) which is subject to data retention regulations, it is necessary for Document Sets to be subject to the label rules as well.

    14 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  12. Add retention tags for Notes and Calendar

    Please add the Notes and Calendar from the Exchange Admin Center to new Compliance / Security section

    10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  13. Create separate retention policies for 1:1 chat and Team / Channel chat

    In Skype for Business, there's an option to log or not log messages, and all one to one or one to many messaging threads are treated as ephemeral messaging if logging is disabled.

    In teams, not logging or retaining messaging in a Team or a Channel reduces the value of the tool. Currently, retention can be configured for chat to team or channel messaging, and the same retention level is applied to all messaging. (30 day minimum)

    It would be great if 1:1 or 1:many chats could be treated as ephemeral messaging, and teams / channel chat could be set…

    10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  14. Provide the ability to call a Microsoft Flow in a Retention Label in Security and Compliance Center similar to an IRM policy in a library.

    When configuring a retention label in security and compliance center a Microsoft Flow should be an option to execute when executed. Similar functionality exists in Information Rights Management in a document library that can call a SharePoint designer workflow. Flow should be integrated into SCC to accommodate custom actions.

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  15. Change retention policy functionality for Teams so that it works on teams below 10mb in size

    Change retention policy functionality for Teams so that it works on teams below 10mb in size.

    As of today, any Team has to be at least 10mb in size for any retention policy to work on that particular team. This is because the Managed Folder Assistant will not run for mailboxes below that size limit. I have yet to understand the reasoning behind this limitation??

    For Teams the limitation as described is especially problematic in that the mentioned 10mb size is calculated based solely on the "totalitemsize" property on the team's mailbox. This is a problem, since that value does…

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  16. Disposition review using PowerAutomate

    The Disposition Review dashboard show a list of many documentens that have to be reviewed when using in large companies. It would be useful to create Dispotition Review approval workflows to managed them.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  17. Allow version deletion in sites with retention policy applied

    Currently users can delete documents in sites with retention policies applied. When a user tries to delete a version of a document, they get an error message. Since versions of documents show up in the Preservation Hold Library as separate documents, it would improve consistency of behavior if users could also delete versions of a document.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  18. retention permanently delete

    Allow deletion policy to permanently delete files instead of going to recycle bin. The old Compliance Center in SharePoint Online had this option but it is not in the O365 version. This is a requirement for legal compliance.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  19. Improve the UX for adding labels, for end users

    Labels are displayed to end users in a single flat list. Basic UX guidance suggests that such flat lists work for 7-10 items, not more. Yet some organizations will be applying sophisticated file plans using labels. It is totally possible that general purpose document libraries might require 20, 30 or more labels to be available.

    Therefore the UX for labels should be improved, at minimum to allow categories/folders of labels. Or alternatively a UX similar to the Managed Metadata picker could be applied. This would make for a tolerable end user experience in choosing a label to apply from a…

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  20. provide a way to check retention tag status from user's mailbox via admin portal and via power shell for retention reporting and monitoring

    When corporate user mailboxes are assigned retention policies, administrator should have ways to know if user's folder have personal tag or not, to understand how user protect their data.And a power shell command for checking retention tag on specific folder would be necessary.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
← Previous 1
  • Don't see your idea?

Feedback and Knowledge Base