Feedback by UserVoice

Office 365 Security & Compliance

We have partnered with UserVoice, a third-party service and your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy. Please do not send any novel or patentable ideas, copyrighted materials, samples or demos for which you do not want to grant a license to Microsoft.

Welcome to the Security (Protection) & Compliance UserVoice forum. We’re happy you’re here! If you have suggestions or ideas on how to improve Security or Compliance related features in O365, we’d love to hear them!

How it works
◾Check out the ideas others have suggested and vote on your favorites
◾If you have a suggestion that’s not listed yet, submit your own — 25 words or less, please
◾Include one suggestion per post

Thanks for joining our community and helping improve these features in Office 365!

Need Tech Support? Please see the O365 Community for the product or feature you are having issues with, or open a support ticket through your Office 365 administrator portal.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Make the disposition date available as column in SharePoint libraries

    Based on the Retention Label, the retention period and date a Retention period starts, the disposition date can be calculated. For end users it is an advantage if they can see, filter or sort on the disposition date in a SharePoint library. A nice to have is also the action that follows de disposition date, like Delete, Trigger disposition review or retention period ends.

    24 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  2. Allow SharePoint Subsites be be Excluded from Retention Policy

    Enable the Ability to Exclude Subsites from Retention Policies to allow for easier deletion and management of sites

    24 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  3. Apply a retention policy based on delete item event

    Need an option to create a retention policy that will be applied to an object based on an event. In particular we need to ability to detect that an item has been deleted and automatically have a retention policy applied to the object.

    23 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  4. Allow retention policies to be assigned via AD group

    I want to apply a retention policy that is tied to an AD group. When I try to do so, I get the explanation below.

    I would like it to be possible to assign a retention policy to a group and have this apply on an on going basis and not just to userrs in the group at the time that it is applied.

    Distribution lists and mail-enabled security groups will be expanded so the policy will apply to all the mailboxes in the group. Only the mailboxes that are currently members of these groups will be covered by the…

    23 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  5. Automatically remove deleted auto-applied labels from documents

    Auto-applied retention label, and the policy, was deleted, but the label is not going away for the records that were auto-tagged by this policy.

    For example, we created a new label, assigned a policy that would auto-apply the label based on keywords in the documents of the library. Then we deleted the policy and the label, but the document's retention label didn't disappear. We have waited 7+ days just to be safe, but the label on the record is still there. Is this the intended design? (We opened a ticket with Microsoft and they've confirmed this is the case -…

    22 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  6. Send disposition reviews to end user

    Currently reviewers can be individual users, distribution or security groups, or Office 365 groups.

    In many mid-size companies there isn't resources to have dedicated people to this.

    It would be preferable to have the document owner receive an email notification that they have content to review, and decide next step.

    20 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  7. Allow Programatic application of default Compliance Labels to document libraries/folders

    Within the new Advanced Data Governance Framework you have made it possible to apply default compliance labels to document libraries via the UI.

    Could you please enable this capability via the API so we can set this value programmatically for libraries.

    It would also be very useful to have the capability to set compliance label default values at a folder level both via the UI and through the API.

    18 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  8. Exchange online retention policy - log and report

    Currently there is no logging/reporting functions on exchange online retention policy. It would be good if a log can be extracted which contains information on what happened and what has been destroyed. Information such as message subject, sender/recipient, date sent/received, date destroyed and name of retention policy applied could be valuable for compliance and auditing.

    18 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  9. Enable Information Barrier feature on all education licenses for use in Scoped Directory Search on Teams

    Is it possible to enable the Information Barrier Feature on all educational licenses? I can't regulate who my students are chatting with and they are starting inappropriate group chats with each other. Scoped Directory Search would solve this problem but the New-InformationBarrierPolicy cmdlet is not available with an A1 education license, only A5 and E5 have this feature available. This would be extremely beneficial in helping our school to move forward with remote education through the Teams. We are a small district and cannot afford the upgraded the licensing for our user base in order to enable this one feature.

    18 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  10. Add option to automatically include any new mailboxes or onedrive for business sites in a preservation policy

    Provide a way to set a preservation policy on all existing content (mailboxes, public folders, and onedrive for business sites) and have that policy apply to any new user's added to our tenant.

    Right now we have 1500 users and a requirement to keep any documents or emails for 13 months. I have to add each mailbox to a preservation policy and have multiples preservation policies because of the 1000 cap. I then have to use a powershell script to create new users so that their mailbox and onedrive for business sites are included in the preservation policy as well.

    17 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  11. Mailboxes without license should be automatically excluded from Retention Policy hold

    Retention Policy in Data Governance section requires Exchange Online Plan 2 license to be assigned to each mailboxes on hold.

    However ,when user chooses "Exchange mailbox" in "Select Location" section of the Retention Policy, mailboxes without appropriate license (such as resource mailbox, shared mailbox) are
    included without any notification.

    In order to avoid unintended license violation, there should be a function to automatically exclude mailboxes without appropriate license from being on hold by Retention Policy.

    17 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  12. Add Site/Library/Folder filter to Dispositions Dashboard

    The new Dispositions dashboard is a great addition to the Compliance Centre. At the moment though you can only filter by date range and label.

    It would be really useful to have the ability to filter the dashboard further so that you can return, for example, all items that are eligible for disposition within a specific document library or folder.

    When you extract the dashboard as a report to Excel currently, you are provided with the filepath to the item in the excel report so presumably it would be possible to use this information directly in the dashboard to make…

    16 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  13. Automatic deletion of search results for GDPR requests

    We need the ability to Automatically delete the data that was found in a content search for GDPR requests. We currently have to review the report of what was found and then manually delete the data across the entire O365 suite of products. Its a pain and time consuming. There should be a "DELETE SEARCH RESULTS ACROSS O365" button in Security & Compliance Center.

    16 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  14. Mandatory (or required) Retention Label

    It would be very useful to have the ability to make a Retention Label mandatory, in a similar way to SharePoint columns. Ideally, it would be useful to be able to set a specific Retention Label to be required at the following levels:


    • Content Type - require all items using a given content type to have a Retention label

    • Library - require all items in a given libary to have a Retention label

    • Folder (both SharePoint/OneDrive/Outlook folders) - require all items in the given folder to have a Retenton label

    Additionally, when a label is mandatory, it will be importan…

    16 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  15. Add a new permission roles to manage Records Management

    The new Records Management feature is great but it would be great to have 2 new permission roles that we can use to assign to some users without giving them access to configure the entire Compliance centre. The roles are: Records Manager - who can manage and administer the Records Management configurations and Disposition Manager - who can manage or approve any record/files that has been marked for disposal, but not able to manage the configurations set in the Records Management file plan.

    15 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  16. Alert Policy for "Unusual Volume of file deletion" should ignore when Retention Policy expires

    Alert Policy for "Unusual Volume of file deletion" should ignore when Retention Policy expires
    We have a 3 year retention policy.
    During that 3 years, people delete things, but they really don't delete until the end of the 3 year retention policy.
    So every day, we get the "Unusual Volume of file deletion" event, but it's really just the 3 year-old files that are getting deleted due to retention policy timing out the deleted files.
    Can you exclude these types of deletions because clearly the intent of the rule is to alert of sudden deletions, not the ones that happened…

    14 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  17. Create separate retention policies for 1:1 chat and Team / Channel chat

    In Skype for Business, there's an option to log or not log messages, and all one to one or one to many messaging threads are treated as ephemeral messaging if logging is disabled.

    In teams, not logging or retaining messaging in a Team or a Channel reduces the value of the tool. Currently, retention can be configured for chat to team or channel messaging, and the same retention level is applied to all messaging. (30 day minimum)

    It would be great if 1:1 or 1:many chats could be treated as ephemeral messaging, and teams / channel chat could be set…

    13 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  18. Set the retention policy with certain parameter in bulk

    It would be great if we could set or remove the retention policy in bulk for mailboxes such as shared mailboxes or resource mailboxes which contains certain parameter. When setting the retention policy by GUI, we currently have to select only Add or Remove for individual retention items.

    13 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  19. Allow the bulk import of sites or mailboxes when creating a retention policy.

    When creating a retention policy, only one user mailbox, OneDrive site, or SharePoint site can be added at a time. It would be beneficial to have the ability to have the ability to apply multiple mailboxes and/or sites at once to a single retention policy.

    12 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  20. Record status: Locked in SharePoint (lock icon) not synced in OneDrive (no lock icon)

    When applying a retention label with record status locked to a document in SharePoint (lock icon displayed) and opening this document in the synched OneDrive file explorer (no lock icon displayed), it first will show AutoSave enabled and only after some time state “Upload Failed” and turn off AutoSave. If I now edit the document and close it, I can choose to save the changes to this document. Now OneDrive cannot sync the local edited file with SharePoint and the status is permanently showing the “Processing changes” icon. In case the record status of this document is now at some…

    12 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  • Don't see your idea?

Feedback and Knowledge Base