If you use O365 or Gmail as your MTA, you can give Email Security — Cloud the authority to retroactively quarantine, delete, or move emails that are detected as advanced threats after delivery. You create and assign authorizations to remediation policies in the Email Security - Cloud Web portal. After you create an authorization, you must verify it by logging into your O365 or Google Workspace account or the Azure AD app and formally providing Email Security — Cloud permission to act retroactively on your behalf. You must be an administrative O365 or Google Workspace user to authorize Email Security — Cloud to retroactively act against advanced threats. You can assign an unverified authorization to a remediation policy, but it will not function until it is verified. A single authorization can be added to multiple remediation policies.
Important
Authorizations are available only to customers using inline and inline with hygiene with O365 or Google Workspace.
You can view, edit, or add authorizations in the Authorization page. To access the Authorization page, click Configuration in the top menu, then click Authorizations from the drop-down list.