In response to an increasingly sophisticated and targeted threat landscape, organizations need differentiated protection for their most visible and targeted employees.
Why use Priority Account Protection
- Prioritize C-Suite and other targeted employees by tagging them as Priority accounts for highlighted visibility across Defender surfaces.
- Ensure these critical users receive differentiated protection with Priority account protection.
Context
Priority account protection helps IT and security teams ensure a high quality of service and protection for the critical people within your organization. Tagging an account as a priority account will enable the additional protection tuned for the mail flow patterns targeting company executives, along with extra visibility in reports, alerts, and investigations, using it couldn't be simpler.
End-User Productivity
- Users will not be aware they have been tagged.
- The protection offered is tailored for the tagged users, additional protection trained on the type of mail C-Suite and highly targeted employees often receive.
- False positives can be easily managed with the Tenant Allow Block List (TABL)
Security Impact
By tagging appropriate users as priority accounts, you are improving your organizations security posture, not only enabling additional protection, but visibility and reporting within the security tooling.
Implementation
You can tag users individually, or use an existing group if you have one, protecting your VIP accounts couldn't be easier.
Rollback
Depending on the issue, you can simply un-tag users if required, disable the protection element of Priority Account Protection (not recommended) or enable exceptions within the Tenant Allow Block List. (TABL)
Top Tips
The protection is tailored for the specific threats we see targeting executives, tagging all the users in a tenant will hinder the performance of protection and visibility in tooling.
Documentation
A step-by-step guide is available to assist you in the configuration of priority accountsLearn more.
Blog
Learn more about priority account protection on the Microsoft Defender for Office 365 BlogLearn more.
Priority account protection
Protect your Priority account users with:
- Additional machine learning models and heuristics focused on Priority account usage patterns
- More detailed evaluation of detonation results
- Visual indicators for emails sent to Priority accounts
- Sign to theMicrosoft Defender portal.
- In the navigation bar, selectSettings.
- SelectPriority account protection.
- Make sure protection is set toOn.