About

This document will guide you through scoping your O365 Exchange Online mailflow rules to specific users or user groups. 

Configure Mailflow Rule (Example)

Navigate to the: Exchange Admin Center

Inbound Rule Configuration

A. Navigating to the Compliance Settings

1. Log in to your O365 portal with admin privileges.
2. Proceed to Admin Center > Exchange to access the Exchange Admin Center (EAC).

 B. Editing or Creating a Rule

1. Identify the inbound rule you wish to adjust or click to create a new one.
2. Click on the rule to edit, then "Edit rule conditions" to access detailed configurations.

 C. Specifying Users or Groups

1. Under the Apply this rule if… section, choose The recipient is... to scope the rule to specific users or user groups.
2. Enter the email address of the user or the group email address in the "recipient" field.
   
   
   

 D. Saving the Rule

1. Ensure your configurations are correct, and click "Save" to implement the rule.

Outbound Rule Configuration

A. Navigating to the Compliance Settings

1. Log in to your O365 portal with admin privileges.
2. Proceed to Admin Center > Exchange to access the Exchange Admin Center (EAC).

 B. Editing or Creating a Rule

1. Identify the outbound rule you wish to adjust or click to create a new one.
2. Click on the rule to edit, then "Edit rule conditions" to access detailed configurations.

 C. Setting Up Envelope Filters

1. Under the Apply this rule if… section, choose The sender is... to scope the rule to specific users or user groups.
2. Enter the email address of the user or the group email address in the "sender" field.
   

 D. Saving the Rule

1. Ensure your configurations are correct, and click "Save" to implement the rule.

Conclusion and Key Considerations

By carefully following these streamlined instructions, you can effectively scope inbound and outbound Microsoft 365 Mailflow rules to specific users or user groups. This targeted approach enables precise control over the compliance of email content tailored to your organization's needs. 

It's important to note that if you do not specify the users or groups and choose the external/internal options, the rule will apply to all emails within the organization, broadening its scope significantly. This flexibility allows for the creation of both broad and narrowly targeted compliance policies, depending on your organization's requirements.

Implementing these guidelines ensures that your M365 Mailflow rule adheres to desired compliance standards, enhancing overall email security and governance.