MC1200058 – M365 Change Digest

One-line summary

Teams and Defender for Office 365 integration lets security admins centrally manage blocked external users/domains in Teams via the Defender portal; rollout starts January 2026.

Similar updates

Details

RoadmapIds

542189

Summary

Admins can now block external users in Microsoft Teams via the Tenant Allow/Block List in the Microsoft Defender portal, controlling access and communications. This feature, rolling out January 2026, supports up to 4,000 domains and 200 emails, with audit logging and no impact on existing Teams settings.

Platforms

Web

Body (from Message Center)

[Introduction]

We’re introducing an integration between Microsoft Teams and Microsoft Defender for Office 365 that allows security admins to manage blocked external users in Teams through the Tenant Allow/Block List (TABL) in the Microsoft Defender portal. This centralized approach enhances security and compliance by enabling organizations to control external user access across Microsoft 365 services.

This message is associated with Roadmap ID 542189.

[When this will happen:]

General Availability (Worldwide): Rollout begins early January 2026 and is expected to complete by mid-January 2026.

[How this affects your organization:]

Who is affected: Organizations using Microsoft Teams and Microsoft Defender for Office 365 Plan 1 or Plan 2.

What will happen:

Security admins (with Teams admin permission) can add, delete, and view blocked external users and domains for Teams in the Microsoft Defender portal.

Screenshot 1: Image showcasing the teams block sender and block domain list in Microsoft Teams

user settings

Incoming communications (chats, channels, meetings, and calls) from blocked users will be prevented.
Existing communications from blocked users will be automatically deleted.
Audit logs will track actions taken to block users for compliance monitoring.
Entry limits: Up to 4,000 blocked domains and 200 email addresses can be configured for Teams.
This applies to all Teams clients and the Defender XDR web portal.
Existing federation configurations and domain blocks in the Teams admin center remain unaffected.

[What you can do to prepare:]

Enable the setting “Block specific users from communicating with people in my organization” in the Teams admin center (default: Off).

Screenshot 2: Image showing the teams toggle for blocking sender email addresses in Microsoft Teams

user settings

Enable the setting “Allow my security team to manage blocked domains and blocked users” in the Teams admin center (default: Off).
Grant security team access to manage blocked domains and users in the Teams admin center.
Review internal documentation and inform helpdesk staff about this change.
Learn more: Tenant Allow/Block List documentation.

[Compliance considerations:]

No compliance considerations identified, review as appropriate for your organization.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-01-01T00:00:00Z",
    "ai_actions": [
      "Enable Teams settings for blocking users/domains",
      "Grant security team management access",
      "Review documentation and inform helpdesk"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Teams and Defender for Office 365 integration lets security admins centrally manage blocked external users/domains in Teams via the Defender portal; rollout starts January 2026.",
    "ai_topics": [
      "Teams",
      "Defender"
    ],
    "category": "stayInformed",
    "details_map": {
      "Platforms": "Web",
      "RoadmapIds": "542189",
      "Summary": "Admins can now block external users in Microsoft Teams via the Tenant Allow/Block List in the Microsoft Defender portal, controlling access and communications. This feature, rolling out January 2026, supports up to 4,000 domains and 200 emails, with audit logging and no impact on existing Teams settings."
    },
    "id": "MC1200058",
    "importance": 4,
    "is_major_change": false,
    "last_modified": "2025-12-19T07:08:18Z",
    "ms_products": [
      "Teams",
      "Defender"
    ],
    "platforms": "Web",
    "roadmap_ids": [
      "542189"
    ],
    "services": [
      "Microsoft Teams",
      "Microsoft Defender XDR"
    ],
    "severity": "normal",
    "tags": [
      "New feature",
      "Admin impact"
    ],
    "title": "Microsoft Defender for Office 365: Admins can block external users in Microsoft Teams from Defender Portal"
  }
}