{"id":4672,"date":"2026-10-19T12:06:59","date_gmt":"2026-10-19T09:06:59","guid":{"rendered":"https:\/\/support.withsecure.com\/?page_id=4672"},"modified":"2026-10-19T12:06:59","modified_gmt":"2026-10-19T09:06:59","slug":"collaboration-protection","status":"publish","type":"page","link":"https:\/\/support.withsecure.com\/en\/support-articles\/products\/collaboration-protection\/","title":{"rendered":"Collaboration Protection"},"content":{"rendered":"<section\n    class=\"wp-block-support-banner edwp-block wp-block-support-banner--bg-light-gray layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n            <div class=\"wp-block-support-banner__container\">\n        <div class=\"wp-block-support-banner__content-wrapper\">\n                        <div class=\"wp-component-content wp-component-content--default wp-block-support-banner__content\">\n            <h2 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Support articles<\/h2>                    <div class=\"wp-component-content__inner\">\n                                    <div class=\"wp-component-content__content wysiwyg\">\n                        <div class=\"wp-component-paragraph \">\n    <h4>Collaboration Protection<\/h4>\n<\/div>\n                    <\/div>\n                                                            <\/div>\n                <\/div>                            <div class=\"wp-block-support-banner__searchbar\">\n                    <div class=\"addsearch-standalone-searchbar-container\" data-addsearch-results-url=\"\/en\/search\"><\/div>\n                <\/div>\n                                <\/div>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-service-status edwp-block js-wp-block-service-status\"\n    >\n    <div class=\"wp-block-service-status__container\">\n                <div id=\"status-container\" class=\"banner-layout\" style=\"--status-max-width: 1476px\"><\/div>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-content-list edwp-block layout--spacing-l-top layout--spacing-l-bottom\"\n    >\n    <div class=\"wp-block-content-list__container\">\n        \n        <div class=\"wp-block-content-list__main\">\n                    <ul class=\"wp-block-content-list__list\">\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-10-18T19:39:22+00:00\">October 18, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/support-articles\/elements-collaboration-protection-license-not-released-after-mailbox-has-been-deleted-from-exchange\/\">\n                <p class=\"wp-block-content-list__title\">Elements Collaboration Protection license not released after mailbox has been deleted from Exchange<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5>Issue:<\/h5>\n<p>We have deleted some mailboxes from our Exchange \/ Microsoft Office 365 \/ Azure, but even after deleting the mailboxes the Elements Collaboration Protection <strong>Subscription usage <\/strong>still shows that the license is used. Why is the license not released immediately after deleting a mailbox?\u00a0<\/p>\n<h5>Resolution:<\/h5>\n<p>When a mailbox is deleted on the Azure side, it will take 24 hours before Elements Collaboration Protection marks it as &quot;Unavailable&quot;. These Unavailable mailboxes don&#39;t get removed from the view immediately but\u00a0they also do not reserve any licenses.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-10-18T12:45:31+00:00\">October 18, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/support-articles\/how-to-have-elements-collaboration-protection-protect-newly-added-mailboxes-sharepoint-and-teams-assets-and-onedrive-drives\/\">\n                <p class=\"wp-block-content-list__title\">How to have Elements Collaboration Protection protect newly-added mailboxes, SharePoint and Teams assets and OneDrive drives?<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5>Issue:<\/h5>\n<p>If we have new users added to our Microsoft Azure tentant, how to have Elements Collaboration Protection protect newly-added mailboxes, SharePoint and Teams assets and OneDrive drives?<\/p>\n<h5>Resolution:<\/h5>\n<p>To have newly added users assets automatically protected by Elements Collaboration Protection, follow these steps:<\/p>\n<ol>\n<li>Log in to the Elements Security Center portal<\/li>\n<li>Navigate to the <strong>Collaboration Protection &gt; Cloud services <\/strong>page<\/li>\n<li>Click on the cloud service\u00a0\n<ol>\n<li>From the <strong>Exchange <\/strong>tab, enable <strong>Automatically protect newly-added mailboxes<\/strong><\/li>\n<li>From the <strong>SharePoint <\/strong>tab, enable <strong>Automatically protect newly-added SharePoint and Teams assets<\/strong><\/li>\n<li>From the <strong>OneDrive <\/strong>tab, enable\u00a0<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p>Note that <strong>Teams <\/strong>shares this setting with <strong>SharePoint<\/strong>.\u00a0<\/p>\n<p>\u00a0<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-10-18T08:33:44+00:00\">October 18, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/support-articles\/onedrive-sharepoint-and-teams-protection-status-goes-to-disabled-or-disconnected-state-repeatedly\/\">\n                <p class=\"wp-block-content-list__title\">OneDrive, SharePoint and Teams protection status goes to disabled or disconnected state repeatedly<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5>Issue:<\/h5>\n<p>We have tried enabling Elements Collaboration protection for OneDrive, SharePoint and Teams on the <strong>Cloud services <\/strong>page in the Elements Security Center portal, but the protection status for them goes to disabled or disconnected state repeatedly even if we try to re-enable the proction.<\/p>\n<p>Why is the protection status for OneDrive, SharePoint and Teams randomly disabled?<\/p>\n<h5>Resolution:<\/h5>\n<p>This can happen in two cases:<\/p>\n<p><strong>Permission issue: <\/strong>You need to make sure from Azure that the permissions for the Elements Collaboration Protection app have not been revoked.\u00a0<\/p>\n<p><strong>Microsoft issue<\/strong> <strong>(invalid token):<\/strong> Reauthentication is required. The should be a connect button under SharePoint tab when you are in the <strong>cloud services<\/strong> view and you have clicked the cloud service. Press that, and follow the on-screen instructions.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-10-17T21:00:38+00:00\">October 17, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/support-articles\/how-to-add-an-additional-subscription-key-to-a-elements-collaboration-protection-cloud-service\/\">\n                <p class=\"wp-block-content-list__title\">How to add an additional subscription key to a Elements Collaboration Protection cloud service?<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5>Issue:<\/h5>\n<p>We would like to add more licenses to our Elements Collaboration Protection subscription by adding a second subscription key to our existing cloud service. How to add an additional subscription key to a Elements Collaboration Protection cloud service? When configuring a cloud service, the <strong>Subscription Key <\/strong>drop-down menu only allows to select one subscription key for the cloud service tenant.<\/p>\n<h5>Resolution:<\/h5>\n<p>In Elements Collaboration Protection, one cloud service can only be assigned one subscription key. You cannot combine two subscription key&#39;s licenses to one single cloud service. If you have received two or more Elements Collaboration Protection subscription keys from your WithSecure reseller partner, we recommend to contact your WithSecure reseller partner so that they can cancel the second subscription key and increase the amount of licenses on the first subscription key.\u00a0<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-10-15T09:05:16+00:00\">October 15, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/support-articles\/can-elements-collaboration-protection-be-set-to-automatically-protect-newly-added-sharepoint-onedrive-and-teams-assets\/\">\n                <p class=\"wp-block-content-list__title\">Can Elements Collaboration Protection be set to automatically protect newly-added Sharepoint, OneDrive and Teams assets?<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5>Issue:<\/h5>\n<p>Can Elements Collaboration Protection be set to automatically protect newly-added Sharepoint, OneDrive and Teams assets?\u00a0<\/p>\n<h5>Resolution:<\/h5>\n<p>Yes, Elements Collaboration Protection can be set to automatically protect newly-added Sharepoint, OneDrive and Teams assets similarly as with the Exchange mailboxes:<\/p>\n<ol>\n<li>Log in to the Elements Security Center portal<\/li>\n<li>Go to the <strong>Collaboration Protection &gt; Cloud services <\/strong>page<\/li>\n<li>Click on the cloud service name<\/li>\n<li>On the <strong>Sharepoint\u00a0<\/strong>tab, you can enable <strong>Automatically protect newly-added Sharepoint and Teams assets<\/strong>\n<ol>\n<li><strong>Note: <\/strong>Teams has no separate toggle for protecting newly added assets, since it is combined with Sharepoint<\/li>\n<\/ol>\n<\/li>\n<li>On the <strong>OneDrive <\/strong>tab, you can enable<strong> <\/strong><strong>Automatically protect newly-added drives<\/strong>\n<div>\n<div id=\"protect_new_items\">\n<div>\n<div>\u00a0<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/li>\n<\/ol>\n<p>Now any time new assets are added to the cloud service, they will be automatically protected if there are remaining licenses on the subscription.\u00a0<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-09-23T05:45:37+00:00\">September 23, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/support-articles\/active-mailboxes-metric-in-the-home-dashboard-may-incorrectly-show-0-active-mailboxes-from-september-11-onward\/\">\n                <p class=\"wp-block-content-list__title\">Active Mailboxes metric in the Home Dashboard may incorrectly show 0 active mailboxes from September 11 onward<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5>Issue:<\/h5>\n<p>Following a Elements Collaboration Protection change on September 10, mailbox usage reporting to the dashboard was unintentionally left disabled. As a result, the <strong>Active Mailboxes<\/strong> metric in the Home Dashboard may incorrectly show <strong>0 active mailboxes<\/strong> from September 11 onward.<\/p>\n<p>\u00a0<\/p>\n<h5>Resolution:<\/h5>\n<p>This issue was resolved on September 21st, 2026.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-06-08T15:05:18+00:00\">June 8, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/support-articles\/why-number-of-non-user-mailbox-protected-by-collaboration-protection-exceeds-the-purchased-license-size\/\">\n                <p class=\"wp-block-content-list__title\">Why number of &#8220;Non-user mailbox&#8221; protected by Collaboration Protection exceeds the purchased license size?<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5>Issue:<\/h5>\n<p>Why number of &quot;Non-user mailbox&quot; protected by Elements Collaboration Protection exceeds the purchased license size?<\/p>\n<h5>Resolution:<\/h5>\n<p>Non-user mailboxes will not be counted directly to the license size, like 1 license: 1 mailbox. Instead, it will be be counted with a ratio of 1:2.<\/p>\n<p>For example if you have an Elements Collaboration Protection subscription that includes 5 licenses, the maximum amount of mailboxes that you can protect is 5 user mailboxes and 10 non-user mailboxes.<\/p>\n<p>Please take note that shared mailbox is considered a non-user mailbox.<br \/>\u00a0<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-06-08T15:04:59+00:00\">June 8, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/support-articles\/withsecure-elements-collaboration-protection-permissions-required-to-access-withsecure-services\/\">\n                <p class=\"wp-block-content-list__title\">WithSecure Elements Collaboration Protection permissions required to access WithSecure services<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5>Issue:<\/h5>\n<p>What exact permissions does the account used to connect between Microsoft 365 and WithSecure require?<\/p>\n<h5>Resolution:<\/h5>\n<p>The following permissions are required for the account which connects between Microsoft 365 and WithSecure:<br \/><u><strong>Exchange:<\/strong><\/u><\/p>\n<ul>\n<li>Read all users&#39; full profiles<\/li>\n<li>Read all audit log data<\/li>\n<li>Read all usage reports<\/li>\n<li>Read and write mail in all mailboxes<\/li>\n<li>Read and write contacts in all mailboxes<\/li>\n<li>Read and write calendars in all mailboxes<\/li>\n<li>Read domains<\/li>\n<li>Read activity data for you organization<\/li>\n<li>Read service health information of you organization<\/li>\n<li>Use Exchange Web Services with full access to all mailboxes<\/li>\n<li>Sign in and read user profile<\/li>\n<li>Read directory data<\/li>\n<\/ul>\n<p><u><strong>Sharepoint and Teams:<\/strong><\/u><\/p>\n<ul>\n<li>Sign in and read user profile<\/li>\n<li>Send channel messages<\/li>\n<li>Send user chat messages<\/li>\n<li>Read all groups<\/li>\n<li>Read domains<\/li>\n<li>Create, edit, and delete items and lists in all site collections<\/li>\n<li>Read and write items and lists in all site collections<\/li>\n<li>Have full control of all site collections<\/li>\n<\/ul>\n<p><u><strong>OneDrive:<\/strong><\/u><\/p>\n<ul>\n<li>Read and write items and lists in all site collections<\/li>\n<li>Have full control of all site collections<\/li>\n<li>Sign in and read user profile<\/li>\n<li>Read and write files\u00a0in all site collections<\/li>\n<li>Read all users&#39; full profiles<\/li>\n<li>Read domains<\/li>\n<\/ul>\n<p>Important note: Some of the above mentioned permissions sounds like a lot, but we are using the minimum permissions needed in order for our solution to operate correctly.<br \/>For example: in Sharepoint and Teams; the last one is &quot;<strong>Have full control of all site collections<\/strong>&quot;<br \/>This permission is only used by us to create the quarantine zone of which we send the files to.<br \/>WithSecure does not do anything else with this permission, but since this is the minimum one required, we have to request it.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-06-08T15:04:56+00:00\">June 8, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/support-articles\/why-users-recipients-who-is-not-aware-of-the-quarantined-email-is-not-been-notified-on-elements-collaboration-protection\/\">\n                <p class=\"wp-block-content-list__title\">Why users\/recipients who is not aware of the quarantined email is not been notified on Elements Collaboration Protection?<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5>Issue:<\/h5>\n<p>Let&#39;s say person A (which uses Microsoft 365) sends an email to person B on any other server. The used e-mail address is wrong or no longer existent and the server sends a response back, that this message couldn\u2019t be delivered. In this notice there is the IP address of the responding server, which gets classified from our system as malicious. So, the message couldn\u2019t be delivered is now going to quarantine and the user does not know, that it wasn\u2019t or received any notifications. Hence is this the way it should work or is this an issue?<\/p>\n<h5>Resolution:<\/h5>\n<p>In terms of product behavior, the detected emails are handled according to the action setting configured in the policy on the Collaboration Protection portal where the default action setting is to move the item into quarantine. Of course, it is possible to change to other action setting during detection such as &quot;Change Subject and unlink URLs&quot; and etc by going to &quot;Exchange&quot; tab &gt; &quot;URL Scanning&quot; &gt; &quot;Malicious URL&quot; &gt; &quot;If a malicious URL is detected, the system will take the following action:&quot; and select a desired action from the list.<\/p>\n<p>As for your concern on the users\/recipients who is not aware of the quarantined email, this could be avoided by enabling the setting of &quot;Notify the user about detections with the following severities:&quot; setting at the same place as the action setting above. Please refer to the attached screenshot for more details.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-06-08T15:02:20+00:00\">June 8, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/support-articles\/why-does-the-eicar-files-were-not-detected-by-elements-for-microsoft-365-collaboration-protection-during-file-uploading-to-sharepoint\/\">\n                <p class=\"wp-block-content-list__title\">Why does the Eicar files were not detected by Elements for Microsoft 365\/Collaboration Protection during file uploading to SharePoint?<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body\">\n    <h5>Issue:<\/h5>\n<p>Why does the Eicar files were not detected by Elements for Microsoft 365\/Collaboration Protection during file uploading to SharePoint?<\/p>\n<h5>Resolution:<\/h5>\n<p>Elements for Microsoft 365\/Collaboration Protection starts protecting the SharePoint from the moment it gets connected and sites are protected. Thus, only the files uploaded after our product integration are protected and this is how the product currently behaves.If the old existing files are moved to a new SharePoint site, those files will be scanned and protected. We do not have control over old files which existed before the product integration.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n    <\/ul>\n\n                            <nav class=\"wp-block-content-list__pagination\" aria-label=\"Pagination\">\n                    \n                                                                        <span class=\"wp-block-content-list__pagination-link wp-block-content-list__pagination-link--current\" aria-current=\"page\">1<\/span>\n                                                                                                <a class=\"wp-block-content-list__pagination-link\" href=\"\/en\/wp-json\/wp\/v2\/pages\/4672?cl_page=2\">2<\/a>\n                                                                                                <a class=\"wp-block-content-list__pagination-link\" href=\"\/en\/wp-json\/wp\/v2\/pages\/4672?cl_page=3\">3<\/a>\n                                                                                                <a class=\"wp-block-content-list__pagination-link\" href=\"\/en\/wp-json\/wp\/v2\/pages\/4672?cl_page=4\">4<\/a>\n                                                                                                <a class=\"wp-block-content-list__pagination-link\" href=\"\/en\/wp-json\/wp\/v2\/pages\/4672?cl_page=5\">5<\/a>\n                                                                                                <a class=\"wp-block-content-list__pagination-link\" href=\"\/en\/wp-json\/wp\/v2\/pages\/4672?cl_page=6\">6<\/a>\n                                            \n                                            <a class=\"wp-block-content-list__pagination-link\" href=\"\/en\/wp-json\/wp\/v2\/pages\/4672?cl_page=2\" rel=\"next\">Next<\/a>\n                                    <\/nav>\n                            <\/div>\n    <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":0,"featured_media":0,"parent":4670,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-4672","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/4672","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/comments?post=4672"}],"version-history":[{"count":1,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/4672\/revisions"}],"predecessor-version":[{"id":8155,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/4672\/revisions\/8155"}],"up":[{"embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/4670"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=4672"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}