Description
High Risk messages are sent directly to Jail in the Shield Portal. Shield users may not release these messages but can request a veto of the decision. Shield Admins decide to approve or deny the veto request within Shield Control.
Veto Permissions
Shield Admins
Shield Veto permissions are set in the Manage Access to the Organization section of the Shield organization or the Manage User Access section of the user's page.
Veto rights are not inherited between the parent organization and customer organizations.
Shield Users
By default, Shield users are set to Beginner Experience Level in the Control Settings of their Profile page. This setting requires the user to request a veto of incoming and outgoing messages that are sent to Jail. A Shield Admin will then need to approve or deny the veto. Intermediate users are able to release their outgoing messages from Jail but still require a veto decision by a Shield Admin for incoming messages. Expert users are permitted to release incoming and outgoing messages from Jail without a decision from a Shield Admin.
The Veto Process
Once a user clicks on a Jailed message in Spotlight, they will see an abbreviated X-ray view showing why the message was not delivered. In the example below, a dangerous extension was detected, and the message was sent to Jail.
Veto Decision
The Veto decision button brings the user to a page asking if the message is safe. If so, the user may click on Veto. If the user's Experience Level does not permit them to make their own vetoes then a veto request will be sent to Shield Admins.
Veto Request
A veto request is then visible on the Ctrl page for Shield Admins with veto access to the organization, where they will either Approve or Deny the request.
Veto requests are also sent via a Shield notification message. Interacting with the message brings the Admin directly to the veto request.
A Shield Admin's Veto decisions are only visible to the requester from within the Shield Portal. If the Shield Admin approves the request, the message will be delivered to the user's Inbox with the original timestamp of the message.
Related to
Updated