Manage and monitor priority accounts

In every Microsoft 365 organization, there are people that are essential, like executives, leaders, managers, or other users who have access to sensitive, proprietary, or high priority information.

To help your organization protect these accounts, you can now designate specific users as priority accounts and leverage app-specific features that provide them with extra protection. In the future, more apps and features will support priority accounts, and to start with, we’ve announced two capabilities: priority account protection and premium mail flow monitoring.

  • Priority account protection - Microsoft Defender for Office 365 (formerly Office 365 Advanced Threat Protection) supports priority accounts as tags that can be used in filters in alerts, reports, and investigations. For more information, check out User tags in Microsoft Defender for Office 365.
  • Premium Mail Flow Monitoring - Healthy mail flow can be critical to business success, and delivery delays or failures can have a negative impact on the business. You can choose a threshold for failed or delayed emails, receive alerts when that threshold is exceeded, and view a report of email issues for priority accounts. For more information, check out Email issues for priority accounts report in the modern EAC

For security best practices for priority accounts, see Security recommendations for priority accounts.

Before you begin

The Priority account protection feature that's described in this topic is available only to organizations that meet the following requirements:

  • Microsoft Defender for Office 365 Plan 2, including those with Office 365 E3, Office 365 E5, Microsoft 365 E5, or Microsoft 365 E5 Security.

The Premium Mail Flow Monitoring feature that's described in this topic is available only to organizations that meet the following requirements:

  • Your organization needs to have a license count of at least 10,000, from either one of, or a combination of the following products: Office 365 E3, Microsoft 365 E3, Office 365 E5, Microsoft 365 E5. For example, your organization can have 3000 Office 365 E3 licenses and 8500 Microsoft 365 E5, for a total of 11,500 licenses from the qualifying products.
  • Your organization needs to have at least 50 monthly active Exchange Online users.

Note

You can monitor up to 250 priority accounts.

Add priority accounts from the Setup page

Add priority accounts from the Setup page.

  1. Go to the Microsoft 365 admin center at https://admin.microsoft.com.

  2. Go to Setup > Organizational knowledge, and choose View under Monitor your most important accounts.

  3. Select Get Started or Manage.

  4. On the Add Priority accounts page, in the search field, type the name or email address of the person you want to add to the priority accounts list. You can also set your email threshold for failed or delayed emails and get a weekly report of issues for priority accounts.

  5. Select the user and choose Save.

You can also add priority accounts from the Active users page.

Add priority accounts from Active users page

Add priority accounts from the Active users page.

  1. Go to the admin center at https://admin.microsoft.com.

  2. Go to Users > Active users and choose ... at the top of the page. Select Manage priority accounts.

  3. Select Add accounts, and on the Add Priority accounts page, in the search field, type the name of the person you want to add to the priority accounts list.

  4. Select the user and choose Save.

Remove a user from the priority accounts list

  1. Go to the Microsoft 365 admin center at https://admin.microsoft.com.

  2. Go to Setup > Organizational knowledge, and choose View under Monitor your most important accounts.

  3. On the Monitor your most accounts page, choose Priority accounts under Manage this feature.

  4. On the Priority accounts page, select the user or users you want to remove from the list and choose, Remove accounts.

Using Priority Accounts in Microsoft 365