Microsoft Entra ID · Organizational Management
Organizational Messages Approver
Reviews, approves, or rejects organizational messages before they are delivered to users.
Scope: Approval workflow for organizational messages
Permissions
- Approve organizational messages
- Reject organizational messages
- Read all messages
- Review pending messages
Common use cases
- Message quality control
- Content approval workflow
- Compliance review
- Brand consistency enforcement
Best practices
- Review messages promptly
- Check for accuracy
- Verify targeting is appropriate
- Document rejection reasons
Security considerations
- Gatekeeper for official messages
- Prevents inappropriate content
- Consider urgency vs. review time
Common questions
When should I assign the Organizational Messages Approver role?
Assign Organizational Messages Approver when you need to: Message quality control; Content approval workflow; Compliance review; and Brand consistency enforcement. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Organizational Messages Approver role do?
The Organizational Messages Approver role grants permissions including: Approve organizational messages; Reject organizational messages; Read all messages; and Review pending messages. See the Permissions section above for the full list.
What are the security risks of the Organizational Messages Approver role?
Key considerations when assigning Organizational Messages Approver: Gatekeeper for official messages; Prevents inappropriate content; and Consider urgency vs. review time. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.