Veto in Mailprotector Shield: Permissions and Process

The Mailprotector Shield's veto feature allows Shield users, depending on their experience level (Beginner, Intermediate, Expert), to request or directly release high-risk messages sent to Jail, with Shield Admins holding the authority to approve or deny veto requests through specific permission settings managed within the organization's access controls.

Description

High Risk messages are sent directly to Jail in the Shield Portal. Shield users may not release these messages but can request a veto of the decision. Shield Admins decide to approve or deny the veto request within Shield Control.

Veto Permissions

Shield Admins

Shield Veto permissions are set in the Manage Access to the Organization section of the Shield organization or the Manage User Access section of the user's page.

Veto rights are not inherited between the parent organization and customer organizations.

Shield Users

By default, Shield users are set to Beginner Experience Level in the Control Settings of their Profile page. This setting requires the user to request a veto of incoming and outgoing messages that are sent to Jail. A Shield Admin will then need to approve or deny the veto. Intermediate users are able to release their outgoing messages from Jail but still require a veto decision by a Shield Admin for incoming messages. Expert users are permitted to release incoming and outgoing messages from Jail without a decision from a Shield Admin.

Experience Level - Shield Profile.png

The Veto Process

Once a user clicks on a Jailed message in Spotlight, they will see an abbreviated X-ray view showing why the message was not delivered. In the example below, a dangerous extension was detected, and the message was sent to Jail.

Veto Decision

The Veto decision button brings the user to a page asking if the message is safe. If so, the user may click on Veto. If the user's Experience Level does not permit them to make their own vetoes then a veto request will be sent to Shield Admins.

Veto Request

A veto request is then visible on the Ctrl page for Shield Admins with veto access to the organization, where they will either Approve or Deny the request.

Shield Control Veto Notification.png

Veto requests are also sent via a Shield notification message. Interacting with the message brings the Admin directly to the veto request.

Veto notification message.png

A Shield Admin's Veto decisions are only visible to the requester from within the Shield Portal. If the Shield Admin approves the request, the message will be delivered to the user's Inbox with the original timestamp of the message.

Related to