1. Overview

This feature allows Graphus customers to provide email protection to a subset of users in an organization. By default, Graphus protects all users. However, in this scenario, customers choose a subset of users, add them to a group in Microsoft 365 or G Suite, and configure that group in the Graphus portal under the Settings section. 

2. Prerequisites

• Permission to create a Group in Microsoft 365 or G Suite.

3. Setup

Depending on the type of email provider you have, create a group as follows:

Create Group in Microsoft 365

Follow the below steps to create a group in Microsoft 365 (you can refer to this link for more details on how to Create a Group in Microsoft 365):

1. Go to the Admin center (https://go.microsoft.com/fwlink/p/?linkid=2052855), expand Groups, and click Add a group.
2. On the Choose a Group type page, select Microsoft 365 and click Next.
3. On the Basics page, type a name for the group and a description (optional). Then, click Next.
4. On the Edit settings page, type a unique email address for the group. On Owners, choose the name of one or more people designated to manage the group. Then, click Next.
5. After reviewing your settings and making any changes, click Create Group.
6. Click Close.
7. To add members to the Microsoft 365 group, you can go to the admin center, refresh the page so your new group appears, and then select the name of the group that you want to add members to.
8. On the Members tab, select View All and Manage Members.
9. Click Add Members.
10. Select the users you want to add, and then click Save.
11. Click Close.

Create Group in G Suite

Follow the below steps to create a group in G Suite (you can refer to this link for more details on how to Create a Group in G Suite):

1. Go to the Google Admin console (https://admin.google.com). On the Admin console Home page, go to Groups.
2. Click Create Group.
3. Please wait a few minutes for your new group to become active.
4. To add members to the group, click the link to add members to your new group.
5. For users or groups, please enter the first few characters of their email addresses. When you see the user or group you want, you can select them.
6. For service accounts, you can enter the complete email address.
7. Please repeat the previous step to find more members.
8. Click Add to Group.

Enable Group Protection in the Graphus portal.

Graphus Admins have to set up the Group Protection feature functionality from the Organization Settings page:

1. Log in to the Graphus portal.
2. Go to the Settings page (https://cloud.graph.us/settings).
3. Scroll down to the Group Protection section.
4. Enable the toggle button.
5. Provide the Group Email Address. 
6. Click Save Changes. It may take up to 24 hours for the feature to be enabled.

Disable Group Protection

Graphus Admin has to navigate to the Organization Settings page to disable this feature:

1. Go to the Settings page (https://cloud.graph.us/settings).
2. Disable the toggle button.
3. Click Save Changes. It may take up to 24 hours for the feature to be disabled.

Once the Group Protection feature is disabled, Graphus will start protecting all users in the organization.

How does this feature work?

After Group Protection is enabled for an organization, Graphus will start protecting only the list of users in the group. The count of protected users will be reflected on the dashboard page under the Inboxes Protected table for the organization. More details about the protected users can also be found on the Accounts page (https://cloud.graph.us/orgUsers).

Dashboard View

Microsoft 365 Organization Account View

G Suite organization Account View

Note: If you are using Phish911 with group protection, you need to add the email address of the dedicated Phish911 inbox to the group you are protecting. The dedicated Phish911 inbox is specified in the Phish911 Configuration section on the Settings page.