Controlled User Management Mode vs. Legacy Mode

User Management Mode refers to the Email Threat Protection Domain Options feature that allows you to manage how users are created for your domain. 

Controlled User Management Mode vs. Legacy Mode

With the legacy mode, you are only able to create and maintain aliases that are assigned to your primary domain. Alias domains are handled via assumed aliases. We take every username and pair it with every alias domain associated with the subscription, with no control or configuration over these aliases. With Controlled User Management Mode, we remove the behavior to make assumptions and, instead, give all control back to the admin for user and alias management. The biggest benefit of moving to Controlled User Management Mode is that admins will be able to create users and aliases at any of their domains used with their subscription and increase their compatibility with Office 365. It’s important to note two things. First, new customers will not have the option between the two modes. They will automatically be placed in Controlled User Management Mode. And second, once a customer switches into Controlled User Management Mode, this action cannot be reversed.

User Creation

You will now have the ability to create and manage users at all domains associated with your subscription. These users can be managed like any other users, including changing their filter permissions and Quarantine Message Report (QMR) settings.

Also, all assumed aliases that were previously unmanageable on a user’s account, are now visible. These aliases can be deleted if they are no longer needed or left alone to function as they always have.


Q: Will the Office 365 version of the sync start bringing down alias domains? 

A: Yes. If you are an O365-only customer, the O365 version of Controlled User Management Mode will go live automatically (no need to opt-in) and start to sync all domains between the Microsoft Office Portal and the Customer Portal. However, if you have both Email Threat Protection and O365, you will need to opt-in via Email Threat Protection > Settings.

Q: Is a sync between Office 365 and Email Threat Protection present or in the works?

A: At this moment, there is no sync between the two services, and there is no planned work to introduce one.