Email to Teams channel addresses is disabled
Microsoft 365 Teams tenant configuration for channel email addresses determines if channels can receive messages via email. This evaluates the allow_email_into_channel setting.
ProwlerRisk
Allowing email into channels lets outsiders inject content, links, and attachments into Teams. Leaked addresses enable phishing, malware delivery, and spam, undermining confidentiality and integrity, and adding noise that affects availability; posts may bypass user-authenticated context.
Run this check with Prowler
Run in Prowler Cloudprowler m365 --checks teams_email_sending_to_channel_disabledRecommendation
Disable email into channels by default. If needed, limit senders to approved domains, apply anti-phishing/malware filtering, enforce DLP and retention on inbound mail, monitor postings, rotate channel addresses, and prefer authenticated connectors-applying least privilege and defense in depth.
Remediation
CLI
Set-CsTeamsClientConfiguration -Identity Global -AllowEmailIntoChannel $falseOther
Check Code
from typing import List
from prowler.lib.check.models import Check, CheckReportM365
from prowler.providers.m365.services.teams.teams_client import teams_client
class teams_email_sending_to_channel_disabled(Check):
"""Check if users can send emails to channel email addresses.
Attributes:
metadata: Metadata associated with the check (inherited from Check).
"""
def execute(self) -> List[CheckReportM365]:
"""Execute the check for
This method checks if users can send emails to channel email addresses.
Returns:
List[CheckReportM365]: A list of reports containing the result of the check.
"""
findings = []
teams_settings = teams_client.teams_settings
if teams_settings:
report = CheckReportM365(
metadata=self.metadata(),
resource=teams_settings if teams_settings else {},
resource_name="Teams Settings",
resource_id="teamsSettings",
)
report.status = "FAIL"
report.status_extended = (
"Teams users can send emails to channel email addresses."
)
if teams_settings and not teams_settings.allow_email_into_channel:
report.status = "PASS"
report.status_extended = (
"Teams users cannot send emails to channel email addresses."
)
findings.append(report)
return findings