New-SupervisoryReviewRule
此 Cmdlet 僅適用于安全 & 性合規性 PowerShell。 如需詳細資訊,請參閱 安全 & 性合規性 PowerShell。
使用 New-SupervisoryReviewRule Cmdlet 在Microsoft Purview 合規性入口網站中建立監督檢閱規則。 主管檢閱可讓您定義擷取組織中通訊的原則,如此即可由內部或外部檢閱者檢查。
如需下方<語法>一節中參數集的詳細資訊,請參閱 Exchange Cmdlet 語法。
Syntax
New-SupervisoryReviewRule
[-Name] <String>
-Policy <PolicyIdParameter>
[-CcsiDataModelOperator <String>]
[-Condition <String>]
[-Confirm]
[-ContentContainsSensitiveInformation <PswsHashtable[]>]
[-ContentMatchesDataModel <String>]
[-ContentSources <String[]>]
[-DayXInsights <Boolean>]
[-ExceptIfFrom <MultiValuedProperty>]
[-ExceptIfRecipientDomainIs <MultiValuedProperty>]
[-ExceptIfRevieweeIs <MultiValuedProperty>]
[-ExceptIfSenderDomainIs <MultiValuedProperty>]
[-ExceptIfSentTo <MultiValuedProperty>]
[-ExceptIfSubjectOrBodyContainsWords <MultiValuedProperty>]
[-From <MultiValuedProperty>]
[-IncludeAdaptiveScopes <String[]>]
[-InPurviewFilter <String>]
[-Ocr <Boolean>]
[-SamplingRate <Int32>]
[-SentTo <MultiValuedProperty>]
[-WhatIf]
[<CommonParameters>]
Description
若要在安全 & 性合規性 PowerShell 中使用此 Cmdlet,您必須獲指派許可權。 如需詳細資訊,請參閱 Microsoft Purview 合規性入口網站中的權限。
範例
範例 1
New-SupervisoryReviewRule -Name "EU Brokers Rule" -Policy "EU Brokers Policy" -SamplingRate 100 -Condition "((NOT(Reviewee:US Compliance)) -AND (Reviewee:EU Brokers) -AND ((trade) -OR (insider trading)) -AND (NOT(approved by the Contoso financial team)))"
此範例會使用下列設定,建立名為 EU Brokers Rule 的新監督檢閱規則:
- 原則:歐盟代理人原則
- 取樣率:100%
- 條件:監督包含文字交易或內部交易之 EU Brokers 群組成員的輸入和輸出通訊。
- 例外狀況:排除歐盟合規性群組成員監督,或包含「經 Contoso 財務小組核准」片語的訊息。
參數
-CcsiDataModelOperator
{{ 填滿 CcsiDataModelOperator 描述 }}
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-Condition
Condition 參數會指定規則的條件和例外狀況。 此參數使用下列語法:
- 要監督的使用者或群組通訊:
"((Reviewee:<emailaddress1>) -OR (Reviewee:<emailaddress2>)...)"
。 例外狀況會使用 語"(NOT((Reviewee:<emailaddress1>) -OR (Reviewee:<emailaddress2>)...))"
法 。 - 方向:
"((Direction:Inbound) -OR (Direction:Outbound) -OR (Direction:Internal))"
。 - 訊息包含文字:
"((<Word1orPhrase1>) -OR (<Word2orPhrase2>)...)"
。 例外狀況會使用 語"(NOT((<Word1orPhrase1>) -OR (<Word2orPhrase2>)...))"
法 。 - 任何附件都包含文字:
"((Attachment:<word1>) -OR (Attachment:<word2>)...)"
。 例外狀況會使用 語"(NOT((Attachment:<word1>) -OR (Attachment:<word2>)...))"
法 。 - 任何附件都有副檔名:
"((AttachmentName:.<extension1>) -OR (AttachmentName:.<extension2>)...)"
。 例外狀況會使用 語"(NOT((AttachmentName:.<extension1>) -OR (AttachmentName:.<extension2>)...))"
法 。 - 訊息大小大於:
"(MessageSize:<size in B, KB, MB or GB>)"
。 例如"(MessageSize:300KB)"
。 例外狀況會使用 語"(NOT(MessageSize:<size in B, KB, MB or GB>))"
法 。 - 任何附件都大於:
"(AttachmentSize:<size in B, KB, MB or GB>)"
。 例如"(AttachmentSize:3MB)"
。 例外狀況會使用 語"(NOT(AttachmentSize:<size in B, KB, MB or GB>))"
法 。 - 整個篩選器周圍需要括弧 ( ) 。
- 使用 AND 運算子分隔多個條件或例外狀況類型。 例如,
"((Reviewee:chris@contoso.com) -AND (AttachmentSize:3MB))"
。
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-Confirm
Confirm 參數會指定要顯示或隱藏確認提示。 這個參數對 Cmdlet 的影響取決於 Cmdlet 是否需要確認才能繼續作業。
- 例如,具破壞性的 Cmdlet (例如 Remove-* Cmdlet) 內建暫停,可強制您在繼續之前確認命令。 對於這些 Cmdlet,您可以使用以下確切語法來略過確認提示:
-Confirm:$false
。 - 其他大部分的 Cmdlet (例如,New-* 和 Set-* Cmdlet) 沒有內建暫停。 在使用這些 Cmdlet 時,指定不含任何值的 Confirm 參數會引入強迫您認可命令後才繼續作業的暫停。
Type: | SwitchParameter |
Aliases: | cf |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ContentContainsSensitiveInformation
{{ Fill ContentContainsSensitiveInformation Description }}
Type: | PswsHashtable[] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ContentMatchesDataModel
{{ Fill ContentMatchesDataModel Description }}
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ContentSources
{{ 填入 ContentSources 描述 }}
Type: | String[] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-DayXInsights
{{ 填滿 DayXInsights 描述 }}
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ExceptIfFrom
{{ Fill ExceptIfFrom Description }}
Type: | undefined |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ExceptIfRecipientDomainIs
{{ Fill ExceptIfRecipientDomainIs Description }}
Type: | MultiValuedProperty |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ExceptIfRevieweeIs
{{ Fill ExceptIfRevieweeIs Description }}
Type: | MultiValuedProperty |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ExceptIfSenderDomainIs
{{ Fill ExceptIfSenderDomainIs Description }}
Type: | MultiValuedProperty |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ExceptIfSentTo
{{ Fill ExceptIfSentTo Description }}
Type: | undefined |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ExceptIfSubjectOrBodyContainsWords
{{ Fill ExceptIfSubjectOrBodyContainsWords Description }}
Type: | MultiValuedProperty |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-From
{{ 填入描述 }}
Type: | undefined |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-IncludeAdaptiveScopes
{{ Fill IncludeAdaptiveScopes Description }}
Type: | String[] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-InPurviewFilter
{{ 填入PurviewFilter 描述 }}
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-Name
Name 參數會指定監督檢閱規則的唯一名稱。 名稱不得超過 64 個字元。 如果值包含空格,請使用引號 (") 括住值。
Type: | String |
Position: | 1 |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-Ocr
{{ 填滿 Ocr 描述 }}
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-Policy
Policy 參數會指定指派給規則的主管檢閱原則。 您可以使用唯一識別原則的任何值。 例如:
- 名稱
- 辨別名稱 (DN)
- GUID
Type: | PolicyIdParameter |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-SamplingRate
SamplingRate 參數會指定要檢閱的通訊百分比。 如果您想要檢閱者檢閱所有偵測到的專案,請使用值 100。
Type: | Int32 |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-SentTo
{{ 填入 SentTo 描述 }}
Type: | undefined |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-WhatIf
WhatIf 參數無法在安全 & 性合規性 PowerShell 中運作。
Type: | SwitchParameter |
Aliases: | wi |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |