ℹ️ Info
Part of the Getting Started guide, Step 2. Ensure deliverability.
Direct Message Injection (DMI) places revel8 simulations straight into your users' mailboxes and bypasses mail filtering, so you do not need to whitelist any sending domains. For Outlook, you connect revel8 to your Microsoft tenant and grant it permission to insert emails.
⚠️ Warning
DMI replaces sending-domain whitelisting only. Simulation landing pages still have to be allowed through your web filter, see Outbound URL Whitelisting in Microsoft Defender for Endpoint.
Before you begin
Have these ready:
Admin access to revel8.
A Microsoft Entra admin who can grant admin consent for your organization. If that is not you, step 3 covers sending them a link.
1. Open Outlook DMI
In revel8, open Settings → Mail Delivery (in Integrations) and select the Outlook DMI tab.
2. Connect revel8 to your Microsoft tenant
Under step 1, Connected revel8 to Microsoft tenant, click Connect to Microsoft and sign in with your Microsoft account.
When it succeeds, the box turns green and shows your Tenant ID. To connect again later, click Re-connect to Microsoft.
3. Grant revel8 the permissions
Step 2 then shows a Consent link. What you do next depends on your Microsoft role:
You are a Microsoft admin: click Grant permissions. Microsoft lists the permissions revel8 requests. Click Accept.
You are not a Microsoft admin: click Copy link and send it to a Microsoft Entra admin, who opens it and accepts on behalf of your organization.
4. Activate direct message injection
Once the tenant is connected and the permissions are granted, click Activate direct message injection at the bottom of the tab. Direct message injection status changes from Inactive to Active.
What revel8 can access
The consent gives revel8 two Microsoft Graph permissions:
User.ReadBasic.Allreads basic user profiles, so revel8 can address the right mailboxes.Mail.ReadWriteplaces simulation emails into those mailboxes.


