Skip to main content

Reporting Button Installation (Outlook)

Reporting Button lets users report suspicious emails directly from Outlook. Follow this guide to install and configure the add-in

Updated over 2 weeks ago

❗Admin permissions are required for the process below

🧾 1. Download the Manifest File

  1. On the revel8 platform, open Integrations → Outlook Reporting

  2. Click Download Manifest to save the .xml file to your computer

Do not modify the file name

🏢 2. Install the Manifest in Microsoft 365 Admin Center

  1. Start deploying a custom app

    1. Visit https://admin.microsoft.com

    2. On the left side, open Settings → Integrated apps

    3. Select Upload custom apps

  2. Upload the Manifest File

    1. Inside the “Deploy New App” wizard, choose:

      • App type: Office Add-in

      • Upload manifest file (.xml) from device

    1. Click Choose file

    2. Select the .xml file downloaded from revel8

    3. Click Next

  3. Select Which Users Should Receive the Add-in

    In the “Users” step:

    1. Recommended for first installation:
      Install only for your own admin account to test the functionality.

    2. After testing, you may redeploy it to:

      • A security group

      • All employees

      • Specific teams

      • Click Next

  4. Complete the Deployment

    1. Review all settings

    1. Click Finish Deployment

    2. You will now see the add-in listed under “Deployed Apps”

⌛Propagation time:

  • Microsoft may take up to 72 hours to display the button in user mailboxes

  • In practice, it usually appears within 24 hours

  • “Status: OK” in the admin panel only means the deployment is configured, it does not confirm the user already sees it

🔗 3. Connect Your Microsoft Tenant to revel8

Return to the Integrations → Outlook Reporting page in the revel8 platform

  1. Click Connect to Microsoft

  2. Sign in with a Global Admin

  3. Grant the required permissions

  4. Once connected, revel8 will link reported emails from your tenant to your organisation

📤 4. Configure Forwarding for Real Suspicious Emails

Return to the Integrations → Outlook Reporting page in the revel8 platform

Within the the Forwarding Configuration section:

  1. Enter where you want real (non-simulation) reports forwarded to:

    • SOC mailbox (e.g., [email protected])

    • Security distribution group

    • Ticketing/SIEM ingestion address

  2. Save the configuration

This ensures:

  • Simulation emails → handled inside revel8

  • Real user-reported emails → forwarded to your SOC automatically

🔍 5. Verify the Installation

In Microsoft 365 Admin Center

Go back to Settings → Integrated Apps:

  • You should see Report email (revel8 assistant)

  • Status should show OK

In Outlook (After Propagation)

Users will eventually see the Reporting Button in the Outlook ribbon

Did this answer your question?