o365 Securlet quarantine skipped

Products

• CASB Securlet SAAS With DLP-CDS
• CASB Advanced Threat Protection
• CASB Audit
• CASB Gateway
• CASB Gateway Advanced
• CASB Security Advanced
• CASB Security Advanced IAAS
• CASB Security Premium
• CASB Security Premium IAAS
• CASB Security Standard
• CASB Securlet IAAS
• CASB Securlet SAAS

Issue/Introduction

Quarantine action skipped for some OneDrive and SharePoint files.

Resolution

The quarantine skipped status is used when the requested quarantine action cannot be performed.  This happens when the file belongs to the "Preservation Hold Library".  The PHL is used by Microsoft retention process such as Microsoft Purview.

Additional Information

See Microsoft's documentation for more details.

Microsoft Purview’s Preservation Hold Library (PHL) is a hidden system library in SharePoint and OneDrive that retains data subjected to retention policies or legal holds, ensuring compliance by preventing user deletion. It acts as a back-end storage area for changed or deleted files, crucial for Microsoft Purview Data Lifecycle Management.