Cross-tenant Message Recall in Exchange Online

Exchange Online is adding cross-tenant message recall, allowing administrators to let trusted external Microsoft 365 tenants recall messages sent to their users. Until now, message recall only worked within the same tenant.

  • Cross-tenant message recall is disabled by default and must be enabled via Exchange Online PowerShell.
  • Message recall is supported across Outlook on the web, desktop apps, and mobile apps.


Timeline

The rollout should be completed in September 2026.

How does this affect the organization?

Until now, message recall was confined to messages sent and received within a single tenant. With the new cross-tenant recall, a receiving tenant can add specific external tenant IDs to an allow list, allowing senders from those tenants to recall messages they previously sent into the receiving tenant’s mailboxes.
The relationship is one-directional and receiver-controlled: each tenant independently decides which external organizations it trusts, and a sender’s recall only succeeds if the recipient’s tenant has allow-listed the sender’s tenant.

Once enabled and configured, the following applies:

  • Allow-listed cross-tenant recall: external senders from tenants on the allow list can recall messages sent to the organization’s users, with the recall processed the same way as an intra-tenant recall.
  • Recipient recall notifications: whether already enabled in the tenant, these notifications also apply to cross-tenant recalls.
  • Blocked recall attempts: recall attempts from tenants not on the allow list fail.
Message recall fails if cross-tenant recall is disabled, or the tenant is not in the allow list
Message recall fails if cross-tenant recall is disabled, or the tenant is not in the allow list

The existing recall configurations for messages within the same tenant are not migrated or used.

The existing recall configurations for messages within the same tenant are not migrated or used
The existing recall configurations for messages within the same tenant are not migrated or used

Cross-tenant message recall is disabled by default. Every tenant starts with an empty allow list.

Disabled by default, every tenant starts with an empty allow list
Disabled by default, every tenant starts with an empty allow list

Exchange Online administrators can update the settings with Set-CrossTenantRecallConfiguration.

PowerShell
Set-CrossTenantRecallConfiguration -CrossTenantRecallEnabled $true -AllowedSenderTenantIds @{Add="<TenantId1>","<TenantId2>"} 


Internal users can select the usual “Recall message” option in Outlook.

Recall a message to external recipients
Recall a message to external recipients

The recall report then includes the updated status for external recipients.

Recall report for trusted, external recipients
Recall report for trusted, external recipients
Avatar photo

Tobias Asböck

Tobias is a Senior System Engineer with more than 10 years of professional experience with Microsoft 365 products such as SharePoint Online, SharePoint Premium, OneDrive for Business, Teams Collaboration, Entra ID, Information Protection, Universal Print, and Microsoft 365 Licensing. He also has 15+ years of experience planning, administering, and operating SharePoint Server environments. Tobias is a PowerShell Scripter with certifications for Microsoft 365 products. In his spare time, Tobias is busy with updates in the Microsoft 365 world or on the road with his road bike and other sports activities. If you have additional questions, please contact me via LinkedIn or [email protected].

Leave a Comment