Updates to Supervisory Review rule topics

Issue #2179

Author: chrisda

exchange/exchange-ps/exchange/policy-and-compliance/New-SupervisoryReviewRule.md

@@ -29,7 +29,7 @@ You need to be assigned permissions in the Office 365 Security & Compliance Cent
 
 ### -------------------------- Example 1 --------------------------
 ```
-New-SupervisoryReviewRule -Name "EU Brokers Rule" -Policy "EU Brokers Policy" -SamplingRate 100 -Conditions ((NOT(Reviewee:US Compliance)) -AND (Reviewee:EU Brokers) -AND ((trade) -OR (insider trading)) -AND (NOT(approved by the Contoso financial team)))
+New-SupervisoryReviewRule -Name "EU Brokers Rule" -Policy "EU Brokers Policy" -SamplingRate 100 -Conditions "((NOT(Reviewee:US Compliance)) -AND (Reviewee:EU Brokers) -AND ((trade) -OR (insider trading)) -AND (NOT(approved by the Contoso financial team)))"
 ```
 
 This example creates a new supervisory review rule named EU Brokers Rule with the following settings:
@@ -83,23 +83,23 @@ Accept wildcard characters: False
 ### -Condition
 The Condition parameter specifies the conditions and exceptions for the rule. This parameter uses the following syntax:
 
-- User or group communications to supervise: ((Reviewee:\<emailaddress1\>) -OR (Reviewee:\<emailaddress2\>)...). Exceptions use the syntax (NOT((Reviewee:\<emailaddress1\>) -OR (Reviewee:\<emailaddress2\>)...)).
+- User or group communications to supervise: "((Reviewee:\<emailaddress1\>) -OR (Reviewee:\<emailaddress2\>)...)". Exceptions use the syntax "(NOT((Reviewee:\<emailaddress1\>) -OR (Reviewee:\<emailaddress2\>)...))".
 
-- Direction: ((Direction:Inbound) -OR (Direction:Outbound) -OR (Direction:Internal)).
+- Direction: "((Direction:Inbound) -OR (Direction:Outbound) -OR (Direction:Internal))".
 
-- Message contains words: ((\<Word1orPhrase1\>) -OR (\<Word2orPhrase2\>)...). Exceptions use the syntax (NOT((\<Word1orPhrase1\>)-OR (\<Word2orPhrase2\>)...)).
+- Message contains words: "((\<Word1orPhrase1\>) -OR (\<Word2orPhrase2\>)...)". Exceptions use the syntax "(NOT((\<Word1orPhrase1\>)-OR (\<Word2orPhrase2\>)...))".
 
-- Any attachment contains words: ((Attachment:\<word1\>) -OR (Attachment:\<word2\>)...). Exceptions use the syntax (NOT((Attachment:\<word1\>)-OR (Attachment:\<word2\>)...)).
+- Any attachment contains words: "((Attachment:\<word1\>) -OR (Attachment:\<word2\>)...)". Exceptions use the syntax "(NOT((Attachment:\<word1\>)-OR (Attachment:\<word2\>)...))".
 
-- Any attachment has the extension: ((AttachmentName:.\<extension1\>) -OR (AttachmentName:.\<extension2\>)...). Exceptions use the syntax (NOT((AttachmentName:.\<extension1\>)-OR (AttachmentName:.\<extension2\>)...)).
+- Any attachment has the extension: "((AttachmentName:.\<extension1\>) -OR (AttachmentName:.\<extension2\>)...)". Exceptions use the syntax "(NOT((AttachmentName:.\<extension1\>)-OR (AttachmentName:.\<extension2\>)...))".
 
-- Message size is larger than: (MessageSize:\<size in B, KB, MB or GB\>). For example (MessageSize:300KB). Exceptions use the syntax (NOT(MessageSize:\<size in B, KB, MB or GB\>))
+- Message size is larger than: "(MessageSize:\<size in B, KB, MB or GB\>)". For example "(MessageSize:300KB)". Exceptions use the syntax "(NOT(MessageSize:\<size in B, KB, MB or GB\>))".
 
-- Any attachment is larger than: (AttachmentSize:\<size in B, KB, MB or GB\>). For example (AttachmentSize:3MB). Exceptions use the syntax (NOT(AttachmentSize:\<size in B, KB, MB or GB\>))
+- Any attachment is larger than: "(AttachmentSize:\<size in B, KB, MB or GB\>)". For example "(AttachmentSize:3MB)". Exceptions use the syntax "(NOT(AttachmentSize:\<size in B, KB, MB or GB\>))".
 
 - Parentheses ( ) are required around the whole filter.
 
-- Separate multiple conditions or exception types with the -AND operator. For example, ((Reviewee:[email protected]) -AND (AttachmentSize:3MB)).
+- Separate multiple conditions or exception types with the -AND operator. For example, "((Reviewee:[email protected]) -AND (AttachmentSize:3MB))".
 
 ```yaml
 Type: String

exchange/exchange-ps/exchange/policy-and-compliance/Set-SupervisoryReviewRule.md

@@ -29,10 +29,14 @@ You need to be assigned permissions in the Office 365 Security & Compliance Cent
 
 ### -------------------------- Example 1 --------------------------
 ```
-Set-SupervisoryReviewRule -Identity "EU Brokers Rule" -AddReviewers [email protected]
+Set-SupervisoryReviewRule -Identity "EU Brokers Rule" -Conditions "((NOT(Reviewee:US Compliance)) -AND (Reviewee:EU Brokers) -AND ((trade) -OR (insider trading)) -AND (NOT(approved by the Contoso financial team)))"
 ```
 
-This example adds the reviewer [email protected] to the rule named EU Brokers Rule.
+This example modifies the existing rule named EU Brokers Rule with the following settings:
+
+- Conditions: Supervise inbound and outbound communications for members of the EU Brokers group that contain the words trade or insider trading.
+
+- Exceptions: Exclude supervision for members of the EU Compliance group, or messages that contain the phrase "approved by the Contoso financial team".
 
 ## PARAMETERS
 
@@ -60,23 +64,23 @@ Accept wildcard characters: False
 ### -Condition
 The Condition parameter specifies the conditions and exceptions for the rule. This parameter uses the following syntax:
 
-- User or group communications to supervise: ((Reviewee:\<emailaddress1\>) -OR (Reviewee:\<emailaddress2\>)...). Exceptions use the syntax (NOT((Reviewee:\<emailaddress1\>) -OR (Reviewee:\<emailaddress2\>)...)).
+- User or group communications to supervise: "((Reviewee:\<emailaddress1\>) -OR (Reviewee:\<emailaddress2\>)...)". Exceptions use the syntax "(NOT((Reviewee:\<emailaddress1\>) -OR (Reviewee:\<emailaddress2\>)...))".
 
-- Direction :((Direction:Inbound) -OR (Direction:Outbound) -OR (Direction:Internal)).
+- Direction: "((Direction:Inbound) -OR (Direction:Outbound) -OR (Direction:Internal))".
 
-- Message contains words: ((\<Word1orPhrase1\>)-OR (\<Word2orPhrase2\>)...). Exceptions use the syntax (NOT((\<Word1orPhrase1\>)-OR (\<Word2orPhrase2\>)...)).
+- Message contains words: "((\<Word1orPhrase1\>) -OR (\<Word2orPhrase2\>)...)". Exceptions use the syntax "(NOT((\<Word1orPhrase1\>) -OR (\<Word2orPhrase2\>)...))".
 
-- Any attachment contains words: ((Attachment:\<word1\>)-OR (Attachment:\<word2\>)...). Exceptions use the syntax (NOT((Attachment:\<word1\>)-OR (Attachment:\<word2\>)...)).
+- Any attachment contains words: "((Attachment:\<word1\>) -OR (Attachment:\<word2\>)...)". Exceptions use the syntax "(NOT((Attachment:\<word1\>) -OR (Attachment:\<word2\>)...))".
 
-- Any attachment has the extension: ((AttachmentName:.\<extension1\>)-OR (AttachmentName:.\<extension2\>)...). Exceptions use the syntax (NOT((AttachmentName:.\<extension1\>)-OR (AttachmentName:.\<extension2\>)...)).
+- Any attachment has the extension: "((AttachmentName:.\<extension1\>) -OR (AttachmentName:.\<extension2\>)...)". Exceptions use the syntax "(NOT((AttachmentName:.\<extension1\>) -OR (AttachmentName:.\<extension2\>)...))".
 
-- Message size is larger than: (MessageSize:\<size in B, KB, MB or GB\>). For example (MessageSize:300KB). Exceptions use the syntax (NOT(MessageSize:\<size in B, KB, MB or GB\>))
+- Message size is larger than: "(MessageSize:\<size in B, KB, MB or GB\>)". For example "(MessageSize:300KB)". Exceptions use the syntax "(NOT(MessageSize:\<size in B, KB, MB or GB\>))".
 
-- Any attachment is larger than: (AttachmentSize:\<size in B, KB, MB or GB\>). For example (AttachmentSize:3MB). Exceptions use the syntax (NOT(AttachmentSize:\<size in B, KB, MB or GB\>))
+- Any attachment is larger than: "(AttachmentSize:\<size in B, KB, MB or GB\>)". For example "(AttachmentSize:3MB)". Exceptions use the syntax "(NOT(AttachmentSize:\<size in B, KB, MB or GB\>))".
 
 - Parentheses ( ) are required around the whole filter.
 
-- Separate multiple conditions or exception types with the -AND operator. For example, ((Reviewee:[email protected]) -AND (AttachmentSize:3MB)).
+- Separate multiple conditions or exception types with the -AND operator. For example, "((Reviewee:[email protected]) -AND (AttachmentSize:3MB))".
 
 ```yaml
 Type: String