Skip to content
  • There are no suggestions because the search field is empty.

How do I Configure Phinbox IQ?

This guide walks through how to configure Phinbox IQ.

Phinbox IQ is currently available at the partner level (the ticket icon in the menu)

  • Fully supported in ConnectWise (Open Beta)
  • Minimal support in Halo PSA (Closed Beta)

If you're interested, please open a support ticket, reach out to your Phin account contact, or reach out to design@phinsecurity.com.

Setup Instructions

Below are the instructions to set up Phinbox IQ (formerly known as Phin Triage) within
your Phin account.
  • If you are looking for a guide to deploy Phinbox IQ as a pod in ConnectWise, go here.
 
 

IMPORTANT NOTICES:

1. As of February 10th, Phinbox IQ will require the company level integration to be turned on for any company whose reported emails should be analyzed by Phinbox IQ. Only having the Report Phishing Button deployed will not be enough to utilize Phinbox IQ in the Phin platform or in a supported PSA.

2. While this feature is it's beta state, it will remain available at no additional cost. Prior to Phinbox IQ becoming a paid feature of Phin’s platform, you will be notified of any change in cost to your plan, should you continue to use Phinbox IQ.

 

1. Deploy the Report Phishing Button For Each Company

Deploy the Microsoft Report Phishing Button in each Phin company account if their emails should be analyzed by Phinbox IQ. 

report-phishing-highlighted

2. Enable Phinbox IQ For Each Company

To ensure we are able to provide our partners with an option to deploy the Report Phishing button without enforcing those emails to be analyzed by Phinbox IQ, we created a separate integration specifically for Phinbox IQ at the company level. You'll see this on the company integrations page and on the overview tab within the Reporting Phishing integration page.
 
What are the permissions?
Exchange Administrator (Entra Role) This is a Microsoft Entra role, not an API permission. Required to execute Exchange admin operations for triage.
RoleManagement.ReadWrite.Directory Allows Phin to assign the Exchange Administrator role to the application.
Exchange.ManageAsApp Enables app-only Exchange operations and PowerShell execution required for triage actions.
User.Read.All Allows reading user profiles for triage context.
Mail.ReadWrite Allows reading and modifying messages for triage actions (e.g., delete, move).
Mail.Send Allows the app to send mail as any user without a signed-in user.
MailboxSettings.Read Allows reading mailbox settings (e.g., message rules) for triage visibility.
ThreatHunting.Read.All Allows querying Defender for Office 365 hunting data for URL click events and related telemetry.

 Phinbox IQ-highlighted

 
Once you enable this integration for each company, emails reported by Phin's Report Phishing button will be analyzed by Phinbox IQ and stored in the Phinbox IQ reported emails table within your Phin partner account on the Phinbox IQ page.
 
reported-emails-phinboxIQ
 

 

Knowledge Base

Phin works to update our Knowledge Base with new features with every release. You can read about the platform and its updates here: https://www.phinsec.io/knowledge.

Thanks for using our product!

We use all provided feedback to help drive Phin's development direction. Please keep reaching out and helping us shape the product's future! All ideas are welcome; please keep them coming!

The Dev Team @ Phin

Need help or have an idea for us? Click here!