Exemption Accumulation
If an MSP or customer admin has created multiple exemptions, it's possible that more than one of these will sometimes apply to the same inbound email. In this case, as there is no precedence between sender, domain and IP address exemptions that have been set on the same level, the exemptions will simply accumulate (i.e. all will be applied).
Example: An admin creates separate exemptions for a sender and a domain
An admin creates an exemption for the sender usera@testing.com , with the security check Anti-spoof set to be bypassed. The admin also creates a separate exemption for the domain testing.com , with the security check Spam set to be bypassed.
In this scenario, both Anti-spoof and Spam will be bypassed for all emails from usera@testing.com because an exemption has been set for the sender as well as for the sender's domain.
If the admin added a third exemption, namely for an IP address that is used by this domain or sender, all checks set to be bypassed for the IP address would also apply to emails from usera@testing.com.