Orchestrating Collaboration, with Governance, in O365

Justin Walker, MCP – Microsoft Azure IaaS Implementation Sr. Account Technical Specialist North America AvePoint, Inc. Justin.Walker@avepoint.com

Session Overview: -Defining the 4 Horsemen: Groups, Teams, Yammer, SharePoint Online -Deciding which workloads to use in O365 -How to keep your content safe in the O365 Environment

4/28/2018 What are the 4 Horsemen of O365: Groups, Teams, Yammer, SharePoint Online Extensibility is all about Groups as a platform for building rich, customized experiences For IT pros it provides a way to build rich management dashboards and LOB apps richer and simpler than was possible on-premises © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Understanding “Groups” as a collaboration building block 4/28/2018 Understanding “Groups” as a collaboration building block A Office 365 Groups Apps Azure AD Skype … Outlook OneDrive Calendar OneNote Yammer Dynamics CRM Delve Apps Components that are automatically connected to a Group once created: Document library on SharePoint Online Group Inbox and Calendar integrated from Exchange Planner for organizing and assigning tasks, and keeping up to date with project progression OneNote notebook for taking project and meeting notes , a Group is nothing more than a container that integrates functionality for applications in O365 Identify the Apps Listed in the Diagram and be specific about the Outlook, ODFB, OneNote, Calendar, Delve, & Skype © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What are Groups “In Outlook” A “Group” is now a unique identifier in AAD Group Nesting is not supported They are enhanced Distribution Lists from Exchange Low Intelligence file support thru ODFB. Security Roles – Owners and Members (No versioning, metadata, workflow, or content types Without GA Decouple Distribution Lists as part of the upgr

How to manage group membership <Event Name Here> 4/28/2018 How to manage group membership End User Create group Set as public/private Add members & admins Add/remove external members Delete group Admin Tools Admin UI PowerShell Office 365 Admin Center Execute against Azure AD as primary Office 365 Admin app Synchronous notification/update in Exchange/SP Azure AD Admin Portal *-UnifiedGroup / *-MsolGroup Exchange Admin console *-UnifiedGroupLinks *-MsolSettings Tenant Admin Pull reports on group activity Control who can create groups Establish dynamic membership Set naming & retention policies Master permissions for groups > Get-UnifiedGroup #create/update/view groups and their settings > Get-UnifiedGroupLinks #Manage members, owners, and subscriber list > Get-MsolSettings #Manage tenant-wide group settings So let’s talk about how to manage groups. There’s a set of things the end user can control (list). That’s what is so powerful – self service group creation so they’re not waiting on you to approve things. But you as admin also have a powerful set of admin controls. Where (list) and What (list) 3 Different utilities to manage group membership End User Admin Tools Tenant Admin © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Directory Management - Today Microsoft Ignite 2015 4/28/2018 6:14 AM Directory Management - Today Naming policy Set on display name during create/change Blocked word list, pre-/post-fix based on AAD attributes IT admins can override Only applies to Outlook (web, desktop, mobile) endpoints today Dynamic membership Defined in Azure AD Admin Portal or via PowerShell, see Using attributes to create advanced rules Hidden membership Membership is only exposed to members Configure using REST API today and via PowerShell in the future Group creation permissions Azure AD policy can restrict some users from creating groups anywhere in O365, see Manage Group Creation Does not prevent users from using groups IT can still create groups When rolling out groups in your organization, you may want to enact policies to indicate which groups are created by users, or to use user properties to help create clusters of groups in the directory. Two features that help with this are naming policy and blocked words. Naming policy is enacted in Exchange Admin Center today…. Naming policy and blocked words today apply to the vastness of Groups created in Exchange and Outlook. Support for naming conventions for all groups on all endpoints is moving into the directory very soon. When running your pilot, you may want to control the rollout of group creation to users while you apply necessary polices. That’s possible with custom AAD powershell. And sometimes you want to create large groups that don’t require ongoing management – like folks in a discipline…. © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What about MS Teams? Teams is used for high velocity chat-centric interactions (Channels) When a Team is created, a Private O365 Group is also generated. (Underlying Team Site Container) Chat Bots & Connectors Maximum of 600 members Simple roles– No External User Support Developers needing a quick answer without a meeting is a good use case for teams Sales \ Tech Teams who work on opportunities also

When to Yammer? It’s your corporate “Social” network Reaches the entire organization quickly Can be snapped in to MS Teams Tough to search for content Can be governed with compliance solutions, but not native O365 functionality

What has SharePoint become? Advanced file support for O365. Modern Pages – team sites, lists\libraries, and Site Pages Works on-premises. So u can still collaborate when O365 isn’t part of a customer’s roadmap Metadata versioning content types Security mgmt. Landing Pages Metadata Tagging will exist on the root site object instead of the site collection container Cons: Been around a long time and lost its way a bit. Is only going to be for portals and doc mgmt. while teams and groups will do the simple management Its trying to catch up but the other utilities are taking over.

Insights and relationships from Office Graph Extensibility Microsoft 2016 4/28/2018 6:14 AM Microsoft Graph USERS FILES MAIL CALENDAR GROUPS TASKS YAMMER TEAMS Insights and relationships from Office Graph https://graph.microsoft.com/v1.0/groups Extend Groups experiences using the Microsoft Graph API Includes: group creation, membership updates; sender restrictions, thread operations, etc. Build your own Office 365 Connectors: https://dev.outlook.com/Connectors Microsoft Ignite recording: Connect your business critical applications to Outlook and Groups http://dev.office.com/sharepoint © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/28/2018 How do I control O365 Environment without limiting collaboration for my users? Once you have groups in use in your organization, you should feel confident that you know how to keep your data safe. © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Governance Policy Lifecycle

Intelligent collaboration through automated Governance Policies Defining Governance Policy Managing Asset Naming Managing Assets over time Automating Lifecycle and Expiration Recertification of Membership and Permissions Protecting your Environment Delegated Access Identifying Sensitive Content Reporting & Incident Management Protecting Content and taking action on sensitive information Applying policies to control the lifecycle of a Groups object from the creation to decommissioning phase. Governance applies across the corporate infrastructure: On-Prem Hybrid Cloud Only With a sound definition of your organization’s governance policy, AvePoint can automate the enforcement of those policies with “NO CODE” Required. Add Some CG Components in Right Hand Side to get specific.

Automated Governance workloads supported in O365 Provisioning with approval of the requests Automated policy enforcement GA Hybrid vs. Cloud Only distinction for GA Customers Recertification of permissions Automated site lease content lifecycle

Automate recertification to enforce governance policies Native options Data Ownership Access Permissions Classification Who is responsible for the stuff in here? Are they still here and willing to own it? No native solutions for ensuring data ownership for Office 365 content stays current Who can do what to the stuff in here? Does Bob still need his access? No native solutions for periodic permission review and certification Tell me about the stuff that lives in here… Is it sensitive? Is it important? No native solutions for ensuring content is properly classified

The Four Horsemen of the Microsoft Ecosystem … Planner Instant Messaging Sites, Lists, Libraries Plans User mailboxes Internal Networks O365 Video Portal S4B Broadcasting Calendars Buckets External Networks User OneDrives Group conversations Tasks MS Teams Chats Group Files Yammer Notes and Files Group mailboxes Group notebook Planner task comments MS Teams attachments Planner attachments … Administrative Policy Enforcement Information Lifecycle Recertification Risk Management Granular backup/recovery Migration & Restructuring Provisioning Classification Usage and ROI Protection Management Lifecycle Governance Compliance Insights

Administrative Governance for 0365 Collaboration Thank You for Joining: Administrative Governance for 0365 Collaboration For More Blogs, Videos, & Webinars, Check Out: www.avepoint.com/office-365-groups

Demo - Administration of Groups -- Native Admin Admin Center Groups Open a Group and show the attributes Data classification Open Project Halo Group. Show classification in Group header OWA > Edit the group Data classification drop down - can set levels within PowerShell Group usage guidelines Link configurable - how to use Groups in your org, data classification Change privacy Can show change to Private and change Classification Exchange Admin Center - Getting to Groups DL to Office 365 Group Open groups Select a DL and upgrade to a Group - don’t actually have to trigger it off. Just show how.    Yammer and Office 365 Group Create a Yammer Group Show Group in Office 365 Admin Center Show Yammer Group with Office 365 Resources Full SharePoint team site Document library OneNote Planner Administration DEMO Admin center > Groups : show key properties that can be updated Edit group: Usage guidelines, Privacy, Classification (your companies' every company has unique policies) Show Dynamic membership for "Engineering" group > 2 clicks in AAD Azure AD audit report Get to Groups EAC one click upgrade Azure AD - manage.windowsazure Dynamic membership Azure AD > Groups Open Project Halo Group Show where to turn on Dynamic membership How to pick attributes OR Advanced Rule for more complex membership query Reports Audit report - Events in your directory Details in the report