1. Orchestrating Collaboration, with Governance, in O365

2. Justin Walker, MCP – Microsoft Azure IaaS Implementation
Sr. Account Technical Specialist
North America
AvePoint, Inc.

3. Session Overview:
-Defining the 4 Horsemen: Groups, Teams, Yammer, SharePoint Online
-Deciding which workloads to use in O365
-How to keep your content safe in the O365 Environment

4. 4/28/2018
What are the 4 Horsemen of O365: Groups, Teams, Yammer, SharePoint Online
Extensibility is all about Groups as a platform for building rich, customized experiences
For IT pros it provides a way to build rich management dashboards and LOB apps richer and simpler than was possible on-premises
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Understanding “Groups” as a collaboration building block
4/28/2018
Understanding “Groups” as a collaboration building block A
Office 365 Groups
Apps
Azure AD
Skype …
Outlook
OneDrive
Calendar
OneNote
Yammer
Dynamics CRM
Delve
Apps
Components that are automatically connected to a Group once created:
Document library on SharePoint Online
Group Inbox and Calendar integrated from Exchange
Planner for organizing and assigning tasks, and keeping up to date with project progression
OneNote notebook for taking project and meeting notes
, a Group is nothing more than a container that integrates functionality for applications in O365
Identify the Apps Listed in the Diagram and be specific about the Outlook, ODFB, OneNote, Calendar, Delve, & Skype
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. What are Groups “In Outlook”
A “Group” is now a unique identifier in AAD
Group Nesting is not supported
They are enhanced Distribution Lists from Exchange
Low Intelligence file support thru ODFB.
Security Roles – Owners and Members
(No versioning, metadata, workflow, or content types
Without GA
Decouple Distribution Lists as part of the upgr

7. How to manage group membership
<Event Name Here>
4/28/2018
How to manage group membership
End User
Create group
Set as public/private
Add members & admins
Add/remove external members
Delete group
Admin Tools
Admin UI
PowerShell
Office 365 Admin Center
Execute against Azure AD as primary
Office 365 Admin app
Synchronous notification/update in Exchange/SP
Azure AD Admin Portal
*-UnifiedGroup / *-MsolGroup
Exchange Admin console
*-UnifiedGroupLinks
*-MsolSettings
Tenant Admin
Pull reports on group activity
Control who can create groups
Establish dynamic membership
Set naming & retention policies
Master permissions for groups
> Get-UnifiedGroup #create/update/view groups and their settings
> Get-UnifiedGroupLinks #Manage members, owners, and subscriber list
> Get-MsolSettings #Manage tenant-wide group settings
So let’s talk about how to manage groups. There’s a set of things the end user can control (list). That’s what is so powerful – self service group creation so they’re not waiting on you to approve things.
But you as admin also have a powerful set of admin controls. Where (list) and What (list)
3 Different utilities to manage group membership
End User
Admin Tools
Tenant Admin
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. Directory Management - Today
Microsoft Ignite 2015
4/28/2018 6:14 AM
Directory Management - Today
Naming policy
Set on display name during create/change
Blocked word list, pre-/post-fix based on AAD attributes
IT admins can override
Only applies to Outlook (web, desktop, mobile) endpoints today
Dynamic membership
Defined in Azure AD Admin Portal or via PowerShell, see Using attributes to create advanced rules
Hidden membership
Membership is only exposed to members
Configure using REST API today and via PowerShell in the future
Group creation permissions
Azure AD policy can restrict some users from creating groups anywhere in O365, see Manage Group Creation
Does not prevent users from using groups
IT can still create groups
When rolling out groups in your organization, you may want to enact policies to indicate which groups are created by users, or to use user properties to help create clusters of groups in the directory. Two features that help with this are naming policy and blocked words.
Naming policy is enacted in Exchange Admin Center today….
Naming policy and blocked words today apply to the vastness of Groups created in Exchange and Outlook. Support for naming conventions for all groups on all endpoints is moving into the directory very soon.
When running your pilot, you may want to control the rollout of group creation to users while you apply necessary polices. That’s possible with custom AAD powershell.
And sometimes you want to create large groups that don’t require ongoing management – like folks in a discipline….
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. What about MS Teams?
Teams is used for high velocity chat-centric interactions (Channels)
When a Team is created, a Private O365 Group is also generated. (Underlying Team Site Container)
Chat Bots & Connectors
Maximum of 600 members
Simple roles–
No External User Support
Developers needing a quick answer without a meeting is a good use case for teams
Sales \ Tech Teams who work on opportunities also

10. When to Yammer? It’s your corporate “Social” network
Reaches the entire organization quickly
Can be snapped in to MS Teams
Tough to search for content
Can be governed with compliance solutions, but not native O365 functionality

11. What has SharePoint become?
Advanced file support for O365.
Modern Pages – team sites, lists\libraries, and Site Pages
Works on-premises. So u can still collaborate when O365 isn’t part of a customer’s roadmap
Metadata versioning content types
Security mgmt.
Landing Pages
Metadata Tagging will exist on the root site object instead of the site collection container
Cons:
Been around a long time and lost its way a bit.
Is only going to be for portals and doc mgmt. while teams and groups will do the simple management
Its trying to catch up but the other utilities are taking over.

12. Insights and relationships from Office Graph
Extensibility
Microsoft 2016
4/28/2018 6:14 AM
Microsoft Graph
USERS
FILES
MAIL
CALENDAR
GROUPS
TASKS
YAMMER
TEAMS
Insights and relationships from Office Graph
Extend Groups experiences using the Microsoft Graph API
Includes: group creation, membership updates; sender restrictions, thread operations, etc.
Build your own Office 365 Connectors:
Microsoft Ignite recording:
Connect your business critical applications to Outlook and Groups
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. 4/28/2018
How do I control O365 Environment without limiting collaboration for my users?
Once you have groups in use in your organization, you should feel confident that you know how to keep your data safe.
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Governance Policy Lifecycle

15. Intelligent collaboration through automated Governance Policies
Defining Governance Policy
Managing Asset Naming
Managing Assets over time
Automating Lifecycle and Expiration
Recertification of Membership and Permissions
Protecting your Environment
Delegated Access
Identifying Sensitive Content
Reporting & Incident Management
Protecting Content and taking action on sensitive information
Applying policies to control the lifecycle of a Groups object from the creation to decommissioning phase.
Governance applies across the corporate infrastructure:
On-Prem
Hybrid
Cloud Only
With a sound definition of your organization’s governance policy, AvePoint can automate the enforcement of those policies with “NO CODE” Required.
Add Some CG Components in Right Hand Side to get specific.

16. Automated Governance workloads supported in O365
Provisioning with approval of the requests
Automated policy enforcement
GA Hybrid vs. Cloud Only distinction for GA Customers
Recertification of permissions
Automated site lease content lifecycle

17. Automate recertification to enforce governance policies
Native options
Data Ownership
Access Permissions
Classification
Who is responsible for the stuff in here?
Are they still here and willing to own it?
No native solutions for ensuring data ownership for Office 365 content stays current
Who can do what to the stuff in here?
Does Bob still need his access?
No native solutions for periodic permission review and certification
Tell me about the stuff that lives in here…
Is it sensitive?
Is it important?
No native solutions for ensuring content is properly classified

18. The Four Horsemen of the Microsoft Ecosystem…
Planner
Instant Messaging
Sites, Lists, Libraries
Plans
User mailboxes
Internal Networks
O365 Video Portal
S4B Broadcasting
Calendars
Buckets
External Networks
User OneDrives
Group conversations
Tasks
MS Teams Chats
Group Files
Yammer Notes and Files
Group mailboxes
Group notebook
Planner task comments
MS Teams attachments
Planner attachments …
Administrative Policy Enforcement
Information Lifecycle
Recertification
Risk Management
Granular backup/recovery
Migration & Restructuring
Provisioning
Classification
Usage and ROI
Protection
Management
Lifecycle
Governance
Compliance
Insights

19. Administrative Governance for 0365 Collaboration
Thank You for Joining:
Administrative Governance for 0365 Collaboration
For More Blogs, Videos, & Webinars, Check Out:

20. Demo - Administration of Groups -- Native Admin
Admin Center
Groups
Open a Group and show the attributes
Data classification
Open Project Halo Group. Show classification in Group header
OWA > Edit the group
Data classification drop down - can set levels within PowerShell
Group usage guidelines
Link configurable - how to use Groups in your org, data classification
Change privacy
Can show change to Private and change Classification
Exchange Admin Center - Getting to Groups
DL to Office 365 Group
Open groups
Select a DL and upgrade to a Group - don’t actually have to trigger it off. Just show how.
 Yammer and Office 365 Group
Create a Yammer Group
Show Group in Office 365 Admin Center
Show Yammer Group with Office 365 Resources
Full SharePoint team site
Document library
OneNote
Planner
Administration DEMO
Admin center > Groups : show key properties that can be updated
Edit group: Usage guidelines, Privacy, Classification (your companies' every company has unique policies)
Show Dynamic membership for "Engineering" group > 2 clicks in AAD
Azure AD audit report Get to Groups
EAC one click upgrade
Azure AD - manage.windowsazure
Dynamic membership
Azure AD > Groups
Open Project Halo Group
Show where to turn on Dynamic membership
How to pick attributes
OR Advanced Rule for more complex membership query
Reports
Audit report - Events in your directory
Details in the report