Governance Information Management & Security Driving Your Architecture SESSION CODE: OFS213 Dan Holme, MVP, SharePoint Chief SharePoint Evangelist, AvePoint Author, SharePoint 2010 Training Kit (Microsoft Press) Governance Information Management & Security Driving Your Architecture (c) 2011 Microsoft. All rights reserved.

Dan Holme Based in Maui, Hawaii Chief SharePoint Evangelist – AvePoint 5-year MVP Microsoft Technologies Consultant NBC Olympics Speaker: SPC, TechEd, Connections Columnist: SharePoint Pro magazine Author: SharePoint 2010 Training Kit dan.holme@avepoint.com @danholme

Defining Governance

GOVERNANCE Communities Search Sites Composites Content Insights

Governance defines the people, processes, policies and technologies that deliver a service

People Process Technology Policy

People Process Technology Policy

People Process Technology Policy GOVERNANCE SERVICE

About This Session Objectives & Agenda

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

SharePoint PRODUCTION FARM Remote LoB App WWW Extranet http://intranet HR Finance Expense Reports Vacation & Sick Day Tracking Financial Performance Benefits PRODUCTION FARM http://teams Site Collection HR Engineering Finance http://intranet / Expense Reports http://apps Remote LoB App Research & Development CRM WWW Extranet Search Metadata My Sites WWW Extranet

Objectives & Agenda Defining Governance Management Controls and Scopes Information Architecture vs. Management Four-Step Architecting Governance Process Scenario-Based Logical & Physical Architectures

Management Controls and Scopes Fundamentals Management Controls and Scopes

Management controls and scopes SharePoint Service Isolation SSL FARM Service Application Configuration and Data Blocked File Types Zone WEB APPLICATION Service Application Data Storage SLAs CONTENT DATABASE Quotas Ownership (Full Control) SITE COLLECTION Features Top-Level Site Security Permissions List or Library [Folder] Subsite Subsite Item or Document

Management controls and scopes It’s about containers (scopes) Security (permissions)? We understand that… Scope unique permissions = site, list/library, folder Administrative overhead of multiple containers But… Governance and management is more than just security!

Information Architecture vs. Management Fundamentals Information Architecture vs. Management

Site Map ≠ Architecture SharePoint http://intranet HR Finance Benefits Vacation & Sick Day Tracking Financial Performance Expense Reports

Information Architecture vs. Management Organize and describe content Metadata Structure Relationships Inputs Knowledge Management team Librarians Content owners Subject matter experts (SMEs) Outcomes Site map (navigation) Taxonomy Search Targeting (audiences)

Information Architecture SharePoint http://intranet HR Finance Benefits Vacation & Sick Day Tracking Financial Performance Expense Reports

Information Architecture vs. Management Organize and describe content Metadata Structure Relationships Inputs Knowledge Management team Librarians Content owners Subject matter experts (SMEs) Outcomes Site map (navigation) Taxonomy Search Targeting (audiences) Manage the content & service Access levels (permissions) Lifecycle Storage Inputs Information management policies IT usage policies Regulatory environment SLAs Outcomes Access levels Records management Compliance Performance

Research & Development Service Architecture PRODUCTION FARM http://teams Site Collection HR Engineering Finance http://intranet / Expense Reports http://apps Search Metadata My Sites Remote LoB App Research & Development CRM Test Farm http://teams Site Collection HR Engineering Finance http://intranet / Expense Reports http://apps WWW Extranet WWW Extranet Search Metadata My Sites

SharePoint PRODUCTION FARM Remote LoB App WWW Extranet http://intranet HR Finance Expense Reports Vacation & Sick Day Tracking Financial Performance Benefits PRODUCTION FARM http://teams Site Collection HR Engineering Finance http://intranet / Expense Reports http://apps Remote LoB App Research & Development CRM WWW Extranet Search Metadata My Sites WWW Extranet

Architecting Governance Four-Step Process to Architecting Governance

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

Management controls and scopes FARM Zone WEB APPLICATION Service Application CONTENT DATABASE User & Group Management Ownership (Full Control) SITE COLLECTION Top-Level Site List or Library [Folder] Subsite Subsite Item or Document

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

Sites, lists, libraries, and folders FARM Zone WEB APPLICATION Service Application CONTENT DATABASE SITE COLLECTION Top-Level Site Security Permissions Features List or Library [Folder] Subsite Subsite Item or Document

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

Architecting Governance More Details about Architecting Governance

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

Requirements and Classification Business Business purpose of the solution Technical Project Budget, deadlines, etc. Information architecture How content is described, organized and discovered Information management How content is created, secured, maintained, and disposed of Service management IT assurance: performance, availability, recovery SLAs and SLOs

Requirements to Architecture Solicited Derived

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

Requirements  multiple web apps Blocked file types DNS namespace (URL) Web site service isolation Web server: server isolation Application pool: process isolation Classic Mode or Claims Based Authentication Self-service site creation, automatic deletion of unused sites

More requirements  multiple web apps SharePoint Designer controls Impact of upgrade Functional web applications (http://apps) not upgraded immediately Business applications in this SharePoint web app have specific functionality They meet business requirements without upgrade Features that are installed to support these applications take time to upgrade Collaborative web sites, intranet, and services upgraded immediately Take advantage of new features of SharePoint vNext Service application connections and configuration Multiple scopes

Requirements  multiple zones Anonymous access Anonymous policy SSL Authentication providers User policy

Guidance: Web apps and zones INTRANET: published intranet content http://intranet COLLABORATION: business unit, department, team, project http://teams EXTRANET: collaboration with customers, vendors & partners http://extranet Zone: https://clients SOCIAL: enterprise social networking and personal content http://people PUBLIC WEB SITE http://www APPS: functional business applications (expense report) http://apps SIGNIFICANT LINE OF BUSINESS APPLICATION http://<LOB> e.g. http://CRM

Requirements  Multi-farm architectures Code isolation Dev / Test / Staging / Production Access Public-facing web site Extranet in Cloud: Partners & Customers Geoperformance Collaboration farm(s) with team sites Feature and process isolation Enterprise SharePoint farm with intranet and enterprise services Enterprise services: search, metadata, social (User Profiles, My Sites) Premium farm(s) for custom applications Consider the implications SLAs Chargebacks Upgrade to vNext We don’t have a test farm? No… You don’t have a production farm!

Requirements  multiple site collections Module 2: Creating a SharePoint 2010 Intranet Course 10174A Requirements  multiple site collections Ownership Primary & secondary site collection administrators (Central Admin) The owner and secondary owner attributes of a site collection Full control of site collection + receive site collection email notifications Administration Site collection administrators as defined in the site collection Full control of site collection Quotas Locks SharePoint Designer restrictions Features Sandbox Solutions Search settings Audit settings User & group management Multiple scopes

Content lifecycle example FARM http://teams http://intranet HR Benefits Finance HR Finance Benefits Page Benefits Page Benefits

Requirements  multiple content databases Module 2: Creating a SharePoint 2010 Intranet Course 10174A Requirements  multiple content databases Storage Management Location of database Which SQL Server(s) host the database Storage platform Redundancy Clustering Mirroring Storage platform features Backup SLAs How long it takes to back up data Recovery SLAs How long it takes to restore data RTO and RPO PowerShell delegation Remote BLOB Storage (RBS) is enabled per content database with FILESTREAM provider

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

The Great Divide Management requirements  more “containers” Web applications Site collections Content databases Out-of-box features scoped to a single site collection Navigation Add a subsite, navigation links created automatically Content management Site columns and content types apply to a subsite Administration Audit reports pull audit information from an entire site collection

“Behind the scenes” FARM http://apps http://teams Site Collection HR Engineering Finance http://intranet Site Collection / HR Engineering Finance Site Collection Expense Reports

Presentation to the user SharePoint http://intranet HR Finance Benefits Vacation & Sick Day Tracking Financial Performance Expense Reports

Overlay Information Architecture Navigation Manually-configured Quick Launch and top link bar (global navigation) Custom link lists (advantage: security trimmed) Custom or third-party navigation controls SPXmlContentMapProvider

Navigation FARM http://apps http://teams Site Collection HR Engineering Finance http://intranet Site Collection / HR Engineering Finance Site Collection Expense Reports

Presentation to the user SharePoint http://intranet HR Finance Benefits Vacation & Sick Day Tracking Financial Performance Expense Reports

Overlay Information Architecture Navigation Manually-configured Quick Launch and top link bar (global navigation) Custom link lists (advantage: security trimmed) Custom or third-party navigation controls SPXmlContentMapProvider Search-Based Navigation

Research & Development Administration PRODUCTION FARM http://teams Site Collection HR Engineering Finance http://intranet / Expense Reports http://apps Search Metadata My Sites Remote LoB App Research & Development CRM Test Farm http://teams Site Collection HR Engineering Finance http://intranet / Expense Reports http://apps WWW Extranet WWW Extranet Search Metadata My Sites

Overlay Administration Administration “single pane of glass” across Site collections Web applications Farms For… Manage access, audit, manage groups Deploy content PowerShell Third-party administration tools

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

IN SUM…

Architecting Governance 1. Define and classify your requirements 2. Design for management requirements 3. Refine for business requirements 4. Overlay information architecture and manageability

Requirements to Architecture Solicited Derived

SharePoint FARM Remote LoB App WWW Extranet http://intranet HR Finance Expense Reports Vacation & Sick Day Tracking Financial Performance Benefits FARM http://teams Site Collection HR Engineering Finance http://intranet / Expense Reports http://apps Remote LoB App http://CRM WWW http://www Extranet http://clients

People Process Technology Policy GOVERNANCE SERVICE

GOVERNANCE MANAGEMENT SERVICE

Resources TechNet dan.holme@avepoint.com @danholme Governance resource center http://technet.microsoft.com/en-us/sharepoint/ff800826.aspx Governance features http://technet.microsoft.com/en-us/library/cc262287.aspx Plan for Software Boundaries http://technet.microsoft.com/en-us/library/cc262787.aspx dan.holme@avepoint.com @danholme www.sharepointpromag.com Articles & weekly newsletter Questions & Answers Please submit your evaluations!

Enrol in Microsoft Virtual Academy Today Why Enroll, other than it being free? The MVA helps improve your IT skill set and advance your career with a free, easy to access training portal that allows you to learn at your own pace, focusing on Microsoft technologies. What Do I get for enrolment? Free training to make you become the Cloud-Hero in my Organization Help mastering your Training Path and get the recognition Connect with other IT Pros and discuss The Cloud Where do I Enrol? www.microsoftvirtualacademy.com Then tell us what you think. TellTheDean@microsoft.com

(c) 2011 Microsoft. All rights reserved. 11/16/2018 8:40 AM © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. (c) 2011 Microsoft. All rights reserved. © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

(c) 2011 Microsoft. All rights reserved. Resources www.msteched.com/Australia Sessions On-Demand & Community www.microsoft.com/australia/learning Microsoft Certification & Training Resources http:// technet.microsoft.com/en-au Resources for IT Professionals http://msdn.microsoft.com/en-au Resources for Developers (c) 2011 Microsoft. All rights reserved.