1. Collaborate outside the firewall with Office 365 Groups
Microsoft Ignite 2016
4/29/ :40 AM
BRK3250
Collaborate outside the firewall with Office 365 Groups
Shashi Singaravel
Principal Program Manager
#Office365Groups
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Agenda Overview Admin functionalities & controls Reporting & Auditing
How and what can I share externally with Office 365 groups?
Admin functionalities & controls
As a tenant admin how can I manage guests and control access to groups in my organization?
Reporting & Auditing
How can I identify the guests (external users) in my organization and in groups?

4. Overview Microsoft Ignite 2016 4/29/2018 12:40 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Customers Suppliers Contractors Microsoft Ignite 2016
4/29/ :40 AM
Customers
Suppliers
Contractors
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Demo End user experiences Microsoft Ignite 2016 4/29/2018 12:40 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Guests Experiences
Guests gets access to group content on the web from their account.
… more to come.

8. Guest addition experiences
Available on Outlook on the Web
Owners of a group adds guests
Awareness of guest participation in the group
Coming soon on Outlook Desktop, and Mobile App
Globe icon next to group and group description indicates group has guests as members.
Guest are represented with a globe icon next to the display name ( in the absence of display name) and has a title “GUEST”
Guest tab for a filtered view of guests in this group.

9. Architecture

10. Guest user in Office 365 Definition Single Identity
External user with any account (work, school or personal accounts) whose credentials aren’t managed by IT of the organization.
Single Identity
Guest identity is mastered in Azure AD and synced to Exchange Online and SharePoint Online.
Access to Office 365 resources
Restricted access to resources as defined by policy of organization.
Guests are restricted from group management operations, and becoming an owner.
CONTOSO
FABRIKAM

11. Guest addition to Office 365
Office 365 Groups
Owners of a group and tenant admin adds guests to group as members
File and folder sharing through SharePoint site
Guest is created in SharePoint first, and upon guest accessing resources, the guest user is created in Azure AD, and synched to other workload – Exchange Online.
Azure B2B service
Users from partner companies/federated tenant are added as guests to a target tenant to access SaaS applications, Office 365.

12. Welcome email & group messages
Guest addition flow
added to
CONTOSO
(target tenant)
FABRIKAM
(guest’s tenant)
Welcome & group messages
Robin from Fabrikam is added to group in Contoso organization.
Robin is represented in the Contoso (target tenant) as guest (shadow representation).
Robin gets welcome , starts getting group messages from the group (including calendar invites).
Add
member
Add Member
Guest Mail User

13. Guest access flow
access group files/notebook from the welcome or via links on the footer
CONTOSO
(target tenant)
FABRIKAM
(guest’s tenant)
View files
Sign In/AuthN
Robin now tries to access the group files from Contoso organization.
Robin authenticates himself with Fabrikam (home tenant), and is now authorized with Contoso (target tenant) to access the group files. The guest object in Contoso is now linked to Fabrikam organization.

14. Guest addition flow
or added to
CONTOSO
(target tenant)
CONSUMER
(home tenant)
Add member
View files

15. Guest AuthN flow to access group resources
User signs in with his Fabrikam (existing O365) creds and redeems his invitation to Contoso
Office 365 account
(Has a MSA)
User signs in with his Microsoft account and redeems his invitation to Contoso
(Has a MSA)
User signs up for a Microsoft account and redeems his invitation to Contoso
(Doesn’t have a MSA)

16. Admin functionalities & controls

17. Admin Controls to manage guests
Guest addition to organization
Allow invitation to guests users in the organization
Guest addition to groups
Allow adding of guests to any group within the organization.
Allow adding of guests to a specific group in the organization via PowerShell
Guest access to group resources
Allow guests to access to any Office 365 group resources

18. Admin Controls via Azure AD PowerShell
Guest addition and access to Office 365 groups – org level
Allow adding of guests to any group within the organization – “AllowToAddGuests”
Allow guests to access to any Office 365 group resources – “AllowGuestsToAccessGroups”
Guest addition to specific Office 365 group
Allow adding of guests to a specific group in the organization – “AllowToAddGuests”
Usage guidelines to guests
Link to the guidance document for external users from the organization – “GuestUsageGuidelinesUrl”

19. Demo Administration Reporting & Auditing Microsoft Ignite 2016
4/29/ :40 AM
Demo
Administration
Reporting & Auditing
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. Reporting and Auditing

21. Reporting Office 365 portal PowerShell cmdlets
Number of guests in groups
Guests users in the organization
PowerShell cmdlets
Get-Msol* cmdlets
Get-UnifiedGroupLinks cmdlet

22. Auditing Azure AD portal Office 365 audit log report
Invite external user
Redeem external user
Office 365 audit log report
Add member to group

23. Frequently Asked Questions
How does guest access impact other sharing features in Office 365?
Are guests synced to on-premises directory in hybrid environments?
Can mail contacts be added as guests in a group?
Can guest access IRM messages?

24. See you at the Office 365 Groups booth everyday!
Microsoft Ignite 2015
4/29/ :40 AM
Groups Sessions
Session
Code
Time
Room
Collaborate with Office 365
BRK2288 B
Discover Office 365 Groups - overview, what's new and roadmap
BRK2033
C112
Meet Planner - the new Microsoft Office 365 work management application
BRK1006 B
Help your users collaborate better with Office 365 Groups
THR3010
Theater level 2
Using Office 365 Groups at schools and universities
BRK2052
C114
Manage Office 365 Groups
BRK3019
Georgia Ballroom
Field Guide to Office 365 Groups: Planning, Implementation, and Management
BRK3001 B
Collaborate outside of the firewall with Office 365 Groups
BRK3250 B
Migrate DL to Microsoft Office 365 Groups
THR3001
Theater level 4
Migrate DL to Office 365 Groups
Theater 4
Work smarter with Yammer and Office 365 Groups
BRK2019
C113
Collaborate outside the firewall with Office 365
BRK3003
Theater 3
Learn about Office 365 Groups and how to use them
BRK2277
B203
Ask us anything about Office 365 Groups
BRK3227
See you at the Office 365 Groups booth everyday!
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Next Steps Extend collaboration outside of your directory
Use Guest access in Groups
Give us feedback on our Technical Community 1 2 3
Guest access in Office 365 Groups
Guest access in Office 365 groups – Admin Help
aka.ms/o365g

26. Deploy, ramp-up on new services and onboard new users with Microsoft FastTrack:

27. Join the Microsoft Tech Community to collaborate, share, and learn from the experts:

28. Please evaluate this session
4/29/ :40 AM
Please evaluate this session
Your feedback is important to us!
From your PC or Tablet visit MyIgnite at
From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. 4/29/ :40 AM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

30. Office 365 Groups innovations
Office 365 Connectors
Microsoft Planner
Professional learning community groups Office 365 Groups + team sites integration
Guest user access (external users)
Calendaring improvements
Notifications improvements
Mobile improvements
Outlook Groups iPad app
Experiences
File quota management
Hybrid guidance & improvements
Privacy type conversion
Multi-domain support
Creation policies in AAD
Mobile application management
Data classification and extensible policies
Usage guidelines
Exchange Admin Center UI for upgrading DL to Groups
Administration
Shipped during past year
Yammer
Planner: multi-assign, external user, mobile
Send As in Outlook on the web
Outlook for Mac support
Inbox tiered notifications
Single Groups files view
Skype Meet Now
Continuously improving UI design
Naming policies in AAD
Hidden membership
General usage reporting
Preservation and deletion policies
Soft-delete and restore
Upgrading nested, dynamic and hybrid DLs to Groups
Improved hybrid experiences
Upcoming investments
Key Resources
Documentation: aka.ms/O365g | Questions: aka.ms/O365ng | FastTrack: fasttrack.microsoft.com/office Roadmap: fasttrack.office.com/roadmap | Sway: aka.ms/Office365Groups