1. Building Compliant Team Sites
THR2057
Building Compliant Team Sites
Bob German
Principal Architect | BlueMetal
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Details, Links, Related Sessions: https://bit.ly/IgniteTeamSites
@bob1german

3. You can’t have compliance without usability.
@bob1german

4. Building Compliant Team Sites
1. Set up policies
2 Classify your sites
3. Provision sites consistently
4. Classify your documents
@bob1german

5. 1. Set up policies @bob1german 5/25/2018 5:56 AM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. 2. Classify your sites @bob1german 5/25/2018 5:56 AM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Setting up site classification
$me = Get-Credential
Import-Module AzureADPreview
Connect-AzureAD -Credential $me
# Create the new setting
$t = Get-AzureADDirectorySettingTemplate | Where-Object {$_.DisplayName -eq "Group.Unified"}
$s = $t.CreateDirectorySetting()
$s["UsageGuidelinesUrl"] = "
$s["ClassificationList"] = "Secret, Confidential, Internal, Public"
$s["DefaultClassification"] = "Confidential"
New-AzureADDirectorySetting -DirectorySetting $s
# Check it out
Get-AzureADDirectorySetting -All $true | % {$_.values}

8. Beyond classification
Most businesses need unique site templates for different kinds of sites.
Communications/Publishing
Projects
Communities
Business entities
Business
Workspace Subject
Consulting
Engagements
Information Technology
Projects
Investment Banking
Funds, portfolios
Insurance
Counterparties
Manufacturing
Products
Pharmaceuticals
Compounds, Clinical trials
@bob1german

9. 3. Provision sites consistently
@bob1german

10. Provision O365 Groups, not just Sites
Azure AD management of members, owners
Best of breed services (e.g. Exchange for calendars and messages)
Required for modern sites
Team Sites
Allows use of classic pages and web parts
Enable modern UX by creating a site page
@bob1german

11. Site provisioning workflow
5/25/2018 5:56 AM
Site provisioning workflow
Request List(s)
Remote Timer Job
Users request site using OOB or custom form
PowerShell Script
PnP Provisioning Template
PowerShell Script
PnP Provisioning Template
PowerShell Script
PnP Provisioning Template
req list for items where: - Approved == true - Provisioned == false
Runs the selected PS script
Workflow
Provision site using PnP Powershell
Approves, Sets site type (PowerShell to create) Ensure only the workflow, not end users, can set approval state, site type
@bob1german
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. 5/25/2018 5:56 AM
Site Provisioning
It is now possible to fully automate the provisioning of modern sites
Modern pages and web parts
Custom web parts
SPFx extensions
Lists, libraries, etc. (as before)
PnP is your friend
@bob1german
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Tenant-Scoped SPFx Features
5/25/2018 5:56 AM
Tenant-Scoped SPFx Features
Tenant-Scoped
Allows use of SPFx customizations in provisioned sites
Web parts deploy automatically to all sites
Extensions are available in all sites (you still need to create the custom action)
NO provisioning via Feature Framework
Not Tenant-Scoped
Allows users to add “Apps” that use SPFx on a site by site basis
Web parts only available on sites where App was added
Automatically wires up SPFx Extensions
Provision content w/Feature Framework
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Curate your content with Remote Timer Jobs
You write a console application that:
Runs outside of SharePoint and uses CSOM/REST to talk to SharePoint
Framework Handles authentication, site traversal, multithreading
Typically uses app-only credentials
Is triggered via a scheduler
Runs against one, a subset, or all sites
Uses “throttling-safe” calls
Hosting is typically:
Azure Web Jobs
Windows Server Task Scheduler
Console Application
Remote Timer Job (inherits from TimerJob)
Run method (called w/ClientContext)

15. 4. Classify your documents
5/25/2018 5:56 AM
4. Classify your documents
@bob1german
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Building Compliant Team Sites
1. Set up policies
2 Classify your sites
3. Provision sites consistently
4. Classify your documents
@bob1german

17. Details, Links, Related Sessions: https://bit.ly/IgniteTeamSites
@bob1german

18. Please evaluate this session
Tech Ready 15
5/25/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.