2. Governance Information Management & Security Driving Your Architecture
SESSION CODE: OFS213
Dan Holme, MVP, SharePoint
Chief SharePoint Evangelist, AvePoint
Author, SharePoint 2010 Training Kit (Microsoft Press)
Governance Information Management & Security Driving Your Architecture
(c) 2011 Microsoft. All rights reserved.

3. Dan Holme Based in Maui, Hawaii Chief SharePoint Evangelist – AvePoint
5-year MVP
Microsoft Technologies Consultant NBC Olympics
Speaker: SPC, TechEd, Connections
Columnist: SharePoint Pro magazine
Author: SharePoint 2010 Training Kit
@danholme

4. Defining Governance

5. GOVERNANCE
Communities
Search
Sites
Composites
Content
Insights

6. Governance defines the people, processes, policies and technologies that deliver a service

7. People
Process
Technology
Policy

8. People
Process
Technology
Policy

9. People
Process
Technology
Policy
GOVERNANCE
SERVICE

10. About This Session
Objectives & Agenda

11. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

12. SharePoint PRODUCTION FARM Remote LoB App WWW Extranet http://intranetHR
Finance
Expense Reports
Vacation & Sick Day Tracking
Financial Performance
Benefits
PRODUCTION FARM
Site Collection HR
Engineering
Finance /
Expense Reports
Remote
LoB App
Research & Development
CRM
WWW
Extranet
Search
Metadata
My Sites
WWW
Extranet

13. Objectives & Agenda Defining Governance Management Controls and Scopes
Information Architecture vs. Management
Four-Step Architecting Governance Process
Scenario-Based Logical & Physical Architectures

14. Management Controls and Scopes
Fundamentals
Management Controls and Scopes

15. Management controls and scopes
SharePoint Service Isolation
SSL
FARM
Service Application Configuration and Data
Blocked File Types
Zone
WEB APPLICATION
Service Application
Data Storage SLAs
CONTENT DATABASE
Quotas
Ownership (Full Control)
SITE COLLECTION
Features
Top-Level Site
Security Permissions
List or Library
[Folder]
Subsite
Subsite
Item or Document

16. Management controls and scopes
It’s about containers (scopes)
Security (permissions)? We understand that…
Scope unique permissions = site, list/library, folder
Administrative overhead of multiple containers
But…
Governance and management
is more than just security!

17. Information Architecture vs. Management
Fundamentals
Information Architecture vs. Management

18. Site Map ≠ Architecture
SharePoint HR
Finance
Benefits
Vacation & Sick Day Tracking
Financial Performance
Expense Reports

19. Information Architecture vs. Management
Organize and describe content
Metadata
Structure
Relationships
Inputs
Knowledge Management team
Librarians
Content owners
Subject matter experts (SMEs)
Outcomes
Site map (navigation)
Taxonomy
Search
Targeting (audiences)

20. Information Architecture
SharePoint HR
Finance
Benefits
Vacation & Sick Day Tracking
Financial Performance
Expense Reports

21. Information Architecture vs. Management
Organize and describe content
Metadata
Structure
Relationships
Inputs
Knowledge Management team
Librarians
Content owners
Subject matter experts (SMEs)
Outcomes
Site map (navigation)
Taxonomy
Search
Targeting (audiences)
Manage the content & service
Access levels (permissions)
Lifecycle
Storage
Inputs
Information management policies
IT usage policies
Regulatory environment
SLAs
Outcomes
Access levels
Records management
Compliance
Performance

22. Research & Development
Service Architecture
PRODUCTION FARM
Site Collection HR
Engineering
Finance /
Expense Reports
Search
Metadata
My Sites
Remote
LoB App
Research & Development
CRM
Test Farm
Site Collection HR
Engineering
Finance /
Expense Reports
WWW
Extranet
WWW
Extranet
Search
Metadata
My Sites

23. SharePoint PRODUCTION FARM Remote LoB App WWW Extranet http://intranetHR
Finance
Expense Reports
Vacation & Sick Day Tracking
Financial Performance
Benefits
PRODUCTION FARM
Site Collection HR
Engineering
Finance /
Expense Reports
Remote
LoB App
Research & Development
CRM
WWW
Extranet
Search
Metadata
My Sites
WWW
Extranet

24. Architecting Governance
Four-Step Process to
Architecting Governance

25. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

26. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

27. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

28. Management controls and scopes
FARM
Zone
WEB APPLICATION
Service Application
CONTENT DATABASE
User & Group Management
Ownership (Full Control)
SITE COLLECTION
Top-Level Site
List or Library
[Folder]
Subsite
Subsite
Item or Document

29. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

30. Sites, lists, libraries, and folders
FARM
Zone
WEB APPLICATION
Service Application
CONTENT DATABASE
SITE COLLECTION
Top-Level Site
Security Permissions
Features
List or Library
[Folder]
Subsite
Subsite
Item or Document

31. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

32. Architecting Governance
More Details about
Architecting Governance

33. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

34. Requirements and Classification
Business
Business purpose of the solution
Technical
Project
Budget, deadlines, etc.
Information architecture
How content is described, organized and discovered
Information management
How content is created, secured, maintained, and disposed of
Service management
IT assurance: performance, availability, recovery
SLAs and SLOs

35. Requirements to Architecture
Solicited
Derived

36. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

37. Requirements  multiple web apps
Blocked file types
DNS namespace (URL)
Web site service isolation
Web server: server isolation
Application pool: process isolation
Classic Mode or Claims Based Authentication
Self-service site creation, automatic deletion of unused sites

38. More requirements  multiple web apps
SharePoint Designer controls
Impact of upgrade
Functional web applications ( not upgraded immediately
Business applications in this SharePoint web app have specific functionality
They meet business requirements without upgrade
Features that are installed to support these applications take time to upgrade
Collaborative web sites, intranet, and services upgraded immediately
Take advantage of new features of SharePoint vNext
Service application connections and configuration
Multiple scopes

39. Requirements  multiple zones
Anonymous access
Anonymous policy
SSL
Authentication providers
User policy

40. Guidance: Web apps and zones
INTRANET: published intranet content
COLLABORATION: business unit, department, team, project
EXTRANET: collaboration with customers, vendors & partners
Zone:
SOCIAL: enterprise social networking and personal content
PUBLIC WEB SITE
APPS: functional business applications (expense report)
SIGNIFICANT LINE OF BUSINESS APPLICATION
e.g.

41. Requirements  Multi-farm architectures
Code isolation
Dev / Test / Staging / Production
Access
Public-facing web site
Extranet in Cloud: Partners & Customers
Geoperformance
Collaboration farm(s) with team sites
Feature and process isolation
Enterprise SharePoint farm with intranet and enterprise services
Enterprise services: search, metadata, social (User Profiles, My Sites)
Premium farm(s) for custom applications
Consider the implications
SLAs
Chargebacks
Upgrade to vNext
We don’t have a test farm? No…
You don’t have a production farm!

42. Requirements  multiple site collections
Module 2: Creating a SharePoint 2010 Intranet
Course 10174A
Requirements  multiple site collections
Ownership
Primary & secondary site collection administrators (Central Admin)
The owner and secondary owner attributes of a site collection
Full control of site collection + receive site collection notifications
Administration
Site collection administrators as defined in the site collection
Full control of site collection
Quotas
Locks
SharePoint Designer restrictions
Features
Sandbox Solutions
Search settings
Audit settings
User & group management
Multiple scopes

43. Content lifecycle example
FARM HR
Benefits
Finance HR
Finance
Benefits Page
Benefits Page
Benefits

44. Requirements  multiple content databases
Module 2: Creating a SharePoint 2010 Intranet
Course 10174A
Requirements  multiple content databases
Storage Management
Location of database
Which SQL Server(s) host the database
Storage platform
Redundancy
Clustering
Mirroring
Storage platform features
Backup SLAs
How long it takes to back up data
Recovery SLAs
How long it takes to restore data
RTO and RPO
PowerShell delegation
Remote BLOB Storage (RBS) is enabled per content database with FILESTREAM provider

45. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

46. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

47. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

48. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

49. The Great Divide Management requirements  more “containers”
Web applications
Site collections
Content databases
Out-of-box features scoped to a single site collection
Navigation
Add a subsite, navigation links created automatically
Content management
Site columns and content types apply to a subsite
Administration
Audit reports pull audit information from an entire site collection

50. “Behind the scenes” FARM http://apps http://teams Site Collection HR
Engineering
Finance
Site Collection / HR
Engineering
Finance
Site Collection
Expense Reports

51. Presentation to the user
SharePoint HR
Finance
Benefits
Vacation & Sick Day Tracking
Financial Performance
Expense Reports

52. Overlay Information Architecture
Navigation
Manually-configured Quick Launch and top link bar (global navigation)
Custom link lists (advantage: security trimmed)
Custom or third-party navigation controls
SPXmlContentMapProvider

53. Navigation FARM http://apps http://teams Site Collection HR
Engineering
Finance
Site Collection / HR
Engineering
Finance
Site Collection
Expense Reports

54. Presentation to the user
SharePoint HR
Finance
Benefits
Vacation & Sick Day Tracking
Financial Performance
Expense Reports

55. Overlay Information Architecture
Navigation
Manually-configured Quick Launch and top link bar (global navigation)
Custom link lists (advantage: security trimmed)
Custom or third-party navigation controls
SPXmlContentMapProvider
Search-Based Navigation

56. Research & Development
Administration
PRODUCTION FARM
Site Collection HR
Engineering
Finance /
Expense Reports
Search
Metadata
My Sites
Remote
LoB App
Research & Development
CRM
Test Farm
Site Collection HR
Engineering
Finance /
Expense Reports
WWW
Extranet
WWW
Extranet
Search
Metadata
My Sites

57. Overlay Administration
Administration “single pane of glass” across
Site collections
Web applications
Farms
For…
Manage access, audit, manage groups
Deploy content
PowerShell
Third-party administration tools

58. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

59. IN SUM…

60. Architecting Governance
1. Define and classify your requirements
2. Design for management requirements
3. Refine for business requirements
4. Overlay information architecture and manageability

61. Requirements to Architecture
Solicited
Derived

62. SharePoint FARM Remote LoB App WWW Extranet http://intranet HR Finance
Expense Reports
Vacation & Sick Day Tracking
Financial Performance
Benefits
FARM
Site Collection HR
Engineering
Finance /
Expense Reports
Remote
LoB App
WWW
Extranet

63. People
Process
Technology
Policy
GOVERNANCE
SERVICE

64. GOVERNANCE
MANAGEMENT
SERVICE

65. Resources TechNet dan.holme@avepoint.com @danholme
Governance resource center
Governance features
Plan for Software Boundaries
@danholme
Articles & weekly newsletter
Questions & Answers
Please submit your evaluations!

66. Enrol in Microsoft Virtual Academy Today
Why Enroll, other than it being free?
The MVA helps improve your IT skill set and advance your career with a free, easy to access training portal that allows you to learn at your own pace, focusing on Microsoft technologies.
What Do I get for enrolment?
Free training to make you become the Cloud-Hero in my Organization
Help mastering your Training Path and get the recognition
Connect with other IT Pros and discuss The Cloud
Where do I Enrol?
Then tell us what you think.

67. (c) 2011 Microsoft. All rights reserved.
11/16/2018 8:40 AM
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
(c) 2011 Microsoft. All rights reserved.
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

68. (c) 2011 Microsoft. All rights reserved.
Resources
Sessions On-Demand & Community
Microsoft Certification & Training Resources
technet.microsoft.com/en-au
Resources for IT Professionals
Resources for Developers
(c) 2011 Microsoft. All rights reserved.