Third-Party Governance & Controls in M365: Microsoft Store, SharePoint, and Teams

1. Third Party Governance and Controls inside M365: Microsoft Store, SharePoint and TeamsSpeaker: Michelle Gilbert, Doug Wilson

2. Doug Wilson • Connect with me on LinkedIn: https://www.linkedin.com/in/douglas-wilson-2276b853/ • Connect with me on Twitter: https://twitter.com/ManageDoug

3. Microsoft Store • Required to manage applications native to windows 10 • Utilize GPO or Preferred device manager to configure Private Store • 10 minutes to set up and configure • Store Applications can be managed with Intune/MDM or SCCM • Automatically allow updating apps if you do not have time to manage them properly.

4. EDU Store • https://educationstore.microsoft.com/en-us/store

5. Business Store • https://businessstore.microsoft.com/en-us/store

6. Configure Private Store • Lock down what users can access • GPO: Computer Configuration > Administrative Templates >Windows Components > Store • Through Intune Device Restrictions

7. Show Microsoft Store

8. Michelle Gilbert MG Collaboration Solution Architect https://twitter.com/MichellesUtopia

9. Agenda • SharePoint Store • Microsoft AppSource • SharePoint Modern Web part Toolbox • Teams Default and External Apps • Microsoft AppSource

10. SharePoint Store

11. What is the SharePoint Store? • Internet based service that offers apps for Office, SharePoint, Exchange, Access and Project. • Located in SharePoint Apps and allows users ability to browse and buy third-party apps. • By default, SharePoint Online is configured to allow users to get or request apps.

12. What is the App terminology?

13. What tenants restrict the SharePoint Store? Government: GCC High and M • Office 365 Government plans are available to qualified government entities including US federal, state, local, tribal and territorial government entities. And entities who handle data subject to government regulations and requirements.

14. Where is it located?Site Contents -> Your Apps

15. SharePoint Store

16. Microsoft AppSource

17. Where can I learn about the Apps?Microsoft AppSource Visit: appsource.microsoft.com

18. AppSource filtered for SharePoint

19. What’s in the Store? 1202 apps for free and for purchase (as of Feb. 2019)

20. Configure Control for SharePoint Store • Sign into the SharePoint Admin center and go to Apps • Select Configure Store Settings • Create a new App Catalog Site Collection • Return to Configure Store Settings and select 3rd party apps options. • Govern App Requests • App Deployment

21. 1. Sign into the SharePoint Admin center and go to apps Note: apps is located on the left hand navigation in the admin center. Must have a Global or SharePoint admin role in Office 365

22. 2. Configure Store Settings Note: If nothing is created for the store you will need to create an App Catalog Site Collection.

23. 3. Create a new App Catalog Site Collection Note: If nothing is created for the store you will need to create an App Catalog Site Collection.

24. 4. Return to Configure Store Settings App Purchases: Select Yes if you want users to be able to get free, trial, or paid third-party apps from the SharePoint store. Select No if you do not want users to be able to get third-party apps.

25. 5. Govern App Requests Note: Located on the App Catalog Site Collection Set-up an Alert on the App Request list to manage the requests.

26. 6. App Deployment Note: Located on the App Catalog Site Collection You can distribute free, purchased or custom-made apps for SharePoint or for Office. These apps will be made available to all your end-users in Site Contents.

27. SharePoint Modern Webpart Toolbox

28. SharePoint Web parts • Classic and Modern • Ability to add custom functionality to your page.

29. Modern Web Parts

30. What are the Modern Web Parts? Bing Maps, Code Snippet, Countdown Timer, Divider, Document Library, Embed, Events, File Viewer, Group Calendar, Hero, Highlighted Content, Image, Image Gallery, Kindle Instant Preview, Link, List, Markdown, Microsoft Forms, News, Office 365 Connectors, Office 365 Video, Page Properties, People, Planner, PowerApps, Power BI Report, Quick chart, Quick links, Recent Docs, Site Activity, Sites, Spacer, Stream, Text, Twitter, Weather, Yammer, YouTube

31. Configure control in the web part toolbox Disable modern 3rd party web parts from displaying in the Tool Box using SharePoint Online PowerShell. Set-SPOTenant -DisabledWebPartIds (guid[])

32. What about custom Web Parts?In JSON

33. Microsoft Teams Default and External apps

34. Configure control for apps in Teams: Tenant-wide settings • Sign into Office 365 Admin center and go to Settings • Select Services & Add-Ins • Select Teams • Open Apps. Review default and external apps

35. 1. Sign into the O365 Admin center and go to settings Note: Settings is located on the left hand navigation in the admin center. Must have a Global admin role in Office 365

36. 2. Select Services & add-ons Note: Settings is located on the left hand navigation in the admin center. In Services & add-ins scroll until you see Teams. Must have a Global admin role in Office 365

37. 3. Select Teams Note: This is the location to modify Tenant-wide settings. Must have a Global admin role in Office 365

38. 4. Open Apps. Review default and external apps Note: This is the location to view first party and external apps. Default Apps: You can choose which apps are available to your users. Allow external apps: Turned on, users can add external apps that are available to your organization. Allow sideloading: You can control which external apps are available. Enable new external apps by default: When this setting is turned on, users can activate new apps as soon as they're added to the Teams app catalog.

39. Default Apps

40. 213 External Apps (as of Feb, 2019)

41. Microsoft AppSource

42. AppSource filtered for Teams

43. Governance for 3rd party controls inside M365

44. Build your third party governance If you have a governance board for Microsoft 365 than you are steps ahead in adding on your third party strategy. (See Step 4) If not, let's break it down on how to get there. • Step 1. Build a governance board consisting of cross-functional M365 stakeholders including: product owners and administrators; security, legal, compliance, networking, marketing, communications, helpdesk partners and more. The purpose of this group is to broaden the knowledge of your Microsoft investment and develop your roll-out and on-going management strategy. • Step 2. Create a process for knowledge management and a system of communication for maintaining and supporting technology changes. This step includes planning your governance meetings and agenda. • Step 3. Develop focus areas: Service Management; Tenant Management, and ROI and Adoption. These focus areas are an extension of your governance board to dive deeper into specific customer responsibility areas. Service Management focuses on monitoring and communicating change, developing product training and internal support model. Tenant Management centers on administrative control, security, compliance, identity and data protection. ROI and Adoption evaluates usage analytics, automation and reduction of competing, less secure products and decommission of on-premises storage and systems. • Step 4. Within Tenant Management: Build a task force team to focus on third party management governance. This team would be responsible for developing the strategy, policies, approvals, communication plan and monitoring process for change of all external applications. The task force team will be the agreed upon authority to evaluate and align third-party applications to business objectives or goals.

45. Resources

46. Third Party Governance