►
Description
In this 26-minute developer focused demo, Paolo Pialorsi steps through 3 tenant provisioning scenarios leveraging templates in the PnP Provisioning engine along with the corresponding PowerShell scripts to provision Teams and SPO sites with related content. Provisioning scenarios include: 1) Provision Team site using credentials of 1 person, 2) Provision Team site using an app only context and certificate, and 3) Provision a site collection (SPO site and library) and a connected Team site with SharePoint doc library tab, using a sequence of templates. In each scenario, General and Private Teams channels are provisioned. Optionally, a welcome message, tabs, landing page and/or document libraries are provisioned at the same time.
This PnP Community demo is taken from the bi-weekly Microsoft 365 – General M365 development Special Interest Group (SIG) community call recorded on May 14, 2020.
Demo Presenter: Paolo Pialorsi (Piasys) | @PaoloPia
Supporting materials:
• Community Demo – Introduction to Initialize-PnPPowerShellAuthentication cmdlet | https://www.youtube.com/watch?v=QWY7AJ2ZQYI
All SharePoint PnP Developer Community demos: https://www.youtube.com/playlist?list=PLR9nK3mnD-OWSbg0o9a7mx_E7s2u7h_o2
Learn more about the SharePoint developer community at: http://aka.ms/m365pnp.
A
B
B
We
provide
the
capability
to
provision
sequences
of
site
collections,
as
I
was
telling
you
and,
for
example,
in
a
sequence,
you
can
create
a
hierarchy
of
size
and
set
collections
with
different
set
collection
types.
You
can
create
communication
size,
you
can
create
team
sites
with
no
groups
as
a
sub
webs
of
a
site
collection
that
you
are
creating.
You
can
provision
team
size
with
or
without
a
backing
team
in
micro
teams,
and
as
such,
you
can
easily
create
in
one
shot,
a
site,
collection
and
Mike's.
B
A
team
backing
that
side
collection
as
well
as
you
can
eventually
create
a
set
collection
with
a
root
side
of
type
team
and
site,
no
group,
so
a
modern
tin
side,
but
without
the
backing
Maxo
to
65
group.
Moreover,
aside
from
the
sequence,
we
have
some
other
sections,
like
the
team
section
which
we
will
begin
to
in
this
demo.
B
So
let
me
switch
to
visual
studio
code
and
let
me
show
you
some
sample
templates
that
I
created
and
the
corresponding
PowerShell
script
that
you
can
use
to
do
the
actual
provisioning
of
those
tenant
level
templates.
Let's
start
with
the
very
first
demo,
we
will
see
three
different
solutions.
This
one
is
a
provisioning
talent
level
template
through
which
I
do
the
provisioning
of
a
team
in
micro
teams,
as
you
can
see,
I
have
the
provisioning
route
element
and
I
have
a
couple
of
input
arguments
just
to
define
the
title
and
the
alias
of
my
team.
B
When
I
will
create
it,
moreover,
in
the
teams
section
of
my
template,
I
define
one
team,
so
you
can
see
I
have
a
bunch
of
properties
to
declare
what
is
the
display
name,
the
description,
what
will
be
the
visibility
of
my
team,
whether
it
will
be
a
public
or
a
private
team?
If
I
want
to
archive
an
already
existing
team?
I
can
use
the
archived
equal.
B
True
attributes
to
the
team
and
I
can
define
the
nickname
of
the
team
that
will
be
created
and
actually
here,
I'm
using
the
input
parameter
for
the
alias
that
I
get
when
I
execute
my
provisioning,
then
inside
the
team
element,
I
can
configure
all
of
the
settings
that
usually
we
can
configure
using
the
UI
of
micro
teams.
But
right
now
we
want
to
do
an
automated
provisioning
of
a
team.
B
Moreover,
you
can
have
a
security
section
which
is
commented
out
in
this
sample,
because,
right
now
this
example,
this
template
will
be
provisioned
using
an
interactive
user,
so
a
delegated
access
token
and
as
such
I
will
automatically
use
the
current
user
as
the
default
owner
of
the
provision.
Team
I
can
provision
channels
and,
as
you
can
see
here,
for
every
single
channel
I
can
configure
the
tabs
the
team
tabs
that
I
want
in
the
channel
interesting
part
of
the
story.
B
You
can
create
new
tabs,
but
you
can
also
remove
eventually
out-of-the-box
tab,
so
just
to
make
an
example.
Sorry
about
that,
but
most
of
the
people
don't
like
the
wiki
tab,
which
is
always
there
by
default
in
every
single
channel.
So
you
can
easily
say:
okay
in
my
general
channel,
get
the
wiki
tab
and
just
remove
it.
So
we
create
the
team
based
on
the
out-of-the-box
template
but
instantly
we
remove
the
wiki
and,
for
example,
we
add
another
tab.
That
I
like
more,
for
example,
which
is
the
the
OneNote
themes
tab.
B
So,
for
example,
this
one
is
marked
with
private
equal,
true
and
as
such,
it
will
be
created
as
a
private
channel,
but
I
can
still
configure
custom
tabs
in
that
channel
and
here
I'm
configuring
a
web
tab
which
will
go
to
bing.com
just
for
the
sake
of
making
an
example
and
again
I
remove
the
wiki
one,
nothing
against
the
wiki,
but
simply
don't
like
it.
So,
but
don't
get
me
wrong.
Okay,
so
that's
my
first
sample:
let's
try
to
apply
this
one
onto
a
target
tenant.
B
So
how
can
we
do
that
when
it
is
a
matter
of
applying
a
tenant
template
instead
of
a
site
collection
template?
Well,
we
always
need
to
connect
using
the
connect
TMP
online
and
the
target
URL
of
the
sharepoint
online
environment.
So,
even
if
right
now
it
my
template,
I'm
provisioning
just
teams
related
stuff
from
a
PMP
powershell
perspective.
Nowadays
we
still
connect
to
the
target
sharepoint
online
environment.
B
If
I
execute
the
apply,
PMP
tenant
template,
as
you
see,
which
is
the
common
let
I
was
talking
about
before
the
apply
PMP
tenant
template
will
apply
a
tenant
level.
Template
to
my
target
environment
I
provide
the
path
of
my
file,
which
is
the
one
we
just
saw,
and
a
couple
of
parameters
for
the
team
title
and
the
team
alias.
So
let's
do
that
and
before
executing
this
one,
because
I
know
that
nobody
trusts
me.
B
Let
me
go
to
my
teams
that
makes
odo
come
side
in
the
tenant
that
I
am
targeting
and,
as
you
can
see
here,
I
have
overall
six
teams,
but
I
don't
have
any
team
McCall
the
PMP
team,
the
most
Sigma
0
1,
a
because
I
am
a
developer
and
I
need
to
provide
a
complex
name
to
objects
because
I
cannot
make
it
simple.
You
know.
So
let
me
execute
these
common
lat
and
let
me
switch
back
to
my
teams
and
you
will
see
pretty
soon
that
the
new
provision
team
will
pop
up
here.
B
It
is
with
the
general
channel
right
now
and
pretty
soon
with
private
channel
as
well.
So
so
far,
it's
quite
interesting
because
you
can,
on
behalf
of
a
specific
user
provision,
a
team
using
the
PMP
provisioning
engine.
Let
me
go
back
and
do
some
monitoring
of
what
is
happening.
It
is
still
working
on
it.
B
It
takes
a
while
because
we
have
some
delays
in
the
process
to
avoid
getting
throttling
from
one
perspective
and
from
another
point
of
view,
we
also
need
to
wait
for
some
of
the
resources
to
be
fully
ready
before
being
able
to
use
them.
So
now
the
provisioning
is
completed.
I
can
come
here
and,
as
you
can
see,
I
have
the
general
channel.
I
have
the
private
channel
in
the
general
channel
I
don't
have
any
more.
The
wiki,
but
I
have
a
OneNote
which
has
to
be
configured.
B
We
are
working
on
making
it
possible
to
provide
a
predefined
configuration
for
the
OneNote,
but
it
is
not
yet
there
and
have
the
private
channel
what
I
have
the
tab,
the
web
tab
with
being
so,
it
was
quite
easy
to
do
this
kind
of
provisioning.
Probably
is
that
often
we
want
to
do
that,
not
on
behalf
of
a
specific
user,
but
we
want
to
do
that,
for
example,
with
an
opponent
Lea
solution
with
a
Polly
token
running,
for
example,
in
initial
function.
B
So
another
option
that
we
have
in
PMP
is
to
use
this
way
of
working.
So
we
can
use
the
quite
new
initialize,
BMP
partial
authentication,
comment
letter
that
Arwen
showed
you
a
couple
of
weeks
ago.
I
think
I
can
create
on
the
fly,
an
application
or
better
register
on
the
fly,
an
application
in
a
direct
directory
which
I
can
use
all
life
long
once
it
is
registered
and
by
registering
an
application
and
providing
a
name
from
application.
B
Some
settings
for
an
x.509
certificate
that
will
be
used
to
have
the
actual
upon
the
authentication
in
Azure,
Active,
Directory
and
against
them
sharepoint
online.
I
can
then
connect
to
my
target
environment,
providing
still
the
URL
of
sharepoint
online,
so
as
like
as
before,
but
instead
of
using
the
credential
of
a
specific
user,
I
will
provide
the
client
ID
and
the
thumbprint
of
a
certificate
registered
for
a
poly
authentication
for
the
in
this
target.
B
Tenant
and
by
doing
that-
and
let
me
actually
execute
this
code
because
it
will
take
a
while,
so
that
we
can
save
some
time.
Let
me
configure
the
initial
variables
and
of
course
this
is
a
trivial
password.
Just
for
the
sake
of
showing
you
something
really
simple:
I
have
my
common
lead,
which
will
create
a
nature
active
directory.
A
new
application
I
will
be
prompt
with
the
request
for
a
set
of
credentials
to
authenticate
against
is
your
active
directory.
B
Let
me
out
indicate-
and
this
step
of
course
has
to
be
done
once
in
order
to
register
the
application.
You'll
need
to
do
it
every
single
time,
and
now
we
are
waiting
60
seconds
for
the
app
to
be
ready,
because
in
the
meantime,
on
the
edge,
your
Active
Directory
side
of
the
story,
if
I
go
here
under
out
registration,
if
I'm
fast
enough,
I
can
search
for
the
application
that
we
just
registered
here
it
is.
We
can
already
see
that
we
have
a
client
ID.
B
We
can
see
that
we
have
some
predefined
permission
scopes
assigned
to
the
app,
but
we
are
still
waiting
for
the
grind
from
an
admin
and
that's
what
we
are
waiting
for
in
Visual
Studio
code
right
here
and
after
60
seconds,
we
will
be
prompt
to
grant
those
permissions
to
the
app
once
we
are
done
with
the
granting
of
the
permissions
we
can
connect
and
we
can
apply
and
still
apply,
p.m.
eternal
template
using
again
the
dot
XML
file
and
providing,
and
here
it
is
the
prompt
for
the
grant.
B
So
let
me
select
this
user
and
let
me
grant
those
permissions
to
the
application
and
once
I've
done
that
I
can
easily
get
the
information
about
the
client
ID,
as
you
can
see,
and
the
tampering
of
the
certificates
which
are
those
we
just
saw
in
Azure
Active
Directory.
They
can
connect
to
the
target
environment
using
those
credentials
right
now
we
can
apply
the
template,
but
before
applying
the
template,
I
want
to
show
you
what's
inside
the
template.
This
is
quite
similar
to
previous
one,
but
now
we're
running
in
an
up
only
context.
B
So,
first
of
all,
in
the
team
section,
we
need
to
have
the
security
section
because
we
need
to
have
at
least
one
owner,
so
we
have
in
an
up
only
model.
We
have
to
provide
at
least
one
owner
in
the
security
element
of
the
template.
Moreover,
we
can't
use,
we
can't
use
the
API
the
graph
API,
to
create
messages
in
the
target
channels,
because
that
one
is
not
supported
in
up
only
so
we
can't
provide
any
welcome
message
or
any
other
kind
of
stuff
in
the
structure
of
the
provisional
template.
B
Aside
from
that,
we
can
do
whatever
we
like,
and
we
need
to
keep
into
account
that
whenever
we
create
a
private
channel
like
here,
for
example,
by
default,
the
PMP
provisioning
engine
will
assign
the
owners
of
the
team
as
members
as
default.
Members
of
the
private
channel,
because
again
in
order
to
create
a
private
channel
in
a
Nepali
context,
we
need
to
explicitly
select
a
at
least
one
member
for
that
private
channel
and
we
decided
to
use
the
owners
of
the
team.
Hope
you
like.
B
And
the
provisioning
will
start
if
I
go
back
to
my
team
here,
we'll
see
and
we
see
that
the
new
one
popped
up.
We
can
also
see
that
it's
quite
nice
that
we
get
a
notification
from
a
boat
that
the
team
provision
Inga
added
our
self,
our
account
to
the
team,
which
is
quite
nice,
because
we
know
that
we
have
been
added
to
a
team
by
an
app,
only
running
solution,
which
is
I,
think
quite
smart.
B
So
it
will
take
a
while
again
and
we
will
get
our
provisional
team
with
all
of
the
settings
that
I
showed
you
in
the
XML
provisioning
template.
Okay,
here
we
are
so
let
me
show
you:
we
have
the
general
channel
again
with
the
OneNote
and
we
have
the
private
channel
again
with
the
Bing
web
tab.
So
hopefully
so
far,
so
good
I
don't
know
if
there
are
any
questions
in
the
chat
because
I'm
looking
at
my
screen
right
now,
not
on
at
the
chat
one,
but
in
case
of
any
urgent
question
visa.
A
B
But
now
there
really
interesting
part
not
saying
that
the
previous
one
was
not
interesting,
but
even
more
interesting.
Part
of
the
story
is
that
using
the
latest
capabilities
that
we
introduced
in
the
PMP
provisioning
engine,
you
can
also
provision
site
collections
in
SharePoint,
Online
and
teams
all
together
with
a
unique
provisioning
template,
and
you
can
eventually
provision
a
site
collection
and
the
team
which
will
be
connected
one
to
the
other
and
leveraging
the
TMP
provisioning
engine.
You
can
define
the
artifacts
both
in
SharePoint
Online
and
in
the
team
within
a
unique
provisioning
template.
B
B
My
suggestion
is,
if
you're
working
in
a
demo
environment
like
I'm,
doing
right
now
to
eventually
create
a
new
PowerShell
session
or
to
clean
the
already
created
PowerShell
session
to
avoid
having
conflicts
between
the
cache
of
the
connecting
MP
online
common
light
in
memory.
In
in
a
common
scenario,
usually
you
don't
have
both
of
the
authentication
models
within
the
same
context,
and
we
did
the
same
session.
B
You
can
be
up
only
you
can
be
delegated
so,
but
right
now,
I'm
playing
multiple
demos
within
the
same
context,
so
I
need
to
create
a
new
instance
of
PowerShell.
Now
let
me
show
you
the
last
template
in
this
template.
I
have
still
some
input
parameters,
the
team
title
and
alias
and
I
also
have
a
company
name
which
I
will
use
later
on
and
I
have
a
set
of
provisioning
templates,
a
sequence
and
the
team
section.
B
In
the
sequence
we
create
a
site
collection
of
type
modern
inside,
so
it
will
be
a
modern
inside
with
the
backing
office
treats
like
group
or
Mike's
office
file
group
and
inside
the
settings
of
this
set
collection.
I
declare
that
I
want
to
Tim
if
I,
that
site
collection,
so
I
want
to
create
the
team
and
not
only
the
backing.
Mike
satisfied
group
Rover,
because
I'm
Timmy
fiying
at
the
site,
collection
I,
will
also
to
hide
the
themify
message.
So
I
don't
want
to
see
in
the
lower
left
corner
of
my
website.
B
They
said
why
not
creating
a
theme
for
the
site,
because
I
already
am
already
creating
a
team
for
that
site.
Interesting
part
of
this
XML
section
is
the
provisioning
ID.
With
this
attribute,
I
can
give
a
unique
ID
to
my
set
collection
within
the
provisioning
template,
and
this
will
become
really
helpful
in
the
matter
of
few
seconds.
From
now
when
I
create
a
set
collection,
I
want
to
apply
a
provisioning
template
to
that
cycle.
B
So
let
me
close
this
one
and
let's
open
the
team
section
here,
we
want
to
provision
some
settings
on
a
team
which
is
actually
an
already
existing
team,
the
one
that
we
created
when
we
Timmy
file
the
previous
set
collection-
and
just
let
you
know
the
provisioning
engine
will
first
of
all
provision
the
set
collection
and
secondly,
go
through
all
of
the
team
settings.
So
you
can
create
the
sequences
first,
because
that
will
happen
in
the
provisioning
engine
and
then
you
can
apply
the
template.
Sorry,
you
can
apply
the
team
related
section
here.
B
I
say
this
team
targets
a
group
which
is
already
existing,
and
the
group
is
the
one
with
the
sequence
side
group
ID
of
team
side,
0
1,
which
was
the
site
ID
that
we
defined
in
the
sequence.
So
this
information,
provisioning,
ID,
so
I
am
basically
saying
that
this
team
template
will
apply
to
the
team
that
we
created
when
we
defied
the
previous
set
collection.
B
So
whatever
I
will
define
in
this
team,
provisioning
definition
will
be
applied
to
that
team
and
again
here,
I'm
creating
few
tabs
in
the
general
channel,
including
just
for
the
sake
of
completeness
a
SharePoint
document
library
team
table
which
will
target
my
custom
document
library
that
I
just
created
and
here
again
I-
can
use
the
sequence
site,
URL
ID
of
my
site,
so
that
I
can
say,
give
me
the
project's
library
in
the
site,
URL
that
we
just
provisioned
quite
powerful
I.
Think
so
let
me
open
the
last
powershell
script.
B
Let
me
connect
to
my
target
environment.
This
one
will
be
executed
with
a
delegated
access
token,
because
I'm
also
creating
messages
and
other
stuff
which
requires
a
delegated
access.
Token
and
now
I
will
apply
this
tenant
level
template
if
I
go
back
here,
we'll
see
our
new
team
popping
up
it
will
take
longer
than
before,
because,
first
of
all,
we
need
to
create
a
third
collection.
B
We
need
to
put
in
fight
at
one,
so
it
will
take
a
few
more
seconds
compared
with
the
previous
demos,
but
at
the
very
end
we
will
have
a
new
team
here
we
will
have
a
set
collection
with
a
custom
library
define
in
the
here.
It
is
define
in
its
information
architecture
and
we
will
have
the
team
fully
connected
to
the
set
collection
that
we
provisioned.
So
if
I
already
go
here,
I
can
see
that
maybe
the
provisioning
is
still
running.
Yes,
actually,
the
provisioning
still
running
for
the
site
collection
so
better
to
wait.
B
The
set
collection
is
still
under
provisioning,
I'm,
creating
the
list,
instances,
the
content,
types
and
all
the
other
stuff,
and
this
will
be
by
the
way
the
name
of
the
set
collection.
So
I
can
try
to
be
smart
and
open
the
set
collection
as
soon
as
it
will
be
ready
so
that
we
can
save
some
time.
Okay.
B
Now
we
are
provision
in
the
teams,
part
of
the
story,
so
in
the
meantime,
I
can
go
here
and
say:
PS
is
that
size
and
I
can
go
to
this
side,
and
we
can
see
that
here
we
have
the
PMP
projects
document
library
in
which
we
have
our
custom
project
document
and
our
custom
stuff.
If
I
go
back
a
matter
of
seconds,
the
provisioning
will
be
completed.
Oops.
Of
course,
there
is
the
demo
effect.
B
Wonderful,
ok,
let's
see
what
happened,
but
we
have
the
general
channel
and
we
have
the
PMP
project
stops
where
we
are
targeting
the
document
library
we
have
the
private
channel
and
it
failed
to
create
the
web
tab
targeting
bingum
I
will
dig
into
it.
Maybe
it's
bug
I
mean
that
if
that
will
be
the
case,
we
will
fix
it.
But,
aside
from
the
small
issue
we
had
right
now,
I
think
it
is
quite
powerful
that
you
can
provision
a
site
collection
together
with
a
team.
B
They
will
be
connected
and
you
can
do
you
can
define
the
information
architecture
of
the
site
collection,
as
well
as
the
structure
of
the
team
within
a
unique
provisioning
template
I.
Think,
that's
all
for
me.
It
was
a
20
minute
demo.
Almost
so
I
try
to
do
my
best
to
squeeze
it
in
the
time
ahead.
If
there
are
any
questions,
feel
free
to
raise
your
hand
or.