Microsoft 365 Community SharePoint, 14 Nov 2019

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Account mapping feature in transformation when moving across environments

Description

This PnP community demo is taken from the bi-weekly SharePoint Developer Community - General Development Special Interest Group (SIG) call recorded on November 14, 2019.

In this 14-minute video, Paul Bullock, SharePoint Architect/Owner at CaPa Creative Ltd, demonstrates a new user mapping capability added to the PnP transformation tool for moving people and permissions from an on-premise site to modern SharePoint communication site, hub site or team site environments.

Presenter: Paul Bullock (CaPa Creative Ltd) | @pkbullock

SharePoint theme transformation resources
• Documentation: https://aka.ms/sppnp-pagetransformation
• PnP Power Shell: https://aka.ms/sppnp-powershell
• Source code: https://github.com/SharePoint/sp-dev-modernization/tree/dev/Tools
• Issue list: https://github.com/SharePoint/sp-dev-modernization/issues

All SharePoint PnP Developer Community demos: https://www.youtube.com/playlist?list=PLR9nK3mnD-OWSbg0o9a7mx_E7s2u7h_o2

Learn more about the SharePoint developer community at: http://aka.ms/sppnp.

A

So privileged to present to you the latest feature on the page transformation around the youth user mapping. They know a little bit about myself. My name is Prabhu luck, I've been working with SharePoint for 13 years, and six of those with SharePoint Online primary and public sector and focused development solutions and designs, I'm regular contributor for the PNP programmer. It's been a privilege to work with Bert on the PNP models agent. All together, we've dramatically jumped this feature set to cover almost everything on premise and online.

A

So yeah, it's a great great opportunity that I've started to contribute to the PMP uses jobs, which is a greater repository of information for citizens, developers and outside of PNP. Actually, a leader of my church say: PMP transformation is specific tool. It's designed convert for a classic SharePoint pages over to modern. This is delivered by PNP PowerShell. We've got a bunch of resources here on the screen here.

A

So if you want to have a look at those download, the module install those and then you can get modernizing if you need any help with any issues with modernizing, feel free to jump on the issues list on the repository and we can help you meet both me and Bert quite active on that. So a little bit about the user mapping capability, we've added, so the typical problem we had with on-premise transformations is that the user use your account form to that off the sharepoint online.

A

So we can't just essentially copy the text from one to the other. The account formats are different, so it doesn't work so we've had to build an extra capability to essentially try and resolve these account formats to their online equivalents. So this is specifically when you're using the item metadata item permissions or the alright if you've got contact controls within the actual page. So the there's two modes of operations within the new feature, there's default detection I've got a little Vizio later about how that works.

A

There's also specific mapping via CSV, so you can explicitly set which source user accounts to target which users this also covers. Ad groups we've added three new parameters to the convert to PNP cancer, page user mapping file parameter, so you can specify a CSV file with these mappings in skip user mapping. So it's on by default. So if you want to turn that off, you have any issues with it or you just don't want to use it then I'll just set that flag.

A

We've also got the LDAP connection string option which allows you to more specifically change the way the tool under default mode queries active directory.

A

So, for example, if you've got multi domain scenarios or you want to resolve users from a different domain or if you've got a particularly dense, active directory with lots and lots of user accounts, and you don't want to query the whole thing you just want to select a subset, so you can specify your use and it's actually something that would great to have a little bit community help with actually because my test screen, for example, doesn't include a lot of the advanced scenarios that can come with Active Directory SharePoint combinations with SharePoint Online as well.

A

So you trying it would be great if, if you guys could check this tool out, so this is available in the November release and and try and do some on print online migrations with those perhaps more complex, setups and perhaps provide some feedback on the issues list about any issues you may encounter. It's just great, so I love a Visio I've got a little visiting program around the default mode.

A

So the way it works is, you have to run the PNP transformation on a domain attached, controller computer and then what that does is he uses the connection you've got with that to query Active Directory to resolve the user, account name to a UPN with groups they're represented as typically s IDs within within SharePoint, so those will again query Active Directory to find their representative name and then what that does afterwards is then goes to SharePoint Online tries to resolve those principles that we've discovered from Active Directory and then determine make sure they are exists and that you can they can be replaced so on the do now switch over to a demo.

A

If you've got time to cover everything over here, you can see my screen.

A

This is yep cool, great stuff. So some of you may recognize this sample. It's the PMP, our classic business starter kit, actually from PMP repo. So what I've done is use, that's great for demos and I managed to get a work in 2013. So this is an example. 2013 implementation I've got a couple of piece of content here and specifically I covered cover. Our use of permissioning I've got this secret sauce recipe, so this is my source source site said. So there's a lot of source base references and in here this is a secret recipe.

A

I don't want all my contact or the midis to see this I only want a select group, so I provide provisioning. Sorry permissions against these, so I'm just going to navigate here. So you can see here. I've got a bunch of users, they're all they're, all it's all unique permission, so they're not inheriting in any way. So many I've got my my catch-up site the play on sauce with ketchup- and this is where my transmissions ago so I just want to show you quickly what I've done with my Active Directory setup.

A

Just give you a bit of context over these uses. So I've got a bunch of demo users and what I've done is I configured the UPN's to my my tenant, so I'm using a custom domain on my dev tenant and that will call dev test. So what it will do it will the tool. Query Active Directory, try and grab this address and then resolve it to the SharePoint Online equivalent. Now, if you don't have these pointing to the UPN setup, then what can happen is. Is the default mode?

A

Won't won't resolve the user and what you'll have to do is revert to the mapping.

A

So let me just quickly show you if you can see on my flicking around and there we go okay, it's um just my um bit slow right! So I've got some commands to run here. I'm just gonna clear that as my goal, caching hack that I use sometimes speed things up.

A

So first thing: what you need to do is connect to one connection for Shannon on prom it on premise and one connection for Shepherd online, so I'm just going to go in and just set those up, because when you're doing an on premise to online conversions, you need two connections so under default mode using the clients like specify the page that you want. But it's a publishing page set target connection to be your online connection, set connection to be your source connection. I've set the story of writing a log to the console.

A

I specified a page layout mapping just to make it look a little bit fun as the result. The conversions Oh.

A

Try that one again.

A

It's connect, otherwise that kills my delay.

B

And if nothing else, we can reschedule the demo or.

A

You can do it right, Yeah, right.

B

Oh there we go yeah.

A

Oh sorry, yep I do have your blip I. Don't know why? Right if you can see this, so what I've done and just recap as I, create an on-premise connection. I've created an online connection. I specified these connections in my conversion, so this will run through now and see here. So this will do this I've specified a static reference. That's why that's not that's not transferring so what I've done deliberately in the demo here is to not reference and share online. My SP install account so I've been a bit of a naughty user.

A

Yeah I mean and specified a system account that I shouldn't have used to create my content. As what has done it has gone to SharePoint on Prem connected to ad I grabbed the UPN, for example. So I've got caravan here. It's all mapping, so most of these have come through I'll. Just wait for that. To finish.

B

Just Paul I'm, sorry for jumping in here I need to jump to another meeting. I do apologize, but Bert.

C

B

Guide future: let's, let's get this recorded and Bert can actually host the rest of the call and definitely so Bert you're on Larry yep. Thank you. Both looks really awesome. So.

A

This is this, is this is transferred the content map to users so I'm, just gonna show you quickly here every time I'm just going to jump to page libraries.

B

A

I've got my secret sauce recipe.

A

Which, which all looks good so well, that's, come through call the content, that's great. So what I'm going to do is quickly show you the permissioning side, as you notice, there might be some bits missing from this. I'll show you the second one. What happens when you use the.

A

I'm, just gonna carry to the permissions just to show you that these have been resolved and they've been copied across to, as you can see, all the users from the on-prem version. So most those have come through by the ones I've deliberately broken for demo reasons. One thing to know about the Trevor one that didn't resolve as well as because he's left the organisation is disabled in AD, so he's not been resolved. So what want to do then, is perhaps remap the Trevor account and my SP install account to someone. That's got a bit.

A

You know actually active, and you just so grab my script here. So what I've done here is I specified a mapping file. This is a CSV mapping file that references, the source, the source account and the targets.

A

So I've got F IDs here this because then the chaplain on-premise their groups, which I remap, though so I'm just gonna reference that I'm gonna run this for you quick and show you what happens when that comes through transfers, as you can see here, while I'm, while it's loading the transformation T if transformation tool does do a lot of activities with your target pages in order to get all everything across headers webpart, mappings, even analyzes, the pages and so forth.

A

So if you haven't seen this before suppose, you can see here a lot more being resolved. You get these mapping and use has been replaced. Reference is coming back, so what I've done in my mapping is I ref changed Trevor to Taylor who's very currently taking over the common ownership of that page, and that's done so I'm, just gonna refresh this page here.

A

So that's come through now you have got this extra PNP transform accounts because the connection I use is using that account, rather than my own, so just two separate things a little bit so you've got Taylor coming through and so forth. To show you what the page looks like when it's rendered with all of its everything working so because it also includes things like header details and metadata as well, so my name's come through in the remapping that was originally SP.

A

Install is also what I wanted to quickly show you if I've got time and is the final part, was the LDAP override so I'm just gonna put clear clear. My mapping cache because we use a lot of caching within the transformation tool to speed things up so just want to make sure that's nice and clean and empty. So what I've done here in in Active Directory is I've specified to only resolve these four users.

A

So if you've got a very large active directory- and you don't want to run on things- and you can control that so I'm just gonna run that quickly.

A

And that's fine I haven't got SP installed in my in my list. I have a feeling like mr. step here, see.

A

It's gonna refresh this yes, I have what I hadn't done is got rid of the permission, so I'm, just gonna very quickly run off get rid of these again, so I just want to revert it back to its original stay and then just redo. This again.

A

A

Yeah call us almost half.

A

You all right awesome, so you should now have three users myself and two of the users that was specified on the permissions here, so these two here was specified in my CDT, so I can validate that. That's definitely come through now. Okay, everything from me.

C

Right thanks, Paul, really cool demo and think this is fictional tea, that our truly enables us to do on brand to shape underlying base transformations and really make them very useful. Since we have this account, mapping feature in place.