Microsoft 365 Community SharePoint, 23 Jan 2020

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Reference implementation / tutorial on complex workplace provisioning automation

Description

This PnP community demo is taken from the bi-weekly SharePoint Developer Community - General Development Special Interest Group (SIG) call recorded on January 23, 2020.

In this 17-minute video, the presenters Franck Cornu - Office 365 developer and owner of Aequos in Montreal and Vincent Biret – Microsoft MVP, now Program Manager on the Microsoft Graph team, have created a tutorial/workshop with excellent documentation on how to create an end-to-end Office 365 groups provisioning solution. Get hands on experience with how technologies including: .NET Core, TypeScript development, Azure Functions, Azure Logic Apps, Microsoft Graph, PnP PowerShell, and PnP Provisioning, work together to deliver this automated provisioning solution.

Presenters:
• Vincent Biret (Microsoft) | @baywet
• Franck Cornu (aequos) | @FranckCornu

Supporting materials:
• Workspace Provisioning Tutorial - https://github.com/pnp/tutorial-workspace-provisioning
• SharePoint Provisioning essentials - https://laurakokkarinen.com/teams-and-sharepoint-provisioning-what-why-and-how/ | Laura Kokkarinen (Sulava) | @laurakokkarinen

All SharePoint PnP Developer Community demos: https://www.youtube.com/playlist?list=PLR9nK3mnD-OWSbg0o9a7mx_E7s2u7h_o2

Learn more about the SharePoint developer community at: http://aka.ms/sppnp.

A

Hi everybody, my name is Franco, know: I'm, a high-end shopping developer and founder of my company called echoes and days in Montreal.

A

Today we will show you a quick tutorial that we've made with and sent a couple of weeks ago about workspace provisioning, especially the office 365 groups, provisioning, the first Vincent. Why don't you introduce yourself sure.

B

So hi everyone, I'm Vincent. Some of you might know me from the days that used to be an MVP, no p.m. on the Microsoft graph team. So if you have any questions or feedback about Microsoft graph, you can contact me if you want interesting enough since I joined, Microsoft I don't have access to a chat on the PMP calls. So if you want run jokes about nigo and go chat, I cannot see them. That's all good.

B

So to provide a little bit of context about this new repository and this effort we put together with frank, frank and I, on our own separate sites over time. We are multiple provisioning engines but reflect for some customers. Their line of business requirements around hey I want provision things, but, according to my line of business scenarios, because I have a set of rules because I have a set of things that need to happen as and it needs to be consistent cell service.

B

And if you are things like that- and we got the opportunity almost two months ago now to animate to workshop together to coordinate the workshop together around. How do you go and start building your publishing engine doesn't matter your business requirements? Doesn't matter what you're doing you have a few fundamentals if you want, but you need to set in place so you can build a provisioning engine and be successful with it in your company and with that I will hand it back to Frank.

B

So you can show you what the repository contains and and how do you go about? You know using the content and experimenting on your site, Thank.

A

You Vincent, so yes, first thing you have dedicated with positive, so yeah URL here. So basically, this is a solution coming from a real good, real customer project, so it provides very basic building blocks to create a provisioning solution, especially the 365 groups, provisioning solution. So the initial context was my case to avoid, let's say the shopping sites crawling, because you know when you create specific groups through teams or through team size, so it creates shopping sites, and sometimes you want to apply a template to this shopping site.

A

Let's say to create some metadata columns and the classification and so on. So this is for the context. You can also read a blog post by Laura Karenin about the provisioning concerns, so give you more context about this, so I will jump to the architectures first, so the architecture is pretty simple. So, first of all, we have a workspace request this, which is a shopping list. Of course, this one can be updated or enhanced by a perhaps application or SPF fix.

A

Webparts could take the information to grab the information from the user, so the workspace name and so on. Then we are some artifacts, so the first one would be a way book supportive able to catch the event of the new item creation. Then we are logic, apt logic application, so this will be to run and provisioning routine through automation, Rob Renwick, with PowerShell, using PNP templates, XML templates and the communication between sharepoint and graph api will be done by another Active Directory application, and we have also a team's configuration.

A

So I will show you this right now, so I will show you the end user experience, so I've created a site here if what workspace request list. So basically the experiences just to create a new item, so we provided the solution very basic fields like what is the name of my workspace. My workspace.

A

P3 provides some metadata so based on taxonomy. This one will be used as default value for a specific color in your sights. So just an example who will be the owner and, for instance, the member you want to add, and a quick description.

B

And then, while you do that, we very interesting about visits again its basic concepts on how you do you go about setting provision engines? If you look at the category and the and the taxonomy we're using, then you can leverage that in your engine interns to do things like apply retention, labels and policies, attack some items for search and discovery or use that, for you could build a web part to you know to discover the different different workspaces that are already in place.

B

Yeah that unlock some set of scenarios that you can use and implement at your company and the goal of this content and training is to show you. How do you go about what what alternatives and options you have to implement those basic blocks for getting requests, automating things creating things on on different different places like SharePoint or office, 365 or teams, and so on and so forth. Yeah.

A

So I won't wait for the creation, but I will take previous aquarium one so behind the scenes. So a new of this, which is group big, created with sharp incisors- it's not very impressive here, but basically a template has been applied with some metadata. Some columns and also a teams has been created with specific channels and so on. So I will go to the technical part of this.

A

So first of all, you will have to create a new injury at the application. So if I go to my hazard tenant, so I created a new algiedi application with specific permission so make sure you use the same as your tenant as your office 365 tenant. So you will need growth, permission and sharpen permission, I configure with application permission and not delegated permission. So these are the minimum permission that you will need to set up to get it work.

A

So next it will be the creation of the azure active act like like the I shown in the application architecture. So this services are not effect, can be created in a in another as written and if you want this is the case here. So I've created a I go back to the architecture. The first thing I have created is the sharpen wave as a function, so I've created an unofficial provisioning group. Then I add another function.

A

We'll show you just the code.

A

Basically, here's your function, yep, so there's a faction ear is to implement the shot on playbook. You will see this is minified code to get the to create your own code. I provide you the code here into the repository, so you will have a SP trigger function, so this function is written in using typescript because I have a guide so I like to write type, it everywhere, back-end and front-end.

A

So the purpose of this function is just to get the new event the new item event and pass it to the logic app to the logic application. So why using a web book over a logic, a trigger, because you're doing when using logic app, you can use the the built-in trigger when a new item is created in a list. It's about the strategy and the cost involved in in this situation when using the default trigger.

A

This will be a polling strategy, meaning the system will which will make a call every 10 seconds to get a new item. This will be counted as an action with with with integer, so you'll be charged for that, instead of doing that, and because it's school we've made, we made a web book. So instead of pulling the system regularly, we will be notified by shot point. There is a new item in the list, so terms of. Of course, it's it's small optimized. So basically, this function gets rich with the new items.

A

So we just want the add operation here and send the only the idea of the new item in the list. Then this ID will be used by the logic application. So if I go back to my office as your group, the G cap here, so basically the logic up take an HTTP request with only the eat item. Id of the so point item, then we just get the information about this item set the provisioning status and the interested part is using a run book, create a new job running a polish l1 book.

A

So in this workbook, basically, you will have porous shell script. So go back to my code. Here you have a polish shell script called new workspace that, yes, one. Basically, it's a regular polish shell script using pin people Rochelle to to apply provisioning templates and configure the shopping sites. So basically what you have to to know the important parts here are the connection to the graphs so to communicate with the graphs, you will need an application idea and application secrets and to communicate with char point.

A

You will have to get a certificate so that this is the main difference before.

A

Deploying this solution you will have to create a self-signed certificates, then configure it to your own book so support, so you can just communicate with support using these certificates. This is all explained in the the tutorial, so the the communication will be with the security. So basically we create a new unified. Would here so it would be a new office 365 group, and an interesting thing here is because this script is run as the application identity.

A

The office which files group owners will be the application, usually application. So that's not what we want to hear. So what we need to do is to set the owner manually after the creation and this opera.

A

It's it's not instantaneous, so it can be weird for the users, they create the create a workspace and they are not. You know right now. They have to wait a couple of minutes because, under the behind the scenes, the permission are synchronized between all the the were closed behind the office, 365 groups. So that's why we set up the owner manually after the groups creation.

A

Then you just apply a new provisioning template to the site. Very simple ear and we configure text and min value, so we configure metadata for this site. So for this we use the property bag of the site, collection and I. Give you a tricky here, so you can just reuse the same format as a text text my mean value for the photo search, so you will be able to use this Catholic categorization for the search and especially the more than modern search web part.

A

So just follow this format represent that represent the text, enemy value and you will be, you will be able to use it within the modern search yeah and then, basically, you can do whatever you want in this script. You have the connection setup and, and the templates provided it's a very simple template. So you can just add it add a new serve here and if I go back to the project education, so we just pass this parameter to my to my script, wait for job to finish and then notify the user.

A

The group has been created and also our I forgot, the team sports. We also create some Microsoft tips under load and we configure some channels. Just to give you the an example how to create and configure my Christine inside Microsoft, so for that Vincent wrote a quick function and as a function as well written in C Shox, so you can have the code right here seems continue function and basically this will create new channel according to your video template within a specific group and the teams behind yet so, basically, you can adapt the logic application.

A

According to your requirements, you have the code, you have all the tutorial here so make sure you have all the prerequisites before running. This is tutorial and it's very detailed. So we we've made a live presentation of this doing a workshop. It works, so you can just go through all the steps and see all the screenshots associated with all the steps, and if your issues are just reservations in the insulates within this, this repository and of.

C

A

Reach me or Vincent: yes, as.

B

Frank mentioned even though we're talking about a lot of different technologies and it might be frightening. We were able to go through the whole tutorial with twenty people. Some of them were developers, some of them were citizen developers.

B

Let's call it this way, and everyone went through the tutorial at the end of the day in one day, even if you're not super interested about provisioning, it's a very good way to get exposure to dot that core typescript development either functions as your logic, apps, and a lot of our technologies like the Microsoft graph and TMT partial and TMP provisioning, it's kind of a mash up of a lot of technologies. You will see- and it's very interesting for you to ramp up on all those different technologies at once.

B

If you go through the steps, the steps are very detailed and if you see things that don't make sense or so on again issues poor question and if you feel like offering a pro request to fix the content and yeah everything is here on the repo for you to to follow.

C

Excellent excellent excellent. Thank you guys so really really awesome stuff. It is an awesome exercise to learn how to get started on things and it's a self-service guidance or you can actually even reuse that as your workshop, even potentially, but do on. Obviously, let's franken and Vincent know if there's an issues and that's a brilliant premium, training stuff.