Deep dive session presented at TUGA IT 2016, in Lisbon, on May 19th 2016, about Office 365 Groups. It explains the underlying architecture as well as management and integration options.

1. TUGA IT 2016
LISBON, PORTUGAL

2. THANK YOU TO OUR
SPONSORS

3. THANK YOU TO OUR
TEAM
ANDRÉ BATISTA ANDRÉ MELANCIA ANDRÉ VALA ANTÓNIO LOURENÇO BRUNO LOPES CLÁUDIO SILVA
NIKO NEUGEBAUER
RUI REISRICARDO CABRAL
NUNO CANCELO PAULO MATOS PEDRO SIMÕES
SANDRA MORGADO SANDRO PEREIRARUI BASTOS
NUNO ÁRIAS SILVA

4. TUGA IT
2016LISBON, PORTUGAL
Office 365 Groups Deep Dive
André Vala

5. ABOUT ME...
BLOG
LINKEDIN
TWITTER
EMAIL
MEMBER OF
MEMBER OF
WORKS FOR
JOB TITLE
Microsoft MVP
Office Servers and Services
SharePoint Solutions Architect
/in/andrevala
andre.vala@create.pt
http://blogit.create.pt/andrevala
@atomicvee
Office365 PT
SPUG PT
AWARDED

6. AGENDA
• Overview
• Architecture
• Administration
• Extensibility
• Advanced Topics
• Roadmap

7. OVERVIEW
OFFICE 365 GROUPS

8. MOTIVATION
• Collaboration is changing
• Different teams and users prefer different tools
• Collaboration over email
• Collaboration over a web portal
• Collaboration over mobile phones
• Collaboration over social networks
Office 365 Groups
Brings together people, information and apps across Office 365 to enable
better communication and collaboration.
OVERVIEW

9. BUILDING BLOCKS
OVERVIEW
Azure
Active Directory
Apps

10. KEY BENEFITS
OVERVIEW
Public by default
Self-service
Sharing to non-members
Context & history
Single definition
Simple to manage

11. OUTLOOK 2016
OVERVIEW
Groups in Outlook 2016
Participate in conversations,
schedule meetings, share files &
notes and even initiate a Skype
for Business voice and video call
for urgent real-time decisions.

12. MOBILE APPS
OVERVIEW
Outlook Groups app
Available on iOS, Android & Windows
Phone.
Continue conversations, view files,
@mention colleagues and even
discover other relevant groups.

13. POWER BI
OVERVIEW
Create a workspace to collaborate with
your team.
Leverage the Groups collaboration &
communication capabilities to create and
review insights.

14. OFFICE 365 PLANNER
OVERVIEW
Create new plans, organize & assign tasks,
share files, talk about what you’re working
on, and get updates on progress.
Integrated with Office 365 Groups, so all of the
conversations in Planner are available in Outlook
2016, Outlook on the web and the Outlook
Groups mobile app.

15. CONNECTORS
• Bring filtered information from external systems to a group inbox
• Over 50 connectors are available today
• MailChimp
• GitHub
• Trello
• Stack Overflow
• Zendesk
• Salesforce
• Twitter
• User Voice
• Configurable using Outlook online
• Once connected to a group, all members have access to it
OVERVIEW

16. DEMO
OFFICE 365 GROUPS OVERVIEW

17. ARCHITECTURE
OFFICE 365 GROUPS

18. ONE GROUP ACROSS OFFICE 365
ARCHITECTURE
Azure Active Directory (AAD) is the master
for group identity and membership across Office
365 (Exchange, SharePoint, etc.)
O365 services extend with their data
(e.g., conversations stored in Exchange mailbox &
documents stored in OneDrive for a group)
Services notify each other of changes to
a group (e.g., creation, deletion, updates)
Using sync from AAD to Exchange Online AD and
SharePoint Online AD they achieve reliability if they
miss notifications
SharePoint
Documents
OneNote
Additional workloads
Workload
scenarios
Exchange
Conversations
Calendar
Identity
Resource URLs
Owners
Members
AAD

19. GROUP CREATION FLOW
ARCHITECTURE
Create
Group
New group
Create
via AAD Graph
Azure Active Directory
Exchange Online SharePoint Online
EXO
Melissa creates a group in Outlook

20. GROUP CREATION FLOW
ARCHITECTURE
Create
Group
New group
Create
via AAD Graph
Azure Active Directory
Exchange Online SharePoint Online
EXO
EXO creates a local group
Exchange
Online AD
Local
create

21. GROUP CREATION FLOW
ARCHITECTURE
Create
Group
New group
Create
via AAD Graph
Azure Active Directory
Exchange Online SharePoint Online
EXO
EXO notifies SPO, which creates a local group
Exchange
Online AD
Local
create
SharePoint
Online AD
SPO
Notification
Local
create

22. GROUP MANAGEMENT FLOW
ARCHITECTURE
Add
Members
Azure Active Directory
Exchange
Online AD
Exchange Online SharePoint Online
EXO
SharePoint
Online AD
SPO
FwdSync FwdSync
Update Group
via AAD Graph
FwdSync broadcasts changes

23. ADMINISTRATION
OFFICE 365 GROUPS

24. MANAGEMENT UI
• Office 365 Admin Center
• Azure Active Directory control panel
• Office 365 Admin App
ADMINISTRATION

25. DEMO
MANAGEMENT UI

26. POWERSHELL
• Execute against Azure AD as primary
• Synchronous notification/update in Exchange/OneDrive
*-UnifiedGroup
Create, edit and delete groups
Manage single-value properties available on the Group object
*-UnifiedGroupLinks
Manage members, owners and subscriber list
ADMINISTRATION
Use PowerShell to manage Office 365 Groups
Convert an Exchange distribution group to an Office 365 Group

27. POWERSHELL: CONNECT
Allow remote sessions
Set-ExecutionPolicy Unrestricted
Get usercredentials
$userCredential = Get-Credential
Open Powershell session
$session = New-PSSession -ConfigurationName Microsoft.Exchange
-ConnectionUri https://outlook.office365.com/powershell-liveid/
-Credential $UserCredential -Authentication Basic -AllowRedirection
Import-PSSession $session
ADMINISTRATION

28. POWERSHELL: UNIFIED GROUP
Get list of groups
Get-UnifiedGroup
Get specific group
Get-UnifiedGroup –Identity SalesTeam
Create Group
New-UnifiedGroup –DisplayName “Sales Team” –Alias SalesTeam
Delete Group
Remove-UnifiedGroup SalesTeam
Set Group Options
Set-UnifiedGroup –Identity SalesTeam –RequireSenderAuthenticationEnabled $true
ADMINISTRATION

29. POWERSHELL: UNIFIED GROUP LINKS
Get Group Members
Get-UnifiedGroupLinks –Identity SalesTeam –LinkType Members
Add Member/Owner
Add-UnifiedGroupLinks –Identity SalesTeam –Links my@email.pt –LinkType Members
Add-UnifiedGroupLinks –Identity SalesTeam –Links my@email.pt –LinkType Owners
Remove Group Member
Remove-UnifiedGroupLinks SalesTeam –LinkType Members –Links my@email.pt
Remove Group Owner
Remove-UnifiedGroupLinks SalesTeam –LinkType Owners –Links my@email.pt
Remove-UnifiedGroupLinks SalesTeam –LinkType Members –Links my@email.pt
ADMINISTRATION

30. DEMO
MANAGE GROUPS WITH POWERSHELL

31. NAMING CONVENTIONS
• Set on display name during
create/change
• Blocked word list, pre-/post-
fix based on AAD attributes or
fixed text
• Same policy for DL and
Groups
• IT admins can override
ADMINISTRATION

32. DEMO
USING NAMING POLICIES

33. GROUP CREATION PERMISSIONS
• Control groups create UI in Outlook web & desktop for certain or all
users through policy
• Does not prevent users from using groups
• IT can still create groups (managed scenarios)
ADMINISTRATION
New-OwaMailboxPolicy –Name “<policy name>”
Set-OwaMailboxPolicy –Identity “<policy name>” –GroupCreationEnabled $false
Set-CASMailbox –Identity <user> -OWAMailboxPolicy “<policy name>”
Controlling Group Creation

34. DEMO
GROUP CREATION PERMISSIONS

35. DYNAMIC MEMBERSHIP
• Configured in Azure AD management portal
• Automatically includes/excludes members based on a rule
• Requires Azure AD Premium
ADMINISTRATION

36. EXTENSIBILITY
OFFICE 365 GROUPS

37. GROUPS API
EXTENSIBILITY
Microsoft Graph API
Hands-On Lab: Deep Dive into the Microsoft Graph for Office 365 Groups

38. Samples
https://graph.microsoft.com/v1.0/groups/{id}/
https://graph.microsoft.com/v1.0/groups/{id}/AddFavorite
GROUP MANAGEMENT
EXTENSIBILITY
ENTITY COLLECTION ACTIONS
Group Groups CRUD
SubscribeByMail, UnsubscribeMyMail, AddFavorite,
RemoveFavorite, ResetUnseenCount
User/Me Users JoinedGroups

39. CONVERSATIONS
EXTENSIBILITY
ENTITY COLLECTION ACTIONS
Conversation Conversations Create, Read, and Delete
Thread Threads Reply
Samples
https://graph.microsoft.com/v1.0/groups/{id}/conversations
https://graph.microsoft.com/v1.0/groups/{id}/threads/{id}/reply

40. EVENTS
EXTENSIBILITY
ENTITY COLLECTION ACTIONS
Calendar Read
Event Events CRUD
Samples
https://graph.microsoft.com/v1.0/groups/{id}/events
/calendarview?startdatetime=2016-02-01&enddatetime=2016-02-29

41. FILES
EXTENSIBILITY
ENTITY COLLECTION ACTIONS
Drive Enumerate Children, Get Shared Items, Get Recent Items
Drive Item CRUD, Enumerate Children, Search, Share
Samples
https://graph.microsoft.com/v1.0/groups/{id}/drive
https://graph.microsoft.com/v1.0/groups/{id}/drive/items/{item id}/

42. PLANS
EXTENSIBILITY
ENTITY COLLECTION ACTIONS
Plan CRUD, Enumerate
Task CRUD, Enumerate
Samples
https://graph.microsoft.com/beta/groups/{id}/plans
https://graph.microsoft.com/beta/groups/{id}/plans/{plan id}/tasks
https://graph.microsoft.com/beta/groups/{id}/plans/{plan id}/buckets

43. COMMON QUERIES
EXTENSIBILITY
SCENARIO URL
Get top 10 conversations sorted by
LastDeliveryTime
/group/{id}/conversations?$top=10&$orderby=LastDeliveryTime
Get the next 10 conversations /group/{id}/conversations?$top=10&$skip=10
Get selected properties on events
starting after a particular Date/Time
/group/{id}/events?$top=10&$select=Subject,Start,End&
$filter=Start ge 2016-02-22
Get selected properties on conversation
threads
/groups/{id}/conversations/{id}/threads/{id}/posts?$select=body
Get files where the name starts with “c” /group/{id}/drive/items?$filter=startswith(name,+'c')
Get selected properties on files /group/{id}/drive/items?$select=dateTimeCreated

44. ADVANCED TOPICS
OFFICE 365 GROUPS

45. HYBRID SUPPORT
• Requires Azure Active Directory Premium and Exchange 2013 CU11
• Office 365 Groups are created and managed in Azure AD
• Azure AD Connect enables synchronization of Groups with on-premises
Active Directory into DLs with:
• Target Address: service address of the Group object
• Recipient Type Details: specifies that the Group is not managed in the on-
premises directory
ADVANCED TOPICS
Integrating your on-premises identities with Azure Active Directory
Office 365 Groups write back

46. SET FILES QUOTA
• Set a storage quota on a Group’s SharePoint site
• Currently only through PowerShell
ADVANCED TOPICS
Get-SPOSite –Identity https://<tenant>.sharepoint.com/sites/<group> -detailed |fl
Set-SPOSite
–Identity https://<tenant>.sharepoint.com/sites/<group>
-StorageQuota 3000
-StorageQuotaWarningLevel 2000
Use PowerShell to manage Office 365 Groups

47. SEND AS GROUP
• Allows a group member to send email as the Group
• Currently only through PowerShell
ADVANCED TOPICS
$groupAlias = "TestSendAs"
$userAlias = "AlexD"
$groupsRecipientDetails = Get-Recipient
-RecipientDetails
-groupmailbox
-Identity $groupAlias
Add-RecipientPermission
-Identity $groupsRecipientDetails.Name
-Trustee $userAlias
-AccessRights SendAs
Use PowerShell to manage Office 365 Groups

48. DISABLE CONNECTORS
Disable connectors for the tenant
Disable connectors for a specific group
ADVANCED TOPICS
Set-UnifiedGroup –Identity mygroup@mytenant.com –ConnectorsEnabled:$false
Connect apps to your groups
Set-OrganizationConfig –Identity contoso.com –ConnectorsEnabled:$false

49. ROADMAP
OFFICE 365 GROUPS

50. ROADMAP
Administration
 File quota management
 Hybrid guidance & improvements
 Privacy type conversion
 Multi-domain support
 eDiscovery & legal hold
 Distribution List migration
 Mobile application management
 Creation policies in AAD
 Naming policies in AAD
 Hidden membership
 General usage reporting
 Data classification and extensible policies
 Usage guidelines
 Expire inactive groups
 Soft-delete and restore
Experiences
 Guest user access (external users)
 Continuously improving UI design
 Search and discovery
 Calendaring improvements
 Outlook for Mac support
Integrations
 Office 365 Connectors
 Office 365 Planner
 Office Graph and Delve
 Skype Meet now
 SharePoint Team Sites
 Yammer
 Microsoft Classroom
DONE
IN PREVIEW
office.com/roadmap
DONE
DONE
DONE
DONE
DONE
DONE

51. REFERENCES
Documentation
• Microsoft Graph API
• Hands On Labs: Deep Dive into the Microsoft Graph for Office 365 Groups
Tools
• Graph Explorer
• Groups Explorer

52. TUGA IT
2016LISBON, PORTUGAL
Thank You
André Vala
andre.vala@create.pt
@atomicvee

53. THANK YOU TO OUR
SPONSORS