Download - Governance of content, permissions & apps in sharepoint 2013

Transcript
Page 1: Governance of content, permissions & apps in sharepoint 2013

GOVERNANCE OF CONTENT, PERMISSIONS & APPS IN SHAREPOINT 2013

Kashish SukhijaSharePoint Development Lead

Sony Network Entertainment

Page 2: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

2

Kashish Sukhija

• SharePoint Development Lead – Sony• Based in San Diego, California• Expertise: Enterprise Content Management, Collaboration Strategy,

Governance, Migrations, Development, Architecture.• Education

• Doctorate in Business Administration• Masters of Science Computer Science• Bachelors of Technology, Information Technology

• Blog - http://spdevstore.com/blogs/• Codeplex – spreports.codeplex.com/• Twitter - @spdevstore• LinkedIn – http://www.linkedin.com/profile/view?id=15715591/

Page 3: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

Agenda

3

SharePoint Apps Model

Setup SharePoint Environment for Apps

Apps Authorization & Authentication

Customize Permission Levels, Audit Settings & Portal Settings

Information Management

Information Architecture

Information Management policies

Apps Content

Governance

Page 4: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

4

SharePoint Apps Model

Setup SharePoint Environment for Apps

Apps Authorization & Authentication

Apps

Governance

Page 5: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

5

Types of Apps

SharePoint-Hosted App

Cloud-Hosted

SharePoint Hosted

Provider Hosted

Auto Hosted

Page 6: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

6

SharePoint-Hosted App

SharePoint-Hosted App

SharePoint Tenancy SharePoint Web Server

SharePoint AppSite Collection

Start Page

HTML5CSS

JavaScript

Page 7: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

Cloud-Hosted App

7

Cloud-Hosted App

Browser

Cloud App Web Server

Remote Web

Start Page

Start Page

HTML5CSS

JavaScript

Server-sideCode

SharePoint Web Server

SharePoint App

App Launcher

App Launcher

Database

Page 8: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

8

Extension AppApp PartFull Page App

User Interface

Page 9: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

9

http://app-bdf2016ea7dacb.contosoapps.com/sites/DemoSite/DemoApp

App ID

AppPrefix

App Domain

Host Web URL

App Name

Page 10: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

10

SharePoint Apps Model

Setup SharePoint Environment for Apps

Apps Authorization & Authentication

Apps

Governance

Page 11: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

11

Site Subscription Settings ServiceApp Management Service

SharePoint App Services

• App Instance Metadata

• App Security Principals

• App Permissions

• App Licensing

• Tenancy Management

• Site Collection Mappings

Page 12: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

12

Configuring SharePoint for Apps

Configuring DNS

Creating an app tenancy

Configuring app URLs

Configuring SSL

Configuring Redirect Web Application

Page 13: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

13

Apps Distribution

Custom Deployment

Office Store

Corporate App Catalog

Page 14: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

14

SharePoint Apps Model

Setup SharePoint Environment for Apps

Apps Authorization & Authentication

Apps

Governance

Page 15: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

15

AppPrincipal

User Principal

Page 16: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

16

Context Token

Page 17: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

17

External App Authentication

Types of Authentication

Using S2S High-Trust

Internal App Authentication

Using OAuth

Page 18: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

18

OAuth for cloud-hosted apps

Page 19: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

19

On-Premises Farm

S2S Trust Architecture

X.509 CertificatePublic Key

SharePointWeb Server

SharePoint Web Server

TokenIssuer

X.509 CertificatePrivate Key

SharePoint Web Server

1

2

3 4

Page 20: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

20

App Authorization Policies

App Only

User Only

App + User

Anonymous

Page 21: Governance of content, permissions & apps in sharepoint 2013

An

on

ym

ou

sA

pp -

Only

App +

U

ser

Use

r-O

nly

21

Start Authentication

User CredentialsProvided?

Does access Token contains user identity?

User Authentication

Set up call contextWith user-only identity

App Authentication

Set up call contextWith identity app and user

Does call targeta App Web?

Does call carry an access token?

App Authentication

Set up call contextWith app-only identity

App Authentication

Set up call contextUsing anonymous access

End Authentication

Yes

Yes

No

YesYes

NoNo

No

Page 22: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

22

App Permission Requests

Manage

Read-Only

Write

Full Control

Page 23: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

23

App Permission Request Scopes

List

Site Collection

Sub Site

Tenancy

Page 24: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

24

App Metadata

App domain of the app

Client ID of the app

Display Name of the app

Page 25: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

25

AppManifest.xml

Page 26: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

26

TokenHelper.cs

Page 27: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

27

Customize Permission Levels, Audit Settings & Portal Settings

Information Management

Information Architecture

Information Management policies

Content

Governance

Page 28: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

28

Enforcing Decisions

Portal Settings

Group Permissions

Audit Settings

Designer Settings

Search Settings

Page 29: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

29

Customize Permission Levels, Audit Settings & Portal Settings

Information Management

Information Architecture

Information Management policies

Content

Governance

Page 30: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

30

Information Management

Information management is the governance of information in an enterprise to maximize the information’s usability and manageability.

Page 31: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

31

Customize Permission Levels, Audit Settings & Portal Settings

Information Management

Information Architecture

Information Management policies

Content

Governance

Page 32: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

32

Information Architecture

Managed Metadata

Social Computing & Collaboration

Structure of the Site

Business Intelligence and Business Data

Search

Page 33: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

33

Customize Permission Levels, Audit Settings & Portal Settings

Information Management

Information Architecture

Information Management policies

Content

Governance

Page 34: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

34

Information Management Policies

Document Labels Policy

Expiration Policy

Auditing Policy

Document Bar Codes Policy

Site Retention Policy

Page 35: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

35

Policy Architecture

Page 36: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

36

Policy Feature

• A policy feature is an assembly or other piece of code that provides content management functionality to Microsoft SharePoint

• Install a valid Policy Feature Definition into the Policy Feature Definition List. You can do this by calling the Add method of the PolicyFeatureCollection class.

• Implement the IPolicyFeature interface

Page 37: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

37

IPolicyFeature Interface

• Register()• UnRegister()• OnCustomDataChange()• OnGlobalCustomDataChange()• ProcessListItem()• ProcessListItemOnRemove()

Page 38: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

Summary

38

SharePoint Apps Model

Setup SharePoint Environment for Apps

Apps Authorization & Authentication

Customize Permission Levels, Audit Settings & Portal Settings

Information Management

Information Architecture

Information Management policies

Apps Content

Governance

Page 39: Governance of content, permissions & apps in sharepoint 2013

www.sharepointsummit.org

39

Resources

TechNetGovernance resource center

http://technet.microsoft.com/en-us/sharepoint/ff800826.aspxGovernance features

http://technet.microsoft.com/en-us/library/cc262287.aspxPlan for Software Boundaries

http://technet.microsoft.com/en-us/library/cc262787.aspx SharePoint Server 2010 Governance Model

http://go.microsoft.com/fwlink/?LinkId=200533SharePoint 2010 Governance Planning

http://go.microsoft.com/fwlink/?LinkId=197150Implementing Governance on SharePoint 2010

http://go.microsoft.com/fwlink/?LinkId=201195SharePoint Server 2010 Governance Resources

http://go.microsoft.com/fwlink/?LinkId=197150

Blog http://spdevstore.com/blogs

LinkedInhttp://www.linkedin.com/profile/view?id=15715591

Email – [email protected]

Questions & Answers

Page 40: Governance of content, permissions & apps in sharepoint 2013

Thank you for your attention!This presentation will be available on the Vancouver

SharePoint Summit web site a few days after the event.

Page 41: Governance of content, permissions & apps in sharepoint 2013

Please rate this session!Fill out the survey and get a chance to win a Surface