SharePointsBlog

Interesting Exploits in Office 365 and SharePoint

First Impressions – Microsoft Advanced Data Governance

Microsoft announced new capabilities for Advanced Data Governance at the Ignite conference in September 2016.  As of April 1, these features have been released into the O365 platform.  As with all O365 releases, these are rolling out in waves.  If you navigate to the Security and Compliance Center, you will see additional options under Classifications and Data Governance.

There are a significant number of features that have been released, but for the purposes of this discussion, we are going to focus on the specific capabilities surrounding information governance and policy.

Retention Policies and Classification Labels

Microsoft’s capabilities around retention are not new.  Both Exchange and SharePoint have featured mechanisms to define how long content items should exist.  Many of these manifesting themselves over 10 years ago.  What is new with the recent announcement and update is Microsoft’s unification of retention policies across the Office 365 (O365) service.  Within a series of mouse clicks, one can create a retention policy and apply it to Exchange (email and public folders), SharePoint sites, OneDrive for Business, Office 365 Groups and Skype for Business content.  To an organization, this now provides the ability to create and enforce a number of information governance initiatives. 

Layered on top of Retention Policies are Classification Labels.  Classification Labels allow organizations to apply a specific information governance rule to content manually.  The Classification Label sets can be published to different locations across the Office 365 platform.  The result provides users the ability to easily follow information governance policy without having to have deep knowledge or training.  Apply a Classification Label of “External Proposal” to a new sales proposal and the user is done.

Alternatively, Classification Labels can be defined and applied automatically and/or by default to a set of locations.  Maybe your organization has a mergers and acquisitions group.  A Classification Label can be defined and automatically applied to all content created in that group regardless of where it is stored.  The added benefit of a Classification Label over a Retention Policy is that the label will actually manifest on the content, whether a document or email.

Retention Policies and Classification Labels offer the ability to ubiquitously apply to all content in the platform as a global policy.  Alternatively, they can be applied to very specific content, in specific targeted locations.  This flexibility offers organizations great power to solve many diverse and unique information governance challenges.

Before organizations jump into this pool with both feet, I suggest that they take a deeper look at these capabilities so that they obtain the results that they expect.

Retention and Records

The new Advanced Data Governance (ADG) features provide the ability to perform content retention as well as record declaration.  Retention, as implemented in the ADG context retains content for the specified period of time.  This doesn’t mean that the content is inaccessible.  Users may continue to work with the content including editing, sharing and collaborating.  Content that is under a retention policy behaves like any other content to the user.  What is different is when a content item is deleted.  The ADG features manage the preservation of the content so that it is not lost.

Retained content is handled differently than content marked as a “record”.  This is a unique option for a Classification Label and removes the ability to modify the content in any way.  This prevents users from modifying the specific item and will change the behavior experienced during the normal course of working.

Deletion and Destruction

The process that occurs when content is no longer retained may be defined as a delete action.  The retention policy can be defined to do nothing at the end of retention, or perform a delete.  It is important to note that delete in this case doesn’t mean “delete immediately”.  ADG uses the recycle bin to provide a staged deletion process.  Therefore, “deleted” content may still exist in the recycle bin for a period of time.

In the future, there are plans to put approval process in place for the retention policy that will provide organizations the ability to create more formal processes around information destruction. 

Date Calculations

With this release, ADG provides date options for the calculation of the retention period.  Standard dates such as Created and Modified are available and an option for when the content was labeled (in the case of Classification Labels).

Currently there is no option to support custom date fields or event-driven (also known as retention triggers) retention.  These are going to be available soon per Microsoft.

Impressions

After being involved with the preview as a Microsoft ISV and working with several joint partners we have some initial impressions of these new features.

  • Microsoft has finally moved to unification of policy management – this is a big plus because we no longer manage separate, application specific policies
  • Application of Retention Policies and Classification Labels – definition of the policies and labels is quite easy and operates through a very modern wizard, stepping even the novice through the process.
  • Timeliness of Processes – in our experience, the policy application service level agreements aren’t immediate, some taking as long as seven days.  We are sure that as ADG gets wider adoption and Microsoft gains experience with the service, these will come down.
  • Not your traditional records management – there is some adjustment that will be needed for more traditional organizations using legacy records management solution to adapt to these new concepts.  For some organizations, these capabilities will augment more regimented processes to address the ever-increasing proliferation of content and the risks it represents.
  • Terminology – we can only suggest taking your time and understand what each of these new features is doing.  We found ourselves a little confused more than once with the use of terminology.
  • Enterprise Perspective – one of the biggest challenges we faced was understanding the what, when and where of the Retention Policies and Classification Labels.  Since each of these is a simple listing of defined policies and labels, it becomes very difficult to track where certain policies are applied and what labels are available.   We suggest starting with very broad definitions and picking relevant naming conventions (you can name and describe these any way you want).  Microsoft is gathering feedback in this area, so we hope to see good things coming.
  • What about other sources – as stated previously, Microsoft has made a great stride with these capabilities.  If your organization has other locations or applications that need to have policy assigned, you will need to look for solutions that extend the platform.

In conclusion, Microsoft deserves credit for listening to its clients and taking this leap forward.  For those of us committed to the platform, we are happy to see these capabilities.  While adding some great capabilities, we believe that organizations will find that there will be compliance requirements and information handling processes that will require broader and deeper functionality in specific areas.

Advertisements

3 responses to “First Impressions – Microsoft Advanced Data Governance

  1. Tom August 4, 2017 at 1:11 pm

    Hi Brad, Since your article on the new ADG features, I have been working with a customer to make use of them. On the whole I’m really delighted to see the new features but in some cases we are missing a couple of critical things that would help with our solution. I wondered, given that you were on the preview programme, whether you saw any of the following features being discussed and/or whether you knew whether these capabilities would be coming? You might even still be on the preview programme and still be able to ask I’m not sure?

    1) You can set default labels at a library level (good) but we’d really like to be able to do it on a folder too (not there as yet) – Is this coming do you think?

    2) at the moment, even though you can add a default label to a library through the UI, it seems you can’t do it programmatically through the API which is a real draw-back. Any chance you might know or be able to find out whether this is going to be added?

    Any insight you could provide would be greatly appreciated.

    Tom

    • bradteed August 4, 2017 at 2:28 pm

      Tom,
      First, thanks for reading the post and taking the time to comment.

      Cheers to you for taking a customer into this “new world”.

      Specific to your questions:
      1) I don’t have much confidence that “folder level” assignment is coming in the short term. If Microsoft hears feedback, they may do something; however given their direction, “folders” are a construct that don’t see much visibility in feature planning.
      2) I believe that this will be manifested through the API. Microsoft is making every effort to create parity between configurations available in the UX and the API. I have seen significant increased API support over the last few months.

      Thanks again.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: