contentACCESS documentation – version Orion

The provisioning job

• Synchronizes users of the Teams and AAD groups specified on the Provisioning settings page to the Teams archive Address book
• Verifies the user’s Teams memberships and records these memberships to contentACCESS
• If contentACCESS Portal user creation is turned on in the Address book for an object (Teams/Team groups/Teams’ users/AAD group), it creates a contentACCESS Portal user for the object users with an Microsoft 365 authentication type
• Based on the roles assigned in the Address book, it gives permissions on the specific Teams and private chats

In contentACCESS, a provisioning job is created automatically when Teams Archive is activated for the first time.

Teams Archive provisioning settings are available on the Provisioning settings page (Teams Archive -> Settings -> Provisioning settings):

a) Report mode settings
If the Use report mode checkbox is checked, the job will run in report mode. After the job finishes its run in this mode, the user will be able to download a .csv report file here in this section. The file will contain a list of teams selected in section Teams to process of the job and some information to them, including whether and how will they be processed.

b) Scheduling settings
Select the running times of the provisioning job or create a new scheduler. For more information on how to configure scheduler settings please refer to section Schedules described above.

c) Teams to process
In this section, the user can choose if he wants to process all accessible Teams and Team groups or select only some of them manually. If he decides to select them manually, the select option will appear. After clicking on it, the Team selection window will open. Here it is possible to select the Teams or Team groups to be processed. After the selection is made, click OK.

There is also the option to set up Automated Team provisioning. After selecting this option from the Process teams dropdown list, click on + new. The Team selection window will open. Here you will be able to specify a list of filters for a group, based on which teams do you want to be processed. Every filter is associated with one group. All teams matching the specified filter will be added into the group.

Before specifying a filter, you will first need to select a Group from the dropdown list. If you have no groups created, is it possible to create one directly from here by clicking on the Create group button (more info about group creation can be found in this section).

To specify a filter, click on the Change filter button. Specify your desired filtering options in the Filter settings window. Team name and Description are what you specify when creating a team, Members value must be specified as UPN (user principal name) – e-mail address used for logging in to Microsoft 365. Team name can be also specified in case sensitive (CS) way.

Select one of Processing strategy options:

• Only add – new teams matching the filtering settings will be added, but the old team members that do not match the filtering settings will not be removed from the group
• Synchronize – only the teams that match the filtering settings can be group members, teams that do not matching the filtering settings will be removed from the group

Click OK. The group settings (database, store, index zone, creation of contentACCESS Portal access) will be applied to the teams that are members of the group. If the team has already associated database, store or index zone, it won’t be overwritten by the provisioning job.

d) AAD groups
In this section, it is possible to select AAD groups that you would like to add to the Address book and later use for private chat archiving. There are two available group types and three group membership types.
Group types: Security (used to manage user and computer access to shared resources and Microsoft 365 (provides collaboration opportunities by giving group members access to shared mailbox, calendar, files, SharePoint sites, and more).
Group membership types: Assigned (lets you add specific users as members of a group and have unique permissions), Dynamic user (lets you use dynamic membership rules to automatically add and remove members) and Dynamic device (lets you use dynamic group rules to automatically add and remove devices). Read this article for more information about the group and group membership types.
To manually select from the available groups, click on the select button. The Select AAD Group(s) window will open. Here it is possible to select the AAD groups to be processed. After the selection is made, click OK.

If you want to add a group that is not in the list of available groups, click on the + add button. The Add AAD group window will open. Here you can specify the group’s name and then click on OK to add it to the AAD groups list in Provisioning settings.

e) Notification settings
If the provisioning job could not run properly due to some reasons, contentACCESS can send a warning about the problem. The notification email message will be sent to the email address that is set here under Recipient list option. Here you can also choose, when these email messages should be sent: only if errors occur, or when errors or warnings occur, or always, regardless of the faultless running of the provisioning job.

f) Role settings
Here it is possible to select the role that will be assigned by the Provisioning job.

Save the settings and start the Provisioning job.