Onboarding, environment and automation strategy
Onboarding
& work rules — entry into a shared training tenant, MFA registration and
rules for secure collaboration of multiple administrators in one
environment.
Engineering environment, VS Code and Copilot — VS Code as a
working tool for automation, Git repository hygiene and responsible use of
GitHub Copilot.
Automation strategy & tool map — orientation between
PowerShell, Microsoft Graph, PnP and REST, automation identity design (app
registration) and the principle of least privilege.
> Optional according
to group time: Architectural overview of Azure, Entra ID, M365, Microsoft Graph
and SPO REST.
PowerShell, Graph engineering &
staging
PowerShell in depth (Lab 1) — three PowerShell modules (PnP,
Graph, SPO) and four authentication modes; lab: certificate, app-only login,
scripted creation of work sites.
Microsoft Graph — engineering basics —
batching, delta query, throttling and error classification for resilient
automation scripts.
Staging environments: DEV, TEST, PROD — baseline as a
declarative artifact and detection of drift between
environments.
Migration, provisioning &
lifecycle
Migration composition (Lab 2) — pre-migration checks, wave
planning, cutover tactics; lab: migration from fileshare to SharePoint Online
according to JSON plan.
Provisioning automation patterns — PnP provisioning
engine, tenant templates and parameterization of requests for
websites.
Lifecycle & compliance enforcement — retention and sensitivity
automation, sharing governance, Site Attestation.
> Optional according to
group time: Orchestration integration and custom scripts (license-free
simulation, design of governance hooks against PnP/Graph
interface).
Azure integration, SIEM & Clarity
Azure
integration patterns (Lab 3) — Logic Apps vs Functions vs Runbooks, subscription
lifecycle Graph change notifications; lab: batch sync as a scheduled task under
application identity.
SIEM integration via Azure Blob — application logging
pipeline › Blob › Event Grid › Function › SIEM, KQL basics for validation and
dashboards.
Microsoft Clarity — configuration — tenant-wide deployment via
SPFx Application Customizer, cookie/consent compliance.
SPFx, security
hardening & capstone
SPFx basics & App Catalog — dev setup,
HelloWorld webpart generation, App Catalog (tenant vs site) and solution
deployment.
Security hardening & least privilege — privilege
minimization, Conditional Access for service principals, certificate
rotation.
Performance, cost & capstone — API efficiency, cost logging and
asynchronous fan-out patterns; final blueprint connecting migration,
provisioning and Azure integration with rollback plan.
