Skip to content

Commit 9af0a40

Browse files
authored
Merge pull request #22288 from MicrosoftDocs/main
Publish main to live, Tuesday 10:30 AM PDT, 9/26
2 parents 3784f8e + d18231c commit 9af0a40

11 files changed

Lines changed: 147 additions & 54 deletions

microsoft-365/enterprise/microsoft-365-multi-geo.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ In a Multi-Geo environment, your Microsoft 365 _Tenant_ consists of a central lo
4141

4242
Microsoft 365 Multi-Geo is available as an add-on to the following Microsoft 365 subscription plans.
4343

44-
Enterprise Agreement customers must purchase a quantity of Multi-Geo licenses equal to or greater than 5% of their total eligible seats. Similarly, CSP partners must purchase a quantity of Multi-Geo licenses equal to or greater than 5% of their customer's total eligible Microsoft 365 seats. For Enterprise customers, user subscription licenses must be on the same Enterprise Agreement as the Multi-Geo Services licenses. Contact your Microsoft account team for details.
44+
Enterprise Agreement customers must purchase a quantity of Multi-Geo licenses equal to or greater than 5% of their total eligible seats. Similarly, CSP partners must purchase and assign a quantity of Multi-Geo licenses equal to or greater than 5% of their customers' total eligible Microsoft 365 seats. For Enterprise customers, user subscription licenses must be on the same Enterprise Agreement as the Multi-Geo Services licenses. Contact your Microsoft account team for details.
4545

4646
- Microsoft 365 F1, F3, E3, or E5
4747
- Office 365 F3, E1, E3, or E5

microsoft-365/enterprise/set-up-multi-tenant-org.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ The next step after each external tenant accepts the invitation to join the mult
6464

6565
## Related topics
6666

67-
[Set up a multitenant organization using Microsoft Graph API](/azure/active-directory/multi-tenant-organizations/configure-graph#step-2-create-a-multi-tenant-organization)
67+
[Set up a multitenant organization using Microsoft Graph API](/azure/active-directory/multi-tenant-organizations/multi-tenant-organization-configure-graph)
6868

6969
[Plan for multitenant organizations in Microsoft 365](plan-multi-tenant-org-overview.md)
7070

microsoft-365/lighthouse/m365-lighthouse-view-opportunities.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ You must hold the Executive report viewer or Report viewer role in Partner Cente
3434

3535
## View opportunities
3636

37-
1. In the left navigation pane in Lighthouse, select **Sales Advisor** \> **Opportunities**.
37+
1. In the left navigation pane in [Lighthouse](https://lighthouse.microsoft.com), select **Sales Advisor** \> **Opportunities**.
3838

3939
2. On the **All opportunities** tab, select the tenant you want to research.
4040

@@ -48,14 +48,14 @@ You must hold the Executive report viewer or Report viewer role in Partner Cente
4848

4949
## View opportunities by opportunity type
5050

51-
1. In the left navigation pane in Lighthouse, select **Sales Advisor** \> **Opportunities**.
51+
1. In the left navigation pane in [Lighthouse](https://lighthouse.microsoft.com), select **Sales Advisor** \> **Opportunities**.
5252
2. Select the desired opportunity type you want to review.
5353

5454
For a definition of each opportunity type, see the Opportunity Type section in [Understanding opportunities and data in Sales Advisor](m365-lighthouse-understanding-opportunities-and-data.md).
5555

5656
## Export opportunities out of Sales Advisor
5757

58-
1. In the left navigation pane in Lighthouse, select **Sales Advisor** \> **Opportunities**.
58+
1. In the left navigation pane in [Lighthouse](https://lighthouse.microsoft.com), select **Sales Advisor** \> **Opportunities**.
5959
2. Select the view you want to export (All opportunities, Customer acquisition, Customer retention, or Customer growth).
6060
3. Filter the list as needed using the filters (Probability, Opportunity type, and Date created).
6161
4. Select **Export**.
@@ -79,4 +79,4 @@ Lighthouse exports the data displayed into a CSV file that you can integrate int
7979

8080
[Overview of Sales Advisor](m365-lighthouse-sales-advisor-overview.md) (article)\
8181
[Get access to Sales Advisor](m365-lighthouse-get-access-to-sales-advisor.md) (article)\
82-
[Understanding opportunities and data in Sales Advisor](m365-lighthouse-understanding-opportunities-and-data.md) (article)
82+
[Understanding opportunities and data in Sales Advisor](m365-lighthouse-understanding-opportunities-and-data.md) (article)
Lines changed: 122 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
ms.date: 08/21/2023
3-
title: "Summary of compliance capabilities for Loop experiences"
3+
title: "Summary of governance, lifecycle and compliance capabilities for Loop experiences"
44
ms.reviewer: dancost, tonchan
55
ms.author: mikeplum
66
author: MikePlumleyMSFT
@@ -19,48 +19,144 @@ ms.collection:
1919
search.appverid:
2020
- SPO160
2121
- MET150
22-
description: "Learn about the compliance how to manage Loop components capabilities for Loop experiences."
22+
description: "Learn about the governance, data lifecycle management and compliance capabilities for Loop experiences."
2323
---
2424

25-
# Summary of compliance capabilities for Loop
25+
# Summary of governance, lifecycle and compliance capabilities for Loop
2626

27-
Loop experiences offer many compliance features. This article provides a summary of the compliance features frequently requested that are **not available** yet in Loop.
27+
As a Compliance Manager or IT administrator, it's crucial to stay up-to-date on the latest governance, data lifecycle, and compliance posture for the software solutions being used in your organization. This article details the capabilities available and not available yet for [Microsoft Loop](https://www.microsoft.com/en-us/microsoft-loop).
2828

29-
## Summary of compliance capabilities for Loop components
29+
## Loop Storage
3030

31-
Loop components created outside of the Loop app in other Microsoft 365 apps (such as [Teams](https://support.microsoft.com/office/first-things-to-know-about-loop-components-in-microsoft-teams-ee2a584b-5785-4dd6-8a2d-956131a29c81), [Outlook](https://support.microsoft.com/office/use-loop-components-in-outlook-9b47c279-011d-4042-bd7f-8bbfca0cb136), [Whiteboard](https://support.microsoft.com/office/loop-components-in-whiteboard-c5f08f54-995e-473e-be6e-7f92555da347), [Word for the web](https://support.microsoft.com/office/use-loop-components-in-word-for-the-web-645cc20d-5c98-4bdb-b559-380c5a27c5e5)) are stored in the creator's OneDrive. For example, if User A creates a Loop component within a Teams chat with User B, that Loop component is stored in User A's OneDrive and is shared with User B.
31+
Microsoft Loop is built on top of SharePoint, OneDrive, and [Microsoft Syntex repository services](https://devblogs.microsoft.com/microsoft365dev/introducing-syntex-repository-services-microsoft-365-superpowers-for-your-app/), which means that most compliance capabilities work just like existing files in your ecosystem. Being a file makes Loop content familiar and it to be managed within your existing workflows. To help you understand how Loop content is stored in the Microsoft ecosystem, here's a high-level diagram:
3232

33-
Because Loop components are stored as files in OneDrive, there are many capabilities you're already familiar with that function just like any other file in OneDrive of SharePoint. Here are the notable differences from Office files in OneDrive that are **not available** yet for Loop components:
33+
Where the loop content was originally created determines its storage location:
34+
- Created in the Loop app ➡️️ Microsoft Syntex
35+
- Created in all other places (e.g. Teams chat, Outlook email, Word for the web, Whiteboard) ➡️️ OneDrive
3436

35-
- [Sensitivity Labeling](/microsoft-365/compliance/information-protection) (Microsoft Information Protection) at the File-level
36-
- End-user ability to see [Data Loss Prevention (DLP)](/microsoft-365/compliance/dlp-learn-about-dlp) policy tips
37-
- [Conditional Access](/azure/active-directory/conditional-access/overview)
3837

39-
To configure Loop components in your organization, see [Manage Loop components in OneDrive and SharePoint](/microsoft-365/loop/loop-components-configuration).
38+
## Loop components stored in OneDrive
39+
The following section applies to Loop components stored in OneDrive (created outside the Loop app e.g. in Teams chat)
4040

41-
## Summary of compliance capabilities for content created in Loop workspaces
4241

43-
Content created in a Loop workspace is stored in Microsoft Syntex repository services. For more information, see [Introducing Microsoft Syntex repository services: Microsoft 365 superpowers for your app](https://devblogs.microsoft.com/microsoft365dev/introducing-syntex-repository-services-microsoft-365-superpowers-for-your-app/).
42+
### Governance, Lifecycle and Compliance Capabilities
4443

45-
Microsoft Syntex repository services has many of the same compliance capabilities as the rest of SharePoint and OneDrive. However, the capabilities below are **not available** yet for content created in Loop workspaces. While we continue to improve rapidly in this area, if you require any of these capabilities, Microsoft recommends proactively disabling Loop workspaces using the instructions in [Manage Loop workspaces in Microsoft Syntex repository services](/microsoft-365/loop/loop-workspaces-configuration):
44+
#### Foundations
45+
- **[Admin Toggles](/microsoft-365/loop/loop-components-configuration#available-policy-settings)** to turn on/off all Loop components in the Microsoft 365 ecosystem, if enabled in the Microsoft 365 ecosystem there's a toggle to turn on/off Loop components specifically in Outlook or Teams, and an independent toggle to turn off Loop components for collaborative meeting notes
46+
- **GDPR** data subject requests as part of the [Security and Compliance admin center](/compliance/regulatory/gdpr-data-subject-requests#data-subject-request-admin-tools) and [Purview eDiscovery workflows](/purview/ediscovery)
47+
- **EUDB** compliance - [What is the EU Data Boundary?](/privacy/eudb/eu-data-boundary-learn)
4648

47-
- [Intune Device Management Support](/mem/intune/remote-actions/device-management)
48-
- Tenant admin experience: Restoring a deleted workspace
49-
- End-user ability to see or set [Retention Labels](/microsoft-365/compliance/retention-policies-sharepoint)
50-
- [Sensitivity Labeling](/microsoft-365/compliance/information-protection) (Microsoft Information Protection) at the File-level and Container-level
51-
- End-user ability to see [Data Loss Prevention (DLP)](/microsoft-365/compliance/dlp-learn-about-dlp) policy tips
52-
- Multiple owners on a workspace
53-
- [Multi-Geo](/microsoft-365/enterprise/microsoft-365-multi-geo) support
54-
- [Conditional Access](/azure/active-directory/conditional-access/overview)
49+
#### Admin Management
50+
- **[Multi-Geo](/microsoft-365/enterprise/microsoft-365-multi-geo)** capabilities, including creation of .loop files in a user's OneDrive in the geo that matches the user's [preferred data location](/microsoft-365/enterprise/plan-for-multi-geo#best-practices) and ability to move the user's OneDrive when their preferred data location changes.
51+
- When a user leaves an organization, [OneDrive retention policies](/sharepoint/retention-and-deletion) apply to the .loop files just as they do to other content created by the user
5552

56-
*This list of capabilities is not exhaustive*
53+
#### Audit
54+
- **Version History** [export in Purview](/purview/ediscovery-export-search-results#step-1-prepare-search-results-for-export) or via [Graph API](/graph/api/driveitem-get-content-format)
55+
- **Audit** logs for all events: search and export Microsoft 365 service events for security and compliance investigations
56+
- use the [compliance admin center](https://compliance.microsoft.com/auditlogsearch)
57+
- search audit logs for "loop" or "fluid"
58+
- further filter exported results by "SourceFileExtension":"loop" or "SourceFileExtension":"fluid"
59+
- **Audit** logs are retained, can be exported, and can be streamed to third party tools
5760

58-
> [!NOTE]
59-
> The list of capabilities in this section applies to content created in Loop workspaces (Microsoft Syntex repository services). It does not apply to Loop components created in either Teams, Outlook, Whiteboard or Word for the web (which are created in OneDrive).
61+
#### Legal Hold and eDiscovery
62+
- Microsoft **[Purview eDiscovery](/microsoft-365/loop/loop-components-teams#do-loop-and-fluid-files-support-ediscovery)** review (premium only) and export (also as HTML, premium only) ✻
63+
- Microsoft **[Graph API](/graph/api/driveitem-get-content-format)** export ✻
64+
- **Legal Hold** support to ensure content isn't deleted (as related to litigation and security investigations) and stored in the [Preservation Hold Library](/sharepoint/governance/ediscovery-and-in-place-holds-in-sharepoint-server)
65+
66+
#### Data Lifecycle Management
67+
- **[Retention Policies](/microsoft-365/compliance/retention-policies-sharepoint)** are enforced
68+
69+
#### Information Barriers
70+
- **[Information Barriers](/purview/information-barriers-sharepoint)** ✻✻
71+
72+
#### Customer Key
73+
- **[Customer Lockbox](/purview/customer-lockbox-requests)**
74+
75+
76+
### Capabilities that are Not Yet Available
77+
78+
#### Admin Management
79+
- Basic **Intune** [Device Management Support](/mem/intune/remote-actions/device-management) for Loop app on iOS and Android
80+
- Basic **[Conditional Access](/sharepoint/control-access-from-unmanaged-devices)** support
81+
82+
#### Data Loss Prevention, Information Protection
83+
- **[Data Loss Prevention](/microsoft-365/compliance/dlp-learn-about-dlp)** (DLP) policy tips ✻
84+
- **[Sensitivity Labeling](/microsoft-365/compliance/information-protection)** (MIP) ✻
85+
86+
✻ requires E3 or E5 license   |   ✻✻ requires E5 license
87+
88+
89+
## Loop workspace content stored in Microsoft Syntex
90+
The following sections apply to Loop workspace content stored in Microsoft Syntex (created inside the Loop app e.g. new workspaces, new pages or new components)
91+
92+
93+
### Governance, Lifecycle and Compliance Capabilities
94+
95+
#### Foundations
96+
- **[Admin Toggle](/microsoft-365/loop/loop-workspaces-configuration)** to turn on/off creation of content in Loop workspaces
97+
- **GDPR** data subject requests as part of the [Security and Compliance admin center](/compliance/regulatory/gdpr-data-subject-requests#data-subject-request-admin-tools) and [Purview eDiscovery workflows](/purview/ediscovery)
98+
- **EUDB** compliance - [What is the EU Data Boundary?](/privacy/eudb/eu-data-boundary-learn)
99+
100+
#### Audit
101+
- **Version History** [export in Purview](/purview/ediscovery-export-search-results#step-1-prepare-search-results-for-export)
102+
- **Audit** logs for all events: search and export Microsoft 365 service events for security and compliance investigations
103+
- use the [compliance admin center](https://compliance.microsoft.com/auditlogsearch)
104+
- search audit logs for Loop ApplicationID `a187e399-0c36-4b98-8f04-1edc167a0996`
105+
- **Audit** logs are retained, can be exported, and can be streamed to third party tools
106+
107+
#### Legal Hold and eDiscovery
108+
- Microsoft **[Purview eDiscovery](/microsoft-365/loop/loop-components-teams#do-loop-and-fluid-files-support-ediscovery)** review (premium only) and export (also as HTML, premium only) ✻
109+
- **Legal Hold** support to ensure content isn't deleted (as related to litigation and security investigations) and stored in the [Preservation Hold Library](/sharepoint/governance/ediscovery-and-in-place-holds-in-sharepoint-server)
110+
111+
#### Data Lifecycle Management
112+
- **[Retention Policies](/microsoft-365/compliance/retention-policies-sharepoint)** configured for 'all SharePoint sites' are enforced on all Loop workspaces
113+
114+
#### Information Barriers
115+
- **[Information Barriers](/purview/information-barriers-sharepoint)** ✻✻
116+
117+
#### Customer Key
118+
- **[Customer Lockbox](/purview/customer-lockbox-requests)**
119+
120+
121+
### Capabilities that are Not Yet Available
122+
123+
#### Admin Management
124+
- PowerShell ability to
125+
- list all Loop workspaces
126+
- view comprehensive details of a specific workspace such as storage and membership
127+
- delete and restore Loop workspaces
128+
- get and set sensitivity labels
129+
- get and set conditional access policy
130+
- get and set block download policy
131+
- End user Recycle Bin for deleted content
132+
- Loop workspace management: multiple owners for lifecycle management
133+
- Basic **Intune** [Device Management Support](/mem/intune/remote-actions/device-management) for Loop app on iOS and Android
134+
- Basic **[Conditional Access](/sharepoint/control-access-from-unmanaged-devices)** support
135+
- Multi-Geo capabilities, including creation of Loop workspaces in the geo that matches the user's preferred data location and moving their Loop workspaces to a different geo when the user's preferred data location changes. Loop workspaces are moved in the same manner as the user's OneDrive, when the user's preferred data location is updated.
136+
137+
We plan to expand our administrative workspace management capabilities via PowerShell. Furthermore, we plan to make these administrative functions accessible in SharePoint Admin Center.
138+
139+
#### Legal Hold and eDiscovery
140+
- Microsoft **[Graph API](/graph/api/driveitem-get-content-format)** export ✻
141+
142+
#### Data Lifecycle Management
143+
- **[Retention Policies](/microsoft-365/compliance/retention-policies-sharepoint)** that can be overridden or set at the Loop workspace level
144+
145+
#### Data Loss Prevention, Information Protection
146+
- **[Data Loss Prevention](/microsoft-365/compliance/dlp-learn-about-dlp)** (DLP) policy tips ✻
147+
- **[Sensitivity Labeling](/microsoft-365/compliance/information-protection)** (MIP) ✻
148+
149+
✻ requires E3 or E5 license   |   ✻✻ requires E5 license
150+
151+
152+
## Managing Loop in your organization
153+
154+
By reviewing the above information, you can make an informed decision on whether Microsoft Loop is ready for use as a software solution in your organization. It's important to note that while some compliance items have been completed, there are still items that are in progress and will be available soon. As always, we will continue to update this and other documentation to provide the compliance status of Microsoft Loop to help you make the best decisions for your organization.
60155

61-
To configure Loop workspaces in your organization, see [Manage Loop workspaces in Microsoft Syntex repository services](/microsoft-365/loop/loop-workspaces-configuration)
62156

63157
## Related topics
64158

65159
- [Overview of Loop components in Microsoft 365](/microsoft-365/loop/loop-components-teams)
160+
- [Manage Loop components in OneDrive and SharePoint](/microsoft-365/loop/loop-components-configuration)
66161
- [Overview of Loop workspaces storage and permissions](/microsoft-365/loop/loop-workspaces-storage-permission)
162+
- [Manage Loop workspace experiences in Microsoft Syntex repository services](/microsoft-365/loop/loop-workspaces-configuration)

microsoft-365/loop/loop-components-teams.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ Moving a .loop file from OneDrive to a SharePoint site will result in the Live c
5555

5656
## What happens if the owner of the file leaves the company?
5757

58-
OneDrive retention policies apply to the .loop files just as they do to other content created by the user.
58+
[OneDrive retention policies](/sharepoint/retention-and-deletion) apply to the .loop files just as they do to other content created by the user.
5959

6060
## How are .loop files shared?
6161

microsoft-365/security/defender-endpoint/deploy-and-manage-using-intune.md

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,9 +3,6 @@ title: Deploy and manage using Intune
33
description: Use Intune OMA-URI and Intune user interface to deploy and manage on printer protection.
44
ms.service: microsoft-365-security
55
ms.subservice: mde
6-
ms.mktglfcycl: deploy
7-
ms.sitesec: library
8-
ms.pagetype: security
96
ms.author: dansimp
107
author: nimishasatapathy
118
ms.localizationpriority: medium
@@ -16,7 +13,7 @@ ms.collection:
1613
- tier2
1714
ms.custom: admindeeplinkDEFENDER
1815
ms.topic: conceptual
19-
ms.date: 01/09/2023
16+
ms.date: 09/25/2023
2017
ms.reviewer: tewchen
2118
search.appverid: met150
2219
---
@@ -127,7 +124,7 @@ Go to the Microsoft Intune admin center (<https://endpoint.microsoft.com/>) > **
127124

128125
- In the **Add Row** pane, enter:
129126
- **Name** as **Evidence folder location**
130-
- **OMA-URI** as `./Vendor/MSFT/Defender/Configuration/DataDuplicationRemoteLocation`
127+
- **OMA-URI** as `./Device/Vendor/MSFT/Defender/Configuration/DataDuplicationRemoteLocation`
131128
- **Data Type** as **String**
132129

133130
:::image type="content" source="media/device-control-oma-uri-edit-row.png" alt-text="Set location for file evidence." lightbox="media/device-control-oma-uri-edit-row.png":::

0 commit comments

Comments
 (0)