Newsletter - 2020 June

June 2020


What's new in sapio365?

Hi there,

Deconfinement is starting but many employees are still working from home, and IT administration is still top of mind. The latest version of sapio365 has some new jobs that will help you tackle your Office 365 tasks, especially if you are concerned with security issues regarding the Giphy setting or how to better manage your Teams.

What you can NOW do with sapio365

Disable the Giphy setting in existing Teams

With this new job from sapio365, you can raise the bar in privacy protection. You’ll be able to disable the Giphy setting in your Teams – all of them at once, or pick only a few Teams. You’ll be able to do it with just a few clicks and no code! Read more….


Time for a Spring cleaning. With this new automated job, you’ll be able to list all your Teams that have guests and remove them. Then disable the setting at the same time to make sure no one is sharing private content. Read more…


Who’s been taking advantage of Teams to create new Teams, who may need more training to learn how to do so, and who is creating too many? This new job from sapio365 will let you identify the newest Teams sorted by the department of the Team’s creator. Read more…


With sapio365, you can solve problems,even those you didn't know you have.

Get it now – Free for 7 days

sapio365 v1.7

sapio365 v1.7 is here!

Version 1.7 is jam-packed with major changes, added features and visible improvements. Start by picking the session type you need according to your Office 365 role and the data you want to access.

Once connected, see how we’ve made managing groups even easier by seeing who is a member, owner, guest or contact and manage them all in one place. You’re even able to manage private channel members, site content and chats – even if you’re not an owner.

You’ll also experience greater control of sapio365 RBAC, richer usage reports, the ability to check in checked out files, change Teams settings, and lots more – update sapio365 today or download it below!

Top new features

Choose your sapio365 session type more easily

We’ve relabeled sapio365 sessions according to the scope they provide you. Start a Standard session if you can’t get admin consent or if you’ve been assigned a role through sapio365 RBAC. Otherwise, launch an Advanced session and get access equivalent to your Office 365 role, but with so much more at your disposal! And if you’re a global admin, simply elevate your privileges to get access to mailbox and site content you don’t own.

Manage group members AND owners in the same place

Query your groups for their members in sapio365 and you’ll notice the group owners displayed in the same grid. It’s now easier to add or remove members and owners from groups – you’ll even see if they are active users, guests or contacts.

Add or remove private channel members

You can now add or remove members for several private channels in one shot in the new Private Channel Members submodule (accessible from the Channels module). There, you can transform members into owners or vice versa. And when you add new non-Team members to a channel, they get added to the Team automatically – saving you valuable time!

Find and discard checked out documents

We’ve added checkout information in all Files modules so you can get an instant idea of what’s been checked out and by whom in your environment – even if you’re not the SharePoint site owner! Easily discard as many checked out documents as you want with a click.

Combine Usage Reports into a single, more meaningful document

You don’t need to process separate reports to answer usage questions regarding users or groups. sapio365 lets you merge data from several detailed Usage Reports to create a super report that you can refine to get a more complete picture of user activity or group usage.

General additions and enhancements

Along with some minor fixes and improvements that smooth out the user experience, the following general changes are noteworthy because they have an important impact on how you use sapio365.

Set sapio365 RBAC logging and enforcement parameters

When you assign users to roles you create in sapio365 RBAC, you now have the options to log when a role is used and by whom, which sapio365 modules are being accessed, and to enforce the taking on of a role when assigned users sign-in to a Standard session.

Show or hide columns while navigating the Column Map

You can now continuously customize your grid view with the Column Map without closing it, all from the ‘Show/Hide columns’ in the right-click menu. Choose ‘Show column with ID’ to include property technical names in the Column Map.

Less pervasive error messages

Errors sometimes occur when retrieving data from Office 365 because you don’t have access or it no longer exists. We now let you know in a more subtle way by displaying a message in the grid header.

Invert regex queries

Sometimes you just need the opposite of a regex operation. We’ve added a NOT function so that you can get exactly what you want when using regex in a search, filter, etc.

Improved comment management

Managing sapio365’s in-app user comments now includes editing, deletion of entries, refreshing the grid display, and hiding out-of-scope comments.

Improved pivot table function

You can now format all axes in a pivot table. You’ll also have access to a hierarchy view, the use of JavaScript functions to transform values, and the capability to navigate and drill down charts.

Better Azure Cosmos DB connection with more options

Loading and updating data to Azure Cosmos DB is generally faster. You can now select from existing Cosmos DB accounts to connect to your license, or you can clean up unused accounts created by sapio365 in the ‘Set Cosmos DB Connection Info’ section of About sapio365.

Ready to Schedule

New Jobs Added

Report users by disabled service plan

Schedule this job to keep an eye on services your users have available with their licenses, but have still not been enabled.

View private channel sites

If your Office 365 allows the creation of private channels, you can schedule this job to search through Teams and email the list of private channels straight to your mailbox.

What’s new in reports

See documents with retention labels applied

You can now see if any retention labels have been applied to files in OneDrive, Teams documents and site library documents. Simply select your files and click ‘Load Info’ button.

View files only - hide folders

Folders are now hidden by default when choosing a flat view in OneDrive Files, Group Files and Site Files modules. In this flat view, all you see is a convenient list of documents. And to unhide them, just click the ‘Show Folders and Notebooks’ button.

What's new in Users

New Jobs Added

Download messages as EML files

If you ever want to save important messages locally without backing up the entire mailbox, use the ‘Download as EML’ button in the Messages module. Open the EML file using any email client to view the message content, including attachments.

Delete users' mail rules

Since sapio365 helps you find potentially dangerous mail forwarding inbox rules set up by users, it’s only natural to let you remove them with a click. Be on the lookout for rule editing capabilities in the next release!

Revoke users' access to Office 365 applications

Instead of revoking access tokens one user at a time in the admin portal, or going in blind with PowerShell, simply click on the new ‘Revoke Access’ button in sapio365 for any selection of users. Watch how the time value in the ‘Sign-in Sessions valid from’ column resets as users are required to re-sign in to all Office 365 applications within the next 15 minutes.

Reset passwords or force users to change it on sign-in

You now have the choice to reset users’ passwords or force them to change it on the next sign-in, or to do both. This includes the option of requiring users to sign in using Multi-Factor Authentication (MFA).

Get partial grid update when cancelling a Refresh All

When you cancel a ‘Refresh All’, you’re now offered the option to update the grid with partial results in the Users module.

Create a user from a template

When creating a new user, you can now select existing users to prefill the creation dialog with their common properties like department, country, office, etc.

What’s new in Groups & Teams

Get access to private channel chats
If you want to avoid adding yourself to private channels to access their chats, you can request authorization from Microsoft to use protected APIs used by sapio365. We’ve made things easier with a guide on filling out the form. You can access it by clicking on the ‘Request access (private channel chats)’ button under ‘New Advanced Session’.

Get private channel members & library storage info in the Channels module
Before you head over to manage private channel members, you can preview them in the newly-added column ‘Channel members’ in the Channels module. We’ve also added some site library information here. Simply click on ‘Load Info’ to retrieve them.

Show or hide nested group members
Nested group members are now hidden by default in the Group members module. Display them by clicking on the ‘Nested Group’ button in the ribbon.

Create an Office 365 group from a template
Just like for users, when creating a new group, you can now select existing groups to prefill the creation dialog with some basic properties they have in common like name, description and privacy.

Access private channels’ SharePoint sites
Having a hard time identifying SharePoint sites associated to your Team private channels? Select all private channels in the Channels module and click on the new button ‘Sites…’ to get info like URL, created on, last modified, etc.

Edit Teams settings
Bulk update your settings for Teams in the Groups module, including member settings, guest settings, messaging and fun settings.

New column properties for ‘Icon’ and ‘Extension’ added to attachment info in Group Conversation Posts
With these two new columns, you can now filter or categorize post attachments by their extension or their representative icon.

SharePoint sites

What's New

Added new columns: Library storage information

Just like in the Users and Groups modules, we’ve added property columns displaying various drive information for SharePoint sites. Sort and filter relevant columns to see which sites have reached their consumption quotas, or categorize them by their quota state to get a general picture of storage consumption.


Why is sapio365 making me sign-in and grant permissions? Is this secure?

Why is sapio365 making me sign-in and grant permissions? Is this secure?

When first launching sapio365 with either a Standard or Advanced session, you are asked to sign-in with your Microsoft Office 365 credentials. If the authentication is successful and if you are allowed to consent to applications, you will then be prompted by Microsoft to grant ‘app consent’ to sapio365. This Microsoft dialog says: “This app would like to: ”, followed by a list of permissions.
The consent you give is strictly between the sapio365 app and your tenant. And since sapio365 is installed on your computer, this means that your data NEVER goes through any third-party servers.

Secure

Your data remains between your computer and your tenant – it never passes through external servers

Private

Your consent only applies to this instance of sapio365 – it will not be accessible to other instances of sapio365

Compliant

Your consent only works within your current tenant rights

Overview

There are two types of consent when managing applications in Microsoft Azure Active Directory:

  1. User Consent, or consent provided by an end user
  2. Admin Consent, or consent provided by an administrator

When launching a Standard session for the first time, the application requires a one-time user consent for sapio365 to access your data.
You can think of giving user consent as saying: “Connect to my Office 365 resources“.

When launching an Advanced session for the first time, the application requires a one-time admin consent for sapio365 to access Office 365 data. Only users with a Global Administrator role in the Office 365 organization can give consent to the application.

Global admins can also give that consent on behalf of all users in the organization. Therefore users do not have to provide additional consent, and the application can access signed-on users’ resources immediately.
You can think of giving admin consent as saying: “Sign my organization up to use this application”

Try sapio365 today:

Free for 7 days

No credit card required. Install it locally.
Download. Install. Register. Work.
It’s that easy.