Understanding security and privacy of Delve and intelligent experiences in Office 365
Within Office 365, Delve is an intelligent service aimed at helping users stay in the know – to discover new, relevant information and people based on who they work with and the content they work on. Delve proactively discovers content across Office 365 and connects users to content and people, intuitively and in a personalized fashion. Powered by the Microsoft Graph, Delve brings you information from across Office 365 – OneDrive for Business, SharePoint Online, Exchange Online, Yammer, Office 365 Video and more. Delve will only show you content that you have access to—it always respects the permissions and security policies of that content. We want to provide insight and clarity for the security and privacy that comes with, and backs, Delve in Office 365. And to be clear about what role the Microsoft Graph plays, examples of how it is used in Delve and throughout Office 365. Security and Privacy Delve is covered under the Office 365 Trust Center and meets all of the requirements of our highest level of compliance which Microsoft refers to as “Tier D” compliance, e.g., ISO 27001 and 27018 certification, SOC 1 and SOC 2 compliance. Delve is also licensed under the Microsoft Standard Online Services Terms which include commitments such as the EU Model Clauses. This, too, applies to the Microsoft Graph - the underlying intelligence service that uses advanced analytics to provide relevant, personalized insights via Delve and other user interface experiences throughout Office 365. You can read more within the public “Office 365 Compliance Framework for Industry Standards and Regulations" document (.pdf). Customers own their Microsoft Graph data, which is stored in their partition of Office 365. The Microsoft Graph data has the same protection and security as other customer data stored in other Office 365 services. Delve never changes any permissions on content or other information. Users only discover what they already have permission to see. Only you can see your private documents in Delve, unless you decide and act to share them. It is important content owners establish and maintain any required or desired access rights and permissions on the content/documents themselves. Documents are not stored in Delve, but rather they are only displayed within the Delve experience from where they are stored, for example OneDrive for Business or a SharePoint Online document library. People can't see each other's private activities, such as what documents they've read, what emails they've sent and received, or what Skype for Business conversations they've been in. People can see when others modify a document, but only if they have access to the same document. What you see when you open Delve is personalized to you, and no one else sees the same files, content, and activity you do. It is possible to opt out of Delve at both the tenant level and the user level. Once opted out, users will not see the Delve tile in the Office 365 app launcher. Opted out users’ document activity (documents they are accessing) is no longer used to help others discover their content. Additionally, various services that surface content and recommendations from the Microsoft Graph to provide intelligence throughout Office 365 will simply not appear. They, too, may revert to previous non-Graph-based methods -- for example, search-based vs graph-based. One example, if you opt out, you would not see the new "Discover" tab within OneDrive for Business - yet the core of OneDrive for Business remains intact. To learn more, please review these two important Delve security and privacy support articles; the first for admins and second for users: "Office Delve for Office 365 admins", "Are my documents safe in Office Delve?". Additionally, it is important to understand permissions levels in SharePoint and other content repositories; examine existing permissions if you perceive any unintended exposure. The Microsoft Graph – supporting the business user and the developer The content, activity, people, and recommendations that surface in Delve and other intelligent experiences are powered by Microsoft Graph. The Microsoft Graph represents a collection of content and people, and the activity that happens across the entire Office suite. From email, social conversations, and meetings, to documents in SharePoint and OneDrive, the Microsoft Graph maps the relationships among people and information, and acts as the foundation for intelligent experiences, providing more relevant and personalized experience to each user. The Microsoft Graph uses sophisticated machine learning techniques to connect people to the relevant content, conversations and people around them. A visual representation of the various content sources and signal Delve and the Microsoft Graph leverage to help make discovery or relevant content and people possible. Review which types of content you can expect to see in Delve. And learn more about the Microsoft Graph. Intelligence beyond Delve, throughout Office 365 and beyond The value of infusing intelligence within Delve, and throughout Office 365 applications, means you have access to intelligent information and insights right where you are working without leaving the app or experience where you are working. You’ll see intelligence in OneDrive for Business in the form of the Discover tab where you’ll find others’ files related to what you are working on. The home page of a SharePoint team site surfaces activities in the site, the SharePoint mobile app and the SharePoint home in Office 365 suggest sites of possible interest and recent activity, plus Outlook’s Focused Inbox, where the Graph helps identify and eliminate clutter in your email stream. Screenshots on web and mobile where the value of intelligence from the Microsoft Graph surfaces throughout the various Office 365 workloads. The effect of opting-out of Delve will reduce the intelligence and discovery experiences in Office 365. It is our recommendation to not opt out. It is also possible to program your own custom solutions for any device with the intelligence from the Microsoft Graph. Developers leverage a single end point that provides access to a common set of simple, modern APIs. Using the Microsoft Graph API, developers can consume Office 365 data in their apps to create custom, personalized experiences for their users. You can learn more about developing with the Microsoft Graph at https://graph.microsoft.io. And the same data access security and privacy model, as articulated above, remains with custom applications that use the Microsoft Graph API. Custom applications querying the Microsoft Graph do so under the security context of the user and will only return content to which the user has been given permissions. Delve and intelligence customer evidence As you move from learning about Delve and the Microsoft Graph, into how you and your company can best introduce the value and capabilities to your users, it’s helpful to review how other companies chose to move forward, helping them to overcome a variety of challenges facing them. Below are two recent examples of companies that committed to putting Delve and the Microsoft Graph to use in production, into their evolving digital workplaces. Marks & Spencer | M&S is a global, multichannel retailer with more than 1,330 stores selling innovative food and quality clothing to people living in many different cultures. They wanted to find a way to unite the company. To promote unity, they sought the right technology tools to support a new business culture— one that is modern, agile, connected and collaborative—that’s defined by a digital mindset across a single global company. Alongside their company portal, serving 80,000 employees, Delve provides intelligent people discovery. “We plugged Delve into our company directory, so employees can look for individuals and see their managers and who they work with. We view Delve as a quick and easy way to find current data to keep us moving at a fast pace in this fast-paced business.” says Carl Dawson, IT Director. Please review the full Marks & Spencer case study + video. Weleda | Based in Arlesheim, Switzerland, Weleda has offices and partnerships in more than 50 countries. They needed to connect employees to the relevant content, conversations, and people around them. By “embedding Delve-like functionality into our intranet, it helps employees stay better connected to the colleagues, information, and projects that mean the most to them,” says Vladimir Filev, Enterprise Architect. Weleda employees are using Microsoft Office 365 to work closely with colleagues worldwide, transforming an email-driven workplace into an inclusive, connected culture that promotes individual achievement to improve global productivity and drive innovation. “Because Delve has such a great search engine,” Filev continues, “I’m able to keep track of contacts and files across multiple projects I’m involved with. In terms of personal time management, I find Delve very helpful.” Please review the full Weleda case study. Intelligence rests on trust Microsoft is committed to security, privacy and compliance. Your data is your data – and it is you who has control of who can see it and who can access it. Through transparent service operations, we seek to gain and earn your trust every day. We are accountable to you. Thanks for keeping us accountable, Mark Additional related resources SUPPORT ARTICLES “Share files or folders in Office 365”: https://support.office.com/en-US/article/Share-files-or-folders-in-Office-365-1fe37332-0f9a-4719-970e-d2578da4941c "Are my documents safe in Office Delve?": https://support.office.com/en-us/article/Are-my-documents-safe-in-Office-Delve-f5f409a2-37ed-4452-8f61-681e5e1836f3?ui=en-US&rs=en-US&ad=US "Office Delve for Office 365 admins": https://support.office.com/en-us/article/Office-Delve-for-Office-365-admins-54f87a42-15a4-44b4-9df0-d36287d9531b “ Understanding permission levels in SharePoint”: https://support.office.com/en-US/article/Understanding-permission-levels-in-SharePoint-87ecbb0e-6550-491a-8826-c075e4859848 BLOGS "Connect to expertise and content with new people experiences throughout Office 365" [9/26/16]: https://blogs.office.com/2016/09/26/connect-to-expertise-and-content-with-new-people-experiences-throughout-office-365/ (this is also the one MS Tech Summits stream on-demand) "Enriching the mobile and intelligent intranet with team news, apps for Android and Windows, and more" [9/26/16]: https://blogs.office.com/2016/09/26/enriching-the-mobile-and-intelligent-intranet-with-team-news-apps-for-android-and-windows-and-more/ "SharePoint - the mobile and intelligent intranet" [5/4/16]: https://blogs.office.com/2016/05/04/sharepoint-the-mobile-and-intelligent-intranet/ “ Today at Connect()—introducing the Microsoft Graph” [11/18/15]: https://blogs.office.com/2015/11/18/today-at-connect-introducing-the-microsoft-graph/ “ Office - Microsoft Graph: Gateway to Data and Intelligence” [Connect 2016]: https://msdn.microsoft.com/en-us/magazine/mt790189.aspx VIDEOS "Discover what's new and what's coming for Office Delve" on-demand BRK2044 session recording: https://myignite.microsoft.com/videos/1359 "Discover what's new and what's coming to the SharePoint Mobile and Intelligent Intranet" on-demand BRK2029 session recording: https://myignite.microsoft.com/videos/1302 "Explore new personalized, intelligence powered search experiences in SharePoint, Delve and Office 365": https://myignite.microsoft.com/videos/1363 "The Mobile and Intelligent Intranet: SharePoint sites and PowerApps": https://youtu.be/x8tgKBXmmPg "Updates to the SharePoint app, team sites and publishing experience": https://youtu.be/W4J6hZtove0NEW "People Experiences" throughout Office 365
UPDATE: you can now view the on-demand video recording of the "Discover what's new and what's coming for Office Delve" day 1 breakout session from #MSIgnite 2016. Microsoft today is introducing new “people experiences” throughout Office 365. “People experiences” in Office 365 help employees stay in the know – by finding content through people they work with; find and share expertise; and connect with each other in one click – all within context, and within the apps and experiences they already use today. The announcements cover three main offerings: • NEW Delve Windows 10 app for desktop and mobile • Intelligent people cards throughout Office 365 • Updates to Office 365 profile pages Please review the new blog post on blogs.office.com to learn more, “Connect to expertise and content with new people experiences throughout Office 365" and install Delve app for Windows 10 now! :robothappy: Customers are faced with information and document overload. And often the real trick is not what you know, but who you know. And then stretch that a tad more to say it’s really what “they know” that promotes a gain in productivity. “People Experiences” help our customers tap into the power and value of other people – each other – promoting intuitive, proactive knowledge sharing. It helps businesses build a more open, informed and proactive network – one that improves who knows who, and who benefits from what others know. We look forward to hearing what you think, Mark Full URL for the new blog if you need to copy/paste: https://blogs.office.com/2016/09/26/connect-to-expertise-and-content-with-new-people-experiences-throughout-office-365/
Searching private Office 365 Group files using Delve
Hi all, is there any update on when private group files will be visible in Delve? It has been "rolling out" for some time now on the http://fasttrack.microsoft.com/roadmap#R-31853, and according to https://office365.uservoice.com/forums/286611-office-365-groups/suggestions/10436289-allow-members-to-search-private-groups this capability was expected to be released by end of May. Also I noticed on the https://www.yammer.com/itpronetwork/#/Threads/show?threadId=709122014at least one user (TonyRedmond) has seen the capability. We are on first release however havent seen anything on this yet. Really keen to see it happen as I think the integration between Groups and Delve will really accelerate their usefulness and user adoption.'The traits of a modern IT professional' - Robert Crane MVP
Came across Robert Crane's blog post here: http://blog.ciaops.com/2017/03/the-traits-of-modern-it-professional.html and found some interesting quotes: ‘Services like Delve and Yammer have underlying intelligence to surface what a user needs to see based on their activity. There is nothing to configure with these underlying services, software just makes it so. Understanding this process and being comfortable with it is a must as there is now far too much information, from too many sources, for a single individual to be able to process it all.’ ‘Many IT Pros have failed to keep their IT knowledge current, to the point where most users know far more about the systems they use than resellers. This is because that IT Pros have not carved themselves out regular time to study, learn, update and use the latest in technology. It isn't hard to do, but the secret is to make it a deliberate practice, not something that you say you'll get around to and never actually do!’ Do you agree? Let me know your thoughts below!A healthy directory is a good directory
Azure Active Directory is critical to the good health of Exchange Online and the other Office 365 applications. However, as the years pass by, sometimes the data in the directory becomes a little… shall we say “tired”. Hyperfish is a new startup that aims to help organizations take control of their directory and ensure that the data is good. They have a free analysis tool available to start the ball rolling. You might like it! https://www.itunity.com/article/healthy-directory-good-directory-3577
