Turning Nonprofit Data Into Action: A Technical Guide to Power BI
Nonprofits generate data constantly — but it’s often scattered across Excel files, CRMs, survey tools, and program systems. Power BI provides a unified analytics layer that connects, cleans, models, and visualizes this data in a secure, scalable environment. It is part of Microsoft’s broader analytics stack designed to turn raw data into actionable insight. This guide dives deeper into the technical foundations required to build nonprofit‑ready analytics solutions. Power BI Architecture for Nonprofits Power BI consists of three core components: 1. Power BI Desktop Power BI Desktop is the primary authoring tool used to create data models and interactive reports. These reports are then published to the Power BI Service for sharing and collaboration. Used for: Data modeling (building semantic models) DAX calculations (measures and calculated columns) Visual design (interactive reports) Data transformation using Power Query 👉 Power BI Desktop overview 2. Power BI Service (Cloud) The Power BI Service is the cloud-based platform for collaboration, distribution, and consumption of analytics, enabling teams and stakeholders to securely access and interact with data insights Used for: Publishing reports from Power BI Desktop Sharing dashboards and reports Scheduled data refresh Row-Level Security (RLS) Workspaces, apps, and governance 👉 Get Started Creating in the Power BI Service - Power BI | Microsoft Learn 3. Power BI Gateway (Optional) The gateway ensures secure data transfer between on‑premises systems and Power BI cloud services. Used when connecting to on‑premises data sources (SQL Server, local Excel files, etc.). Acts as a secure bridge between cloud services and on‑premises data Enables scheduled data refresh and live (DirectQuery) connections Keeps sensitive data within your local network while enabling cloud-based analytics 👉 On-premises data gateway - Power BI | Microsoft Learn Core Data Preparation: Power Query Power Query is the data preparation and ETL (Extract, Transform, Load) engine behind Power BI. Capabilities: Connects to multiple data sources Cleans and reshapes data Creates repeatable transformation pipelines Supports hundreds of data transformations 👉 Power Query overview Power Query standardizes data and automates preparation workflows, reducing manual effort. Advanced Nonprofit Use Cases 1. Multi‑Program Outcome Dashboards Nonprofits often manage multiple programs with different metrics. Power BI enables unified reporting through: Star schema modeling Fact tables (attendance, outcomes, surveys) Dimension tables (participants, programs, locations) 👉 Star schema guidance: Understand star schema and the importance for Power BI - Power BI | Microsoft Learn 2. Donor Analytics With Predictive Insights DAX (Data Analysis Expressions) is a formula language used to create dynamic calculations and measures inside Power BI data models. Using DAX, AI visuals, and advanced analytics features, nonprofits can: Identify donor churn Analyze giving trends and likelihood Segment donors by behavior Calculate and track lifetime value 👉 DAX reference 3. Volunteer Workforce Analytics Track and optimize: Volunteer hours by skill Retention trends Training completion and effectiveness Event staffing gaps and workforce allocation 👉 Power BI HR analytics sample (workforce trends & attrition): Human Resources sample – Power BI 4. Grant Reporting Automation Power BI enables nonprofits to automate and standardize grant reporting processes, reducing manual effort and improving accuracy. Capabilities: Automatically refresh data using scheduled refresh in the Power BI Service Standardize reporting through reusable dashboards and report templates Automated export and distribution 👉 Configure scheduled refresh – Power BI 👉 Export and automate report delivery with Power Automate How to Build a Nonprofit Impact Dashboard (Advanced) Step 1: Build a Data Model Import data (Excel, SharePoint, SQL) Create core tables: FactOutcomes DimParticipant DimProgram DimDate Define one‑to‑many relationships between dimension and fact tables This follows a star schema approach, which improves performance, scalability, and reporting clarity. 👉 Power BI data modeling guidance Step 2: Create DAX Measures Example measures: Total Participants = COUNT(DimParticipant[ParticipantID]) Total Outcomes = SUM(FactOutcomes[OutcomeValue]) Outcome Rate = DIVIDE( [Total Outcomes], [Total Participants], 0 ) Active Participants = CALCULATE( DISTINCTCOUNT(DimParticipant[ParticipantID]), FactOutcomes[Status] = "Active" ) 👉 DAX reference Step 3: Build Visuals Use report visuals to present key metrics and patterns, then pin selected visuals to dashboards in the Power BI Service for executive-level monitoring. Cards → KPIs (total participants, outcomes) Line charts → trends over time Maps → geographic impact Matrix tables → structured reporting for funders 👉 Intro to dashboards for Power BI designers - Power BI | Microsoft Learn and Overview of Power BI reports - Power BI | Microsoft Learn Step 4: Publish and Automate Publish to Power BI Service Configure scheduled refresh Apply Row-Level Security Share dashboards with leadership, funders, and board members 👉 Configure scheduled refresh - Power BI | Microsoft Learn and Tutorial: Get Started Creating in the Power BI Service - Power BI | Microsoft Learn Final Thought Power BI gives nonprofits a modern, enterprise-grade analytics platform without requiring a full data engineering team. By combining: Structured data modeling Automated data preparation Strong governance practices nonprofits can transform fragmented data into clear, actionable insight that drives mission impact.Microsoft 365 Admin Center Video Overview
In this quick walkthrough, I guide you through the essentials of the Microsoft 365 Admin Center—perfect for nonprofit tech leads and new admins. Whether you're adding users, or managing licenses, this video simplifies the admin experience to help you get started with confidence.How to Turn Off Teams Notifications During Meetings
How to Turn Off Teams Notifications During Meetings (and Avoid Awkward Pop-Ups While Sharing Your Screen) Introduction: We've all been there—you’re sharing your screen in a Microsoft Teams meeting, and a chat notification pops up from a coworker, your manager, or even worse… your group chat. While Microsoft Teams doesn’t automatically suppress all notifications during meetings or screen sharing, you can take control of what appears and when. In this post, I’ll show you a few easy ways to keep notifications silent and off-screen while you're presenting, focusing, or just trying to stay distraction-free. Do Notifications Automatically Mute During Screen Sharing? Short answer: No. By default, Teams will still show toast (pop-up) notifications during meetings and even while you’re sharing your screen. That includes messages, reactions, and call alerts—unless you proactively change your settings. Option 1: Turn on Focus Assist (Windows Only) If you're on Windows, Focus Assist can automatically suppress notifications system-wide—including Teams. How to Use It: Click the notification icon in the bottom-right of your taskbar. Click Focus Assist until it shows "Alarms only" or "Priority only." OR go to Settings > System > Focus Assist to set rules like: Turn on automatically when duplicating your display During specific hours When using an app in full screen Note: Users can set up a rule to enable Focus Assist during meetings automatically from your calendar. Option 2: Use Teams’ Built-In Do Not Disturb Mode Click your profile picture in Teams. Set your status to Do Not Disturb. While DND is on, Teams suppresses all toast notifications. Want to still get alerts from your boss or a specific team? Go to Settings > Privacy > Manage priority access Add individuals whose messages will bypass DND Option 3: Mute Notifications Per Meeting (Temporary) If you just want to mute notifications for a short time: Go to Settings > Notifications Scroll to Meetings and Calls Set “Mute notifications during meetings and calls” to On ⚠️ This doesn’t always prevent all pop-ups, so DND is more reliable for screen sharing. Option 4: Close the Chat Window When Sharing If you’re only worried about chat pop-ups, consider: Closing the Chat pane before sharing your screen Sharing a specific window, not your entire desktop That way, even if a notification comes in, it won’t be shown to everyone watching. Quick Checklist Before You Present: Task Why It Helps Set Teams to "Do Not Disturb" Blocks all notifications Turn on Focus Assist (Windows) Mutes all pop-ups Share specific window, not full screen Limits what viewers see Close Chat pane in Teams Avoids preview messages showing up Mute notifications in Settings Extra layer of safety Conclusion Whether you’re leading a webinar, pitching a client, or just trying to focus in a meeting, managing Teams notifications is a small tweak that saves a lot of headaches (and awkward moments). Set up your preferences once—and thank yourself later.How to Switch Between Multiple Organizations in Microsoft Teams
Introduction: If you collaborate with multiple companies, clients, or nonprofits, you’ve likely been invited to more than one Microsoft Teams organization (aka “tenant”). While Teams is a powerful tool for collaboration, switching between orgs isn’t always intuitive—and can slow you down if you’re not set up properly. In this blog, I’ll walk you through how to manage and switch between multiple organizations in Microsoft Teams smoothly—on both desktop and mobile. What Is an "Organization" in Teams? Each Microsoft 365 account is tied to a single organization (or tenant). When you're added to another org’s Teams environment, you're technically a guest there. Teams allows you to toggle between these orgs, but the interface isn’t always user-friendly, and you can easily miss notifications or messages if you're not careful. How to Switch Organizations on Teams Desktop App Open Microsoft Teams (desktop or web). In the top-right corner, click on your profile picture. Under your name, you’ll see a list of all the organizations you’re a member of. Click the name of the org you want to switch to. Teams will reload in that environment. Note: Each time you switch, Teams refreshes—so it can take a few seconds. switched organization shown below Switching Orgs on the Teams Mobile App Tap your profile picture in the top-left corner. Under your name, tap the dropdown arrow to view other organizations. Select the org you want to access. Note: On mobile, switching is usually faster than on desktop, and it’s a good backup when you cannot access your computer. Other Tips for Managing Multiple Orgs ✅ Use the Web App in Parallel Open teams.microsoft.com in a browser for one org while using the desktop app for another. This is especially helpful if you're constantly jumping back and forth. 🔔 Don't Miss Notifications Teams doesn’t show notifications from orgs you’re not actively in. Use the Activity Feed in each org to catch up when you switch. On mobile, you can enable notifications for all orgs (Settings > Notifications > Accounts). 💼 Keep Track of Which Org You're In Customize your Teams theme for each org to help visually differentiate them. Add org initials or emojis in team names (if you’re an admin) to make switching less confusing. 🧹 Leave Orgs You No Longer Use If you’re no longer collaborating with a tenant, go to myaccount.microsoft.com/organizations and remove your access. 🧠 Bonus: Using Multiple Desktops or Profiles If you’re more advanced, consider: Creating browser profiles (Chrome/Edge) for each org. Running Teams in multiple desktop user accounts or Microsoft Edge side-by-side mode. Wrapping Up Switching orgs in Teams is a necessary evil for consultants, volunteers, and cross-org collaborators. With the right habits—like using browser tabs, enabling notifications, and customizing views—you can stay productive without missing a beat.Build a Custom CRM in a Weekend Using Microsoft Power Platform
Introduction You don’t need a massive budget or a team of developers to build a Customer Relationship Management (CRM) system. With Microsoft Power Platform, you can create a tailored CRM solution for your organization in just a weekend—no code required. Whether you’re tracking donors, clients, volunteers, or stakeholders, this guide walks you through the process using Power Apps, Dataverse, and Power Automate. Tools You’ll Use Power Apps (Canvas App) Dataverse (or SharePoint Lists if you’re on a tight budget) Power Automate (for workflows) Optional: Power BI for reporting Step-by-Step Guide 1. Define Your Core Entities Think about what you need to track: Contacts, Organizations, Interactions, Opportunities? Create a quick list of fields (e.g., Name, Email, Status, Last Contacted) 2. Set Up Your Dataverse Tables Go to Power Apps > Tables > New Table Create your entities and fields (e.g., Contact table with columns for name, email, and relationship status) 3. Build a Canvas App Use the Power Apps Canvas App from blank Connect it to your Dataverse tables Add screens for: Home/Dashboard Contact list (Gallery) Contact details/edit form Add new contact 4. Automate with Power Automate Example flow: “When a new contact is added, send a welcome email” Add flows for reminders to follow up, or flag inactive contacts Check out this blog for an example power automate flow creation Streamlining Non-Profit Operations with Power Automate Templates (Video Tutorial Included) | Microsoft Community Hub 5. Test and Share Share the app with your team 6. Use Security Roles in Dataverse to Manage Access Once your CRM is ready, you’ll want to control who can view, edit, or manage different parts of the system. That’s where Dataverse security roles come in. Here’s how to set them up: 1. Go to the Power Platform Admin Center Visit https://admin.powerplatform.microsoft.com Select the environment where your CRM lives 2. Open Security Roles Navigate to Environments > [Your Environment] > Settings Under Users + Permissions, click Security roles 3. Create a New Role Click + New role Name it something like CRM_ReadOnly, CRM_Admin, or CRM_Contributor Click Create 4. Set Table Permissions In the role editor, go to the Core Records or Custom Entities tab For each table (e.g., Contacts, Interactions), set permissions: Read = Organization (for full visibility) Create/Edit/Delete = User or None, depending on the role Example: A read-only user would have Read = Organization, and all other permissions set to None 5. Assign the Role to Users Go to Users + Permissions > Users Select the user(s) you want to assign the role to Click Manage roles, check your new role, and click Save 6. Test It Out Have the user log in and confirm they can only access what they’re supposed to Pro Tips: You can assign multiple roles to a user—permissions are cumulative Use Teams in Dataverse to manage access for groups For sensitive fields (like donation amounts), use Field-level security Use Business Rules in Dataverse to add logic without code (e.g., auto-fill fields) Theme the app to match your org’s branding Version it: Save iterations as you go, especially before big changes Final Thoughts This type of solution is ideal for teams that have outgrown spreadsheets but don’t want the cost or complexity of traditional CRM tools. With the Power Platform, you’re in control of the features, experience, and data—and you can iterate fast.SharePoint and Power Apps: Managing Roles and Permissions
One of the key aspects of SharePoint security is managing permissions at the list or item level, which allows you to control who can view or edit the data. This granular control is essential for maintaining the integrity and confidentiality of sensitive information within your organization. By effectively managing permissions, you can ensure that only authorized personnel have access to specific data, thereby reducing the risk of unauthorized access. Whether you choose to restrict access to the entire list for simplicity or use item-level permissions for more advanced scenarios, SharePoint provides the tools you need to keep your data secure. Restrict Access to the Entire SharePoint List This happens in SharePoint itself, not Power Apps. You need to manage permissions at the list or item level: Go to your SharePoint site > Open the List. Click on the gear ⚙️ > List settings. Under Permissions and Management, click Permissions for this list. Stop inheriting permissions (click the ribbon command: Stop Inheriting Permissions). Remove default access groups (like "Members" or "Visitors"). Add a specific SharePoint group or individuals who should have full access —an admin or manager, not end users. End users will only interact with the list through Power Apps — they don’t need direct list access. Please keep in mind that if users need to edit entries, they must have access to the list. Without proper permissions, they won't be able to see or edit the list. The next user permissions option is ideal for users who need to edit their own entries. Use Item-Level Permissions in SharePoint This is only advisable if you can enforce it consistently: Go to List settings > Under Advanced settings. Scroll to Item-level Permissions. Choose: ✅ Read access: Only their own ✅ Create and Edit access: Only their own This works well only if users are submitting forms (e.g., time-off requests) that shouldn’t be visible to others. Prevent Users from Viewing or Editing Power App Code This is configured through Power Apps and Microsoft Admin Center. Limit Who Has Access to Edit the App In Power Apps Studio: Go to File > Share. Remove or do not add users as Co-owners. Instead, share as Users only — give them “Can use” permission. Use Environment Roles (Dataverse or Environment Scope) In the Power Platform Admin Center (https://admin.powerplatform.microsoft.com): Go to Environments > Click your environment > Security roles. Set roles so users: Are not Environment Admins or Makers. Only have User roles in production environments. Summary of What to Check: Task Where Goal Limit list access SharePoint List Settings Prevent users from directly viewing data Use item-level permissions SharePoint Advanced Settings Let users only see/edit their own submissions Limit app editing Power Apps Share Panel Ensure only owners can edit Secure environment roles Power Platform Admin Center Block access to Maker/Admin capabilitiesAzure Document Intelligence - How to Extract Data from PDFs and Scanned Files
Imagine this: your nonprofit receives dozens—maybe hundreds—of forms every month. Volunteer sign-ups, program applications, donation forms, surveys. Now imagine you could automatically extract the data from those documents, no matter the layout, and drop it neatly into a spreadsheet or database—with zero manual entry. That’s not a dream. It’s Azure Document Intelligence in action. Whether you're processing handwritten forms, structured PDFs, or invoices from partner organizations, Document Intelligence can turn them into actionable data in minutes. Let’s walk through what it is and exactly how to get started—no coding required. In 2025, Microsoft now offers two ways to work with this tool: the new Azure AI Studio (also known as Foundry) or the original Document Intelligence Studio. Both are currently available, but AI Studio is the direction Microsoft is heading. 📄 What Is Azure Document Intelligence? Azure Document Intelligence is a service that uses AI-powered optical character recognition (OCR) to: Analyze and extract text, tables, and key-value pairs from documents Understand form structure (even if layout varies) Turn scanned documents or PDFs into structured data You can use prebuilt models (like invoice or receipt recognition),or train a custom model to understand your own document types. 🛠️ How to Use Azure Document Intelligence to Read Forms ⚡ Option 1: Use the New Azure AI Studio (Recommended) Azure AI Studio (formerly Azure AI Foundry) is Microsoft’s unified interface for working with AI-powered services like Document Intelligence. This is the platform that will eventually replace Document Intelligence Studio. 🔹 Step 1: Go to Azure AI Studio Sign in with your Azure account. 👉 https://ai.azure.com Choose Build a solution → Document Intelligence. If it’s your first time, you’ll be prompted to create a new project. 🔹 Step 2: Set Up the Document Intelligence Resource Select your Azure subscription, region, and resource group. Name your project (e.g., volunteer-forms). You’ll be issued: An Endpoint URL An API key Note: Keep these for later—they’re required for API calls or Power Automate connections. 🔹 Step 3: Upload and Train Your Model Upload sample forms (PDFs or images). Label fields like name, email, and date. Train a custom model using at least 5 of more example situations. Test and view your results in structured format within the testing pane. 🔹 Step 4: Use the Data Export to Excel or JSON. Connect to Power Automate, Power Apps, or your CRM via API. Check out this blog to see more on the Azure AI Foundry and a video walkthrough of the platform Build, Deploy, & Manage AI with Azure AI Foundry | Microsoft Community Hub 🧭 Option 2: Use Document Intelligence Studio (Legacy Interface) Step 1: Set Up the Document Intelligence Resource in Azure Go to the Azure Portal. Click Create a resource. Search for Document Intelligence (formerly Form Recognizer) and select it. Click Create and fill out the basics: Subscription: Choose your nonprofit subscription. Resource group: Use an existing one or create a new one. Region: Choose the region closest to you. Name: Something like doc-intel-demo. Pricing tier: Choose Free F0 if you're testing (limited pages/month), or Standard if using your credits. Click Review + Create > Create. Step 2: Use the Document Intelligence Studio This is the visual, no-code interface for trying out Document Intelligence. Visit Document Intelligence Studio. Log in with your Azure account. Click Get started. On the left, click Models > Custom model > Build a model. Paste in your Endpoint and Key from the Azure portal. Choose Create project and fill in: Project name (e.g., VolunteerFormsModel) Storage container: You’ll need a Blob Storage account with your forms uploaded (see next step). Source: Select the folder with your form samples. Step 3: Upload Your Forms to Blob Storage In Azure, create a Storage Account if you don’t have one already. Go to Containers and create a new container (e.g., forms-training). Upload 5–10 sample forms of the same type. These can be PDFs, scans, or images. Make sure the forms are consistent in layout (for best results). In Document Intelligence Studio, link this container to your project. Step 4: Label the Forms Once your forms are uploaded, start labeling fields (like Name, Date, Email). The AI will try to guess some fields—confirm or correct them. Do this for 5+ documents to train the model. Click Train model once labeling is complete. Step 5: Test the Model After training, go to Test model. Upload a new, unlabeled form and run the model. Watch as it extracts structured data like: Name: Jane Doe Email: jane@example.org Program Interest: Youth Mentoring Review the output in JSON or table format. Step 6: Export or Use the Results You can: Export the data to Excel Connect via API to feed into a database or CRM Use Power Automate to automate workflows (like adding entries to SharePoint or sending confirmation emails) check out the blog below to see up the workflow ➡️Automate the Busywork: How Nonprofits Can Use Power Automate to Extract and Process Form Data | Microsoft Community Hub Real-World Nonprofit Use Cases Here’s how nonprofits are using Document Intelligence right now: Digitizing intake forms for case management Automatically processing volunteer applications Scanning paper surveys into Excel Extracting info from grant agreements or invoices Final Thoughts Azure Document Intelligence makes what used to be tedious—scanning and retyping forms—quick, intelligent, and scalable. Once set up, it can save your nonprofit hours of manual entry each week and reduce human error. ➡️Automate the Busywork: How Nonprofits Can Use Power Automate to Extract and Process Form Data | Microsoft Community Hub📢New in Microsoft Teams: Introducing Storyline – A Fresh Way to Share Updates & Stay Connected
Microsoft Teams has just rolled out a new feature that blends professional updates with a social media twist—meet Storyline. With hybrid work here to stay, staying visible and connected across distributed teams is more important than ever. That’s where Storyline comes in—a space within Teams where you can share posts, articles, and updates just like you would on LinkedIn or Yammer, but directly inside your organization. Here’s what you need to know. What is Storyline in Microsoft Teams? Storyline is a personal feed designed to help users: Share professional updates and experiences Follow leaders and coworkers for insights and news Create content that others in the organization can engage with Unlike chats or Teams channels, Storyline is tied to individuals, giving you a dedicated space to share your work wins, reflections, lessons learned, or even shout-outs to teammates. 🛠️Key Features Follow Updates in Activity You can follow coworkers and leaders in your org, and their Storyline posts will appear in your Activity feed—just like posts on a social platform. Post Articles and Updates Have something to share? Storyline lets you create posts (similar to blog updates or short articles) that reach your audience and followers across the company. Your Storyline = Your Self Chat Your Storyline content is viewable in your chat with self—a neat way to reflect on your personal journey or manage your posts in one place. 💡Why It Matters Storyline brings a new layer of internal visibility to Teams. Whether you’re: A manager sharing leadership updates A teammate highlighting project progress A new hire reflecting on onboarding Storyline helps you build a digital presence and stay connected with your org beyond meetings and team channels. Getting Started Once enabled by your IT admin, you’ll see a prompt like the one above in your Teams app. Just click “Got it” to activate and begin sharing. 🔒Admin Tip: Managing Storyline for Your Org Admins can control Storyline availability in the Microsoft Teams Admin Center. If you're not seeing the option, check with your IT team—it may need to be enabled. Manage and set up storyline in Viva Engage Manage Viva Engage experiences in Microsoft Teams Final Thoughts Storyline brings a lightweight, human-centered way to share knowledge, updates, and personal growth moments across the organization. Think of it as your internal LinkedIn wall—right inside Teams. Try it out, follow a few teammates, and make your first post. Your future self (and your coworkers) will thank you.Build, Deploy, & Manage AI with Azure AI Foundry
Microsoft's Unified AI Development Platform Imagine an Enterprise organization with multiple departments which need to create new AI solutions to streamline operations while boosting customer experience. Each has different objectives and goals they are trying to achieve with AI. Marketing wants to analyze customer engagement on social media, Finance aims to spot fraud, and Operations plans to predict when machines need repairs. Teams have different subscriptions, resource groups, storage, etc. per department. Resource management can be tedious to say the least while sharing data safely, with the added complexity of provisioning things accurately. That is where Azure AI Foundry comes in. Azure AI Foundry is a unified platform allowing organizations to have a centralized hub where they can manage their AI development with the tools and features they need. Nonprofits can now step into the world of AI and build their own solutions for their organization and the communities they serve. Azure AI Foundry is accessible to developers and beginners alike, making AI implementation cost-effective for organizations of any size. In this blog we will cover How you can get started with Azure AI Foundry. Before we begin, there are some prerequisites that need to be made before you start your journey. Prerequisites & Azure Role Based Access Control (RBAC) Acquiring an Azure Account Azure AI Foundry is integrated into Microsoft’s Azure cloud infrastructure. To use the platform, you will need an Azure Account. You need to be assigned the role of Owner or have your administrator assign you the appropriate role. You can learn more about Azure AI Foundry roles in the Role Comparison Between Foundry Projects and Hub Based Projects. Nonprofits can take advantage of Microsoft’s Nonprofit $2000 Azure Sponsorship Credit Subscription. You will need to be an approved participant of Microsoft’s Nonprofit Offers Program. To learn more about how you can get started please see the following blogs: Getting Signed Up with Microsoft Nonprofits Program | Microsoft Community Hub Claiming Azure Credits | Microsoft Community Hub Azure Role Based Access Control (RBAC) Access Control and identity management are crucial steps in safeguarding your sensitive data. Organizations that deal with global privacy compliance standards understand the necessity of securing and hardening their environment. Microsoft aims to empower clients with security tools and measures built in Azure to help secure access to their resources. One of these tools is Microsoft Entra ID (formerly known as Azure Active Directory) which applies built-in roles with limited access and permissions to resources based on their job function, known as Role Based Access Control (RBAC). This follows a security principle called The Principle of Least Privilege. For example, a Business Analyst may need access to Customer Relationship Management software (CRM) to record interactions with stakeholders, allocate budgets, and manage financial records. The Business Analyst would need administrative access related to worked performed. However, they would not need access to creating resources such as virtual machines since that is out of the scope of their role. This ensures security best practices to prevent access to highly sensitive data. Azure AI Foundry has roles designed for developers, managers, and users. By assigning specific roles, such as reader or manager, organizations can ensure that only authorized individuals can view or modify critical AI tools and data. Keep this in mind when granting access to users. Below is a comparison of the features and capabilities of the two project types within Azure AI Foundry: Foundry Project and Hub Based Project. Disclaimer: Some roles may limit functionality in the Azure AI Foundry portal. For example, if a user cannot create a compute instance, that option will not appear in the studio. This prevents access denied errors. Types of Projects Foundry Project Hub-based Project Built on Azure AI Foundry resource Agents Azure AI Foundry Models Azure AI Foundry API Agents Project files (upload and start experimenting) Project-level isolation of files and outputs Evaluations Playground Hosted on Azure AI Foundry Hub Agents (preview) Create if features are not available in Foundry project Azure AI Foundry Models (Connections) Azure AI Foundry API Agents (Connections) Project-level isolation of files and outputs Evaluations Playground Prompt flow Managed compute Azure Storage account & Azure Key Vault Role Comparison Between Foundry Project & Hub Based Project Foundry Project Azure AI User: Azure AI User This role grants reader access to AI projects, reader access to AI accounts, and data actions for an AI project. This role is automatically assigned to the user if they can assign roles. If not, this role must be granted by your subscription Owner or user with role assignment privileges. Azure AI Project Manager: Azure AI Project Manager This role lets you perform management actions on Azure AI Foundry projects, build and develop projects, and grants conditional assignment of the Azure AI User role to other user principles. Azure AI Account Owner: Azure AI Account Owner This role grants full access to managing AI projects, accounts, and grants conditional assignment of the Azure AI User role to other user principles. Hub-Based Project Owner: Full access to the hub, including the ability to manage and create new hubs and assign permissions. This role is automatically assigned to the hub creator Contributor: Users have full access to the hub, including the ability to create new hubs, but cannot manage hub permissions on the existing resource. Azure AI Administrator (preview): This role is automatically assigned to the system-assigned managed identity for the hub. The Azure AI Administrator role has the minimum permissions needed for the managed identity to perform its tasks. For more information, see Azure AI Administrator role (preview). Azure AI Developer: Perform all actions except create new hubs and manage the hub permissions. For example, users can create projects, compute, and connections. Users can assign permissions within their project. Users can interact with existing Azure AI resources such as Azure OpenAI, Azure AI Search, and Azure AI services. Azure AI Inference Deployment Operator: Perform all actions required to create a resource deployment within a resource group. Reader: Read only access to the hub. This role is automatically assigned to all project members within the hub. Playgrounds, Agents, & Models Oh My! Model Catalog Investing in AI can be expensive, from overhead to capital expenditure. Adoption and development can be costly for many organizations with tight budgets. Nonprofits that want to venture in AI development are met with the challenge of balancing budget with performance and navigating the ever-evolving AI landscape. Nonprofits need the ability to evaluate and test drive models before making the major investment to develop AI projects. Azure AI Foundry now makes it easy to compare models and benchmarks for the latest AI models. Choose from a comprehensive collection of models from Open AI, Meta, Mistral, Grok, Cohere, and more. Track your model's quota usage to stay within limits. Fine-tuned AI Models Create tailored experiences with fine-tuned AI models by utilizing base models from Azure AI Foundry and adapting your own data to create an experience to cater to your audience. For nonprofits and businesses alike, fine-tuned models offer a practical path to maximize impact without the need for intensive computational resources or expertise. Whether optimizing for customer support, document summarization, healthcare analysis, or content generation, fine-tuning ensures AI solutions are more effective and aligned to user needs. Playgrounds Playgrounds are a workspace where you can work on GPTs, Assistants, Real-time audio, Images, and Completions. Playgrounds are a great way to test and compare models before making a full commitment to adopting them. Built-in tools let you quickly benchmark and evaluate what works best with your needs. You can choose from a variety of the latest models from OpenAI and third-party vendors. Setup is made simple with just a few clicks by picking your model. Chat: A chat playground lets users work with AI chat models in real time. Assistants: The Assistants’ playground is designed for experimenting with AI-driven assistants tailored to a wide range of tasks. Real-time audio: The Real-time Audio playground provides an interactive space to experiment with advanced audio-based AI models. Images: The Images playground offers an intuitive environment for working with state-of-the-art image generation and analysis models. Completions: The Completions playground allows users to test text generation models by providing prompts and adjusting settings for tasks such as content creation, summarization, or code generation. As you can see, you have many options to choose from. Create agentic bots for customer interactions or develop a chatbot for end users using specific organizational knowledge such as FAQs and documents with citations. The sky is the limit, with Azure adding new features and capabilities to improve user experience. Developers can also get started with templates and use IDEs like Visual Studio and Visual Studio Code. Now, let us talk about how you can integrate your data to refine and improve your workflows. In the next section we will discuss how you can connect your data to your customized solutions. Connecting Data Sources Connecting your data storage to Azure AI Foundry’s playground assistants, fine-tuned models, batch pipelines, and evaluation workflows is direct and straightforward. You can link storage accounts, databases, Azure blob storage, uploaded files, and Azure AI Search to supply datasets for training, testing, or real-time use. Built-in connectors and APIs make integration simple, while role-based permissions control access. Data lineage and versioning help track and manage information, ensuring your assistants and models use accurate, reliable inputs before applying additional security and governance tools. Compatible Storage Types Azure Blob Storage Azure AI Search Azure Cosmo DB for Mongo DB Uploaded Files URL/ Web Address JSON Governance & Security Azure AI Foundry provides tools to ensure the security of projects. One such tool is Role Based Access Control (RBAC), which we spoke about early. However, Azure AI Foundry integrates a security framework designed to protect sensitive data and comply with industry standards. It employs a combination of tools, governance controls, and continuous monitoring to assist organizations in developing AI solutions securely. Users can set up controls like content filters and block lists. Security recommendations are available through Windows Defender XDR integration, offering protection against data leakage, data poisoning, jailbreaks, and credential theft. Additionally, compliance policies from Microsoft Purview help maintain security measures. Security & Governance Features Compliance Security Framework Private Endpoints & Network Isolation Role Based Access Control Guard rails & Controls Data Encryption Microsoft Purview Defender XDR Integration Taken together, robust governance and security features offer organizations peace of mind, ensuring that their AI projects are not only innovative but also responsibly managed and protected against emerging threats. As organizations scale their AI initiatives, understanding and managing resource usage becomes equally important. This is where quotas come into play, helping teams allocate resources efficiently and maintain optimal performance as they build and deploy AI solutions. Managing Token Quotas Azure AI Foundry provides comprehensive tools that empower teams to monitor and manage token quotas across a diverse range of model consumption patterns. Whether your workloads are categorized as Global standard, Global provisioned, Global batch, Data zone standard, Data zone provisioned, Data zone batch, standard, or Regional, the platform allows for granular visibility into resource allocation and consumption. This centralized tracking ensures that organizations can proactively identify usage bottlenecks, optimize deployment strategies, and stay within defined limits, all while supporting efficient scaling and sustaining high performance for their AI solutions. How to Get Started Get started by visiting Azure AI foundry at https://ai.azure.com. Begin leveraging Azure AI Foundry, organizations should first explore the platform’s intuitive interface and robust documentation, which offer step-by-step guidance for onboarding teams of any size. Users can discover a suite of developer SDKs, prebuilt templates, and ready-to-deploy chatbot solutions that expedite the setup process. Engaging with these resources enables teams to rapidly prototype, customize, and scale AI solutions according to their unique requirements. Additionally, organizations are encouraged to take advantage of the extensive educational content and support channels provided, ensuring a smooth transition from initial exploration to full-scale AI deployment. With these tools and resources at their fingertips, teams can confidently embark on their AI journey, transforming innovative ideas into impactful outcomes. Hyperlinks Introducing Azure AI Foundry - Everything you need for AI development Build your own copilot with Azure AI Studio (Part 1) | Microsoft Learn Role-based access control in Azure AI Foundry portal - Azure AI Foundry | Microsoft Learn QuickStart: Get started with Azure AI Foundry - Azure AI Foundry | Microsoft Learn How to configure a private link for an Azure AI Foundry hub - Azure AI Foundry | Microsoft Learn Azure OpenAI Service - Pricing | Microsoft AzureIntroduction to Microsoft Copilot Pages
Microsoft Copilot Pages is a feature within Microsoft 365 that leverages AI to help users create, manage, and collaborate on documents more efficiently. It integrates with various Microsoft 365 apps like Word, Excel, and SharePoint, allowing users to generate content, automate repetitive tasks, and enhance productivity through AI-driven suggestions and automation. Steps to Create a Copilot Page Access Microsoft 365 Copilot: Sign into https://microsoft365.com/copilot with your work or school account. This is for individuals who are Utilizing Copilot through an organizational account with a Business or Enterprise License, it is currently not available for personal accounts. Initiate a Copilot Chat: Open the Copilot Chat interface. Start a new conversation by specifying your requirements. For example, you can prompt Copilot with: “Create a Project Overview’ based on deliverables with Customer X include sections for Introduction, Goals, and Timeline.” After Copilot’s response, there is a Pages Icon. Select Edit in Pages There is also the ability to add to an existing page Edit and Refine: Once Copilot generates the content, you can edit and refine it directly within the page. Use the dynamic canvas to make real-time adjustments and ensure the content meets your standards. Continue editing and talking with Copilot, and each new response will be added to the page. (I.e. “Add a table with Name, Task Assignment, and Due Date for the project deliverables”) Collaborate and Share: Share the page with your team through Teams, Outlook, or the Microsoft 365 app. Collaborate in real-time, seeing everyone's contributions and making necessary adjustments. Save and Reuse: Your pages will be saved unless you delete them. You can revisit and reuse the content for future projects or assessments. Microsoft Documentation on Copilot Pages For more detailed information and official documentation, you can refer to the following resources: Introducing Microsoft 365 Copilot Pages Create Pages with Copilot in SharePoint
