4 ways ISVs like Mural increase revenue and retain customers on Microsoft Teams

4 ways ISVs like Mural increase revenue and retain customers on Microsoft Teams

by | Apr 10, 2023 | Business, Microsoft 365, Technology

This article is contributed. See the original author and article here.

In this post, we’ll dive into the impressive results at Mural, and share four ways other ISVs can attract customers, win more deals, and scale business on Microsoft Teams.

The post 4 ways ISVs like Mural increase revenue and retain customers on Microsoft Teams appeared first on Microsoft 365 Blog.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.

Develop Applications that use Sites.Selected permissions for SPO sites.

Develop Applications that use Sites.Selected permissions for SPO sites.

by | Apr 7, 2023 | Technology

This article is contributed. See the original author and article here.

Develop Applications that use Sites.Selected permissions for SPO sites. 


 


Microsoft Graph APIs have improved consistently over the years.


 


In 2021, one highly demanded feature, Application Only or granular access to individual site instead of whole tenant, was implemented, this scope is called “Sites.Selected”.


 


Initially, for this scope, there are two permission levels that can assigned to the Applications, “read” and “write.”


 


Some customers found there are management tasks cannot be executed with even “write” permission level. To address that, “fullcontrol” and “manage” permission level was added this year.


 


Here are the steps to implement App Only Sites.Selected permissions:


 


Step I, Register AAD Application in Azure Portal, https://portal.azure.com, and let’s call this Application “Target Application”.


 


Please see these articles for details:
Quickstart: Register an app in the Microsoft identity platform – Microsoft Entra | Microsoft Learn
Tutorial: Register an app with Azure Active Directory (Microsoft Dataverse) – Power Apps | Microsoft…


Once you registered the Target Application, copy below information to a text file:
Display name: Contoso Time Manager App
Client Id: d806f38b-a107****-1ec8e90c8ccc
Client Secret: XZW8Q*****855JDEw1cxP
Directory(tenant) ID: 31********95c59c1b


 


Step II, Give Target Application the permission for Graph API and/or SharePoint API in Azure Portal depending on whether you will access the site resource with
Graph API, like, https://graph.microsoft.com/v1.0/…
or SharePoint Rest API, like, https://contoso.sharepoint.com/sites/demo/_api/…
 


If you need to use Graph API to access SharePoint, you give Graph API permissions.


SPDev_Support_0-1680913069759.png


 


If you need to use SharePoint APIs, for example, SPO Rest API, SPO CSOM, you give SharePoint API permissions.


SPDev_Support_1-1680913069765.png


 


Step III, Use Graph API endpoint listed in this article, https://learn.microsoft.com/en-us/graph/api/site-post-permissions?view=graph-rest-1.0&tabs=http , to assign Target Application the permission to specific SharePoint Online site.


 

POST https://graph.microsoft.com/v1.0/sites/{sitesId}/permissions
Content-Type: application/json{ 
 "roles": ["write"],
 "grantedToIdentities": [{
    "application": {
      "id": "89ea5c94-7736-4e25-95ad-3fa95f62b66e",  //Target Application’s Client Id
      "displayName": "Contoso Time Manager App"       //Target Application’s Display name
    }
  }]
}

 


 


The import thing is, to do that, you need to have another Application which has Sites.FullControl.All permission for Graph API, then you get an App Only AccessToken with this Application’s identity and you can make above call with Authorization Header, the value is “Bearer {tokenvalue}”.


 


Below is Fiddler Trace of the Graph API call to assign permission for the target Application:


SPDev_Support_2-1680913069776.png


 

POST https://graph.microsoft.com/v1.0/sites/fb1e20f2-56fc-4eb7-ae1d-a97804d224e2/permissions HTTP/1.1
Authorization: Bearer eyJ0eXAiOiJKV8CJY2R……………qtlW1WoBXu3fdR8G7R-
Accept: application/json
User-Agent: NONISV|SharePointPnP|PnPCore/1.11.2.0 (Microsoft Windows NT 10.0.22621.0)
Content-Type: application/json
Host: graph.microsoft.com
Content-Length: 132

{"roles":["write"],"grantedToIdentities":[{"application":{"id":"ea5f05ef-2a5c-418b-b679-0380b3e83fd3","displayName":"aadAppOnly"}}]}

 


Now, your Target Application has been given the permission to the specific site successfully!


 


If you have chosen Graph API Sites.Selected Application permission, you can use Graph API to access the site.


 


If you have chosen SharePoint Sites.Selected Application permission, you can use SharePoint Rest API or CSOM to access the site.


NOTE, For SharePoint APIs, you cannot use just client secret to do the authentication, you have to setup certificate to gain Access Token.


 


A. Graph API Test Run:


 


To Test the access to specific site, you can use following sample PowerShell script to get App Only Access Token and retrieve the site with Graph API, see reference https://learn.microsoft.com/en-us/graph/api/site-get?view=graph-rest-1.0&tabs=http


 

#AAD AppOnly for Graph API
$tenantId="{tenantId}"
$aadClientId = "{clientId}"
$aadClientSecret = "{clientSecret}"

$scopes =  "https://graph.microsoft.com/.default"
$loginURL = "https://login.microsoftonline.com/$tenantId/oauth2/v2.0/token"
$body = @{grant_type="client_credentials";client_id=$aadClientId;client_secret=$aadClientSecret;scope=$scopes}

$Token = Invoke-RestMethod -Method Post -Uri $loginURL -Body $body
$Token.access_token  #expires after one hour
$headerParams  = @{'Authorization'="$($Token.token_type) $($Token.access_token)"}
$headerParams

#Graph API call to get site
Invoke-WebRequest -Method Get -Headers $headerParams -Uri "https://graph.microsoft.com/v1.0/sites/contoso.sharepoint.com:/sites/demo"

 


Response:


 


SPDev_Support_3-1680913069781.png


 


If you try to access another site that permission has not been given to, you will get error (403) Forbidden.:


SPDev_Support_4-1680913069784.png


 


B. SharePoint API Access:


 


To make App only SPO REST and CSOM calls, you will need to generate certificates and upload the public key (.cer file) to Azure – App Registration – App – Certificates & secrets:


 


SPDev_Support_5-1680913069787.png


 


The simplest test script using PnP commands: Reference: Connect-PnPOnline | PnP PowerShell

$aadClientId = "*"
$SiteURL = https://contoso.sharepoint.com/sites/demo
$secure = ConvertTo-SecureString "***" -AsPlainText –Force

Connect-PnPOnline -Url $SiteURL -CertificatePath c:..test.pfx -Tenant contoso.onmicrosoft.com -ClientId $aadClientId  -CertificatePassword $Secure   

Get-PnPSite

​


In other programming languages, you can use MSAL library to get the App Only Access Token with certificate through client credential flow, then you can attach that Token for the web requests, see reference: https://learn.microsoft.com/en-us/azure/active-directory/develop/sample-v2-code.


 

Intuitive Improvements to Dynamics 365 Guides

Intuitive Improvements to Dynamics 365 Guides

by | Apr 7, 2023 | Technology

This article is contributed. See the original author and article here.

Annotate from fingertips.jpg


 


Microsoft aims to make mixed reality accessible and intuitive for frontline workers everywhere. With Dynamics 365 Guides, deskless workers use step-by-step holographic instructions to ensure process compliance, improve efficiency, and learn on the job.


 


In 2022 Teams capabilities were integrated into Guides, allowing users to collaborate with anyone anywhere in the world seamlessly. This enabled calling through the HoloLens 2 – allowing the remote participant (or participants, if on a group call) to “see-what-I-see” through the HoloLens user’s eyes. They can see what is happening in real-time, annotate in their colleagues’ 3-dimensional space, and share relevant files easily.


 


We’ve just released another set of features in Guides to make this new experience even more intuitive and reliable.


 


Digital annotations on surfaces and 3D space.jpg


Draw anywhere with better annotations!


Imagine being able to point anywhere in your plant or facility and draw on any object, any surface, or anywhere in space to instantly show someone not only where to look but also how a physical object might look in that space. The possibilities for this feature don’t stop there.


 


On Dynamics 365 Guides and Remote Assist, an expert (working on a PC or mobile device) can draw in your world in 3D. As the frontline worker wearing the HoloLens, you can also draw on your space in digital ink. Traditionally, the HoloLens user could draw on a flat or semi-flat surface some ways off in the distance. With our recent annotation improvements, the HoloLens user can now draw anywhere in space in 3D.  These drawings stick where they are added in the space and remain still. Users can walk around them and view them from different angles. We’ve brought similar improvements to annotating on surfaces so that the ink stays where intended, regardless of whether the user changes location or position. This means that for the HoloLens user, your entire world is now inkable, allowing you to annotate and share in real time.


 


Mixed Reality Teams calls


With Dynamics 365 Guides, the HoloLens user now has more pre-join settings when joining a Teams call. Before entering the call, the user can opt to toggle on/off video and can choose whether to mute themselves. As before, users can also toggle these settings once they are in the meeting. In spaces where confidentiality is core, this allows the frontline worker to use the HoloLens as their main calling device – without compromising on security.


 


We’ve also recently added restricted mode features, which enable your admin to restrict who can log on to the device and make calls, further driving our efforts to help you keep your company and your information secure.


 


Toggle video on or off before joining a call.jpg


 


Linking to Guides from within a Guide


Navigating through the steps of a guide is as intuitive as paging through a document or scrolling through a file, but what about links to jump from one file to another? We’ve added the ability to link directly from one guide to another by linking the new guide in an action step. This makes navigating between different sets of training materials or guides as easy as jumping to a new web page from a hyperlink. Learn the details of all our recent additions in Guides release notes.


 


What’s Next?


Stay tuned for more updates coming soon as we continue to build on the intuitive and frontline worker-focused features for Dynamics 365 Guides!


 


 


 

Update: Deprecation of Client Access Rules in Exchange Online

Update: Deprecation of Client Access Rules in Exchange Online

by | Apr 7, 2023 | Technology

This article is contributed. See the original author and article here.

Last September, we announced the deprecation of Client Access Rules (CARs) in Exchange Online. CARs allow admins to control which devices can access their organization’s mailboxes. It was introduced in 2017 as a way to provide granular access control based on client properties such as IP addresses, protocol, or application.


In October 2022, we disabled CARs cmdlets for tenants that were not using CARs. This was done to reduce the complexity and confusion around CARs and to encourage the adoption of newer and more secure features like Azure Active Directory (AAD) Conditional Access and Continuous access evaluation (CAE).


We have been working with customers to learn how they use CARs and how they can migrate to these newer features, but we have encountered a few scenarios where it’s not possible to migrate current rules. For these scenarios, we will allow the use of CARs beyond the previously announced September 2023 deadline until we can support them.


We understand that migrating from CARs to Conditional Access and CAE requires some planning and testing, and we are here to help you with this process. If there is a technical reason preventing you from migrating your CARs, please open a support ticket so we can investigate and understand your needs.


Our updated CARs deprecation timeline is as follows:


CARsUpdate01.jpg


Resources



The Exchange Team

2023 wave 1 releases AI, automation, and analytics in Microsoft Dynamics 365 Finance and Project Operations

2023 wave 1 releases AI, automation, and analytics in Microsoft Dynamics 365 Finance and Project Operations

by | Apr 6, 2023 | Dynamics 365, Microsoft 365, Technology

This article is contributed. See the original author and article here.

We surveyed more than 500 CFOs and senior business leaders for our 2023 Future of Finance Trends Report and found that many organizations continue to struggle with lack of IT resources, overwhelmed employees, and disconnected systems. In fact, while 79 percent outlined that they were shifting to owning business model innovation and empowering transformation across the organization, 88 percent said they don’t have the IT resources or tools needed to drive operational efficiency and minimize busy work for their teams. Finance, human resources (HR), and project operations leaders need to reimagine processes to help their teams achieve more, faster. 

With the 2023 release wave 1, we are delivering enhancements across Microsoft Dynamics 365 Finance, Dynamics 365 Project Operations, and Dynamics 365 Human Resources that focus on helping our customers adapt faster, work smarter, perform better, and operate more sustainably.

Adapt faster with simplified financial consolidations and close

Financial reporting and closewhether year-end, quarterly, or monthlycan be challenging for finance teams as they must quickly aggregate data from across the organization and handle the close and consolidation process on time without compromising accuracy. With these latest updates to Microsoft Dynamics 365, we are further streamlining the close process while improving speed and accuracy, enabling organizations to adapt faster to changes.

Improved speed and accuracy

With these latest updates, we’re providing new features that take the hassle out of recording certain types of transactions, improving speed and accuracy. 

Changes in exchange rates cause the book value of open transactions in foreign currencies to vary over time. Recording these fluctuations accurately at a granular level is incredibly important, yet it’s difficult in practice. Our updated currency revaluation posting profile enables finance teams to post currency revaluation adjustments per currency and module. Accounts payable and accounts receivable subledgers are updated automatically to reflect the unrealized gain or loss, helping to ensure these adjustments are accurately recorded.

Similarly, determining how certain transactions, such as the disposal of a fixed asset as a scrap, should be recorded can be complicated. Elimination of these transactions affects balance sheet accounts, such as acquisition adjustment, depreciation adjustment, revaluation, and write-up and write-down accounts, so recording these adjustments accurately is incredibly important. These latest updates provide options that allow you to determine the posting details of fixed asset disposal scrap/sale based on your business needs.

More granular tracking and reporting

While businesses need to quickly consolidate financial data to close their books, it is also essential that they have sufficient granularity in their reporting to provide finance leaders with the visibility they need to drive strategic decisions. 

After transactions are posted, it’s common for organizations to require visibility into subledger data so that certain transactions can be analyzed. With this update, we are including new ways to define financial tags. Financial tags let organizations track user-defined fields on accounting entries posted to the general ledger. Financial tags can also be used to track the subledger data and are now available for matching within ledger settlement, reducing the number of transactions to be manually matched.

In addition to supporting new financial tags, we’re also improving how vendor and customer payments are recorded to the bank subledger. This feature allows an organization to post vendor and customer payments in separate vouchers but update the bank account in summary to match the bank statement, making reconciliation easier and ensuring smoother bank reconciliation.

Accelerate global expansion and operations

As companies look to better manage the complexities of international operations, globalization studio enhances the globalization capabilities for numerous countries’ new laws around reporting. With this latest update, we are bringing new capabilities to help make it easier for companies working in certain parts of the European Union (EU), Latin America (LATAM), and Asia Pacific area (APAC). 

These updates include the extension of multiple tax ID reporting to more EU countries, which helps ensure accurate tax numbers for transactions, streamline compliance, and raise operational efficiency for global companies. We’re also expanding out-of-the-box regulatory compliance coverage to additional LATAM countries, including Chile, Costa Rica, Nicaragua, Panama, Paraguay, Colombia, and Uruguay. By providing localized solutions, Dynamics 365 Finance users can confidently navigate the regulatory landscape, reduce compliance risks, and fortify their operational efficiency across multiple LATAM countries.

Work smarter with automation that minimizes repetitive tasks and data entry

For many companies, financial processes still involve many manual and repetitive tasks, which require a large number of resources and take finance leaders away from more strategic work. According to our 2023 Future of Finance Trends Report, 88 percent of financial leaders feel they are primarily responsible for transactional functions, such as creating financial reports, as opposed to the more strategic functions of running a business, like advising on innovations. Similarly, 88 percent of finance leaders reported not having the automation tools they need to automate repetitive tasks (for example, digital invoicing software and online payroll) and free up their time for more innovative work. With this latest release, we’ve added new capabilities to help finance teams work smarter by using automation to minimize manual and repetitive tasks. 

Streamline invoicing to reduce the time from procure to pay

Processing vendor invoices is a manual and repetitive task in every organization. Not only is this process resource intensiverequiring a high volume of document processingit is also ripe for human error.

By digitizing and automating invoicing, businesses can save time and reduce errors. Dynamics 365 Finance includes accounts payable automation with invoice capture to provide continuous AI-driven automation with reading and recognition of vendor invoices. With this release, we added additional capabilities for non-purchase order (PO) invoices and the vendor invoice journal. We’ve also enhanced the invoice process with the ability to process free text invoices faster and invoice automation that enables the processing of vendor invoices during import, all of which save time and effort while helping to improve accuracy. This eliminates the need for additional background processing and frees accounts payable staff to focus their efforts on exceptions.

Improve processes

Working smarter as a company requires integrating systems of record to provide greater visibility and continuity across the organization. With this update, we have added some key integrations that will make it easier for companies to operate strategically.

In this update, we’ve enabled resource management integration. By significantly streamlining the project resourcing process for organizations by consolidating employee data, resource managers can swiftly identify and allocate suitable resources based on skills, certificates, and availability. We’ve also enabled learning management integration, which offers users a centralized view of training data and other employee information, streamlining workforce development, boosting productivity, and fostering a more informed decision-making process.

Simplify manual processes

Organizations are often burdened by manual tasks, which draw valuable resources and are prone to error. For those tasks that require manual inputs, making those experiences as simple and intuitive as possible is critical. 

One such experience is time entry. We’ve taken steps to modernize the user experience for time entry in Dynamics 365 Project Operations, making it more efficient and user-friendly. The modernized interface optimizes usability, accessibility, and extensibility, allowing consultants to enter time more effectively and accurately.

Perform better with enhanced business performance analytics

As finance leaders continue to take on more strategic responsibilities with organizations, the need for high-quality data and insights is increasingly important. Yet getting this visibility across the organization remains a challenge for many businesses. The new Dynamics 365 features significantly improve business performance analytics. 

Turn data into insights

To be successful, business leaders don’t just need data; they need actionable insights that help drive corporate strategy. New record to report and procure to pay data models will provide financial and non-financial data and metadata into Microsoft Dataverse and transform it into analytical tables. Structuring this complex data provides a single data source for reporting, allowing users to build well-defined and readily available relationships between ledger, subledger, and source documents from multiple systems.

The new reporting hub and base reports on data governance, as well as row-level and role-level security. These features help finance teams quickly locate, edit, and share relevant reports by business process easily and quicklyhelping to put insights into action.

Advanced data gets enhanced security

Security is paramount for financial data. We’re furthering our investment in security by providing additional security controls in Dynamics 365 Finance. Business performance analytics provides row-level and role-level security capabilities to multiple users in your organization’s finance and accounting teams, as well as to the staff in other departments. This helps ensure that reports are only seen by those with appropriate permission.

When paired with the extensibility of the data model, users can be set up to view reports by dimension and legal entity. This lets teams create refreshable, prewritten reports that can be distributed beyond the finance organization, making it easier and safer to circulate data.

Making it easier to navigate taxes

Streamline tax calculation and reporting processes for import/export businesses through direct currency conversions and localized support for Indian taxation. Additionally, you can simplify interoperation with tax solution ISVs, enabling efficient management of complex tax rates across multiple jurisdictions. The withhold tax calculation during invoicing also helps customers meet their compliance obligations, reducing manual effort for businesses operating in countries with specific tax requirements.

By integrating these features into a single comprehensive solution, businesses can achieve greater accuracy in tax declarations, seamless integration between project management and accounting modules, and improved tax management across various jurisdictions. These capabilities ultimately help organizations drive efficiency, fulfill legal compliance, and make better decisions, allowing businesses to thrive in an increasingly globalized market.

Operate more sustainably

We are introducing new features aimed at helping businesses improve traceability tied to sustainability by utilizing the power of automation, digitization, and compliance with evolving global regulations. These features include archiving data and electronic invoicing services for various countries. Implementing these solutions can help organizations reduce power usage, improve efficiency, and comply with local and international regulations.

Reduce data storage energy expenditures

The archive data feature allows companies to save storage space and improve performance by reducing the data set they work against. This enables organizations to archive data consistently and securely while still allowing for reporting and analysis of historical data through standard reporting.

Eliminate paper waste

Electronic invoicing services support the move towards a paperless environment by helping companies automate the entire invoicing process. By eliminating the need for physical paperwork, electronic invoicing reduces paper waste. This newest release offers electronic invoicing services for France, Poland, and Japan.

Additionally, the global e-invoicing feature addresses the growing market driven by tax digitization and invoice automation. By interoperating with government services and intermediate-certified operators, the global e-invoicing feature helps businesses efficiently exchange electronic invoice documents with tax authorities and other businesses.

Try out the capabilities

Many users started testing the new features in an early access period starting January 30, 2023. This allowed users and partners to validate the latest features in a non-production environment. For those already in an early access non-production environment, these new features will be automatically enabled with the April 2023 upgrades.

Watch this YouTube video to learn more about these updates.

a person sitting at a desk in front of a computer

Dynamics 365 release planner

See the new features for Dynamics 365 Finance and Project Operations

The post 2023 wave 1 releases AI, automation, and analytics in Microsoft Dynamics 365 Finance and Project Operations appeared first on Microsoft Dynamics 365 Blog.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.