M365 Workplace Cloud Storage Spec

!!! NOTE: This project is no longer actively maintained and replaced by a native integration into RealmJoin.

Please use this guideline for migration.

The feature of managing Enterprise Mode Site Lists is covered by Microsoft 365 admin center. So, existing or new site lists need to be added as described here: Publish enterprise site list to the cloud. The resulting site list ID is then published via an Intune policy to Microsoft Edge.

---

Abstract

Microsoft cloud managed Modern Workplace devices get all relevant policies and configurations via Microsoft Intune. Some of these settings rely on files available by URL. This application is intended to manage these files with an easy to use web based interface where administrators can create, upload and edit files and separate the content based on groups. Currently supported are the following types:

• Enterprise Mode Site List (XML)
• Favorites (HTML and JSON for Microsoft Edge ADMX)
• Backgrounds and other files

Deployment

Enabling Azure AD authentication

Configure with express settings

1. Open Azure Portal and navigate to the deployed M365 Workplace Cloud Storage app service.
2. Select Authentication under Settings

3. Click on Add Identity Provider.

4. Select Microsoft as Identity Provider

5. Keep the default options and then click on Add

6. Edit newly created identity provider

7. Click on Permissions and then click on Click here to access API permissions

8. Click on Grand admin consent for {{TENANT NAME}} and then grant consent

9. The status would turn to Granted

Configure with advanced settings

As an alternative to the Management mode "Express" you can also use "Advanced": Please follow the guide provided by Microsoft in their docs

Authorize users or groups

Enable authorization for M365 Workplace Cloud Storage

1. Open Azure Portal and navigate to Azure Active Directory
2. Click Enterprise applications from the blade
3. Select the app you have created in the steps before
4. Click Properties from the Manage section
5. Set User assignment required to Yes

Grant specific users and groups access to M365 Workplace Cloud Storage

1. Click Users and groups
2. Click Add user
3. You can grant access to the application to specific user or groups

Updates and Application Artifacts

To get continuous updates for M365 Workplace Cloud Storage you can point a configuration variable to the maintained GitHub repository. During every restart, the Azure Web App will do a check and update its sources if necessary.

1. Go to Azure
2. Choose the corresponding App Service
3. Click on "Configuration" (under "Settings")
4. Change the value of "WEBSITE_RUN_FROM_PACKAGE" to one of the following:

• Release channel: https://github.com/glueckkanja/gk-m365-workplacecloudstorage/raw/master/dist/m365wcs.zip
• Beta channel: https://github.com/glueckkanja/gk-m365-workplacecloudstorage/raw/master/dist/m365wcs-beta.zip

5. In future, just perform a restart of the App Service to get the updated artifacts.