microsoft / coe-starter-kit

Other
765 stars 225 forks source link

[CoE Starter Kit - QUESTION] Managed Environments vs CoE Starter Kit #3259

Closed bronsonacoutts closed 2 years ago

bronsonacoutts commented 2 years ago

What is your question?

This is more of a documentation enhancement request, although I am sure there are already plans for this.

Now with the release of "Managed Environments" some clearer documentation/guidance for when to use which and maybe some example use cases would be good.

Also, if you choose to use Managed Environments (Which I am), how the CoE Starter Kit best compliments this and best practice (or what the intentions were/are) for how these should work in tandem.

I am figuring this out as I go for now. Glad to be in the position of still gradually launching a PP program and therefore have the luxury of being able to do a bit of trial and error in prod (really? in prod? who me? no never :-))

What solution are you experiencing the issue with?

No response

What solution version are you using?

July 2022

What app or flow are you having the issue with?

No response

manuelap-msft commented 2 years ago

Hello,

great point, we're working on adding documentation for this but it's still in progress! In the meantime, a brief comparison of features:

Weekly digest The CoE Starter Kit doesn't have a weekly digest for admins; instead admins self-serve information through the Power BI dashboard. One part of the Weekly Digest is highlighting inactive apps to admins - in the CoE, a similar goal is achieved via the Inactivity Notification process which notifies makers of their inactive resources and asks for approval to delete them. If approved, they are deleted from the tenant. So in Managed Environments this is an "insight" only, whereas in the CoE Starter Kit it drives action - the CoE kit also reduces burden on the admin to deal with inactive resources, as it puts it on the maker to decide what to do with that resource.

Sharing limits The CoE Starter Kit can't limit sharing on resources, so this can only be done via Managed Environments. The CoE Kit has a Compliance process which identifies highly shared resources and asks makers to provide additional information, so that admins can better support those solutions (e.g. move them to a dedicated environment, implement ALM, have the helpdesk educated on that solution) and through the Power BI dashboard admins can identify highly shared resources. But limiting sharing can only be done via Managed Environments.

Data policies - seeing what DLP policies are applied to an environment can be done using the DLP Editor in the CoE Starter Kit. Additionally, the main purpose of the DLP Editor is to perform impact analysis on DLP policies you are planning to apply - so before applying a policy to an environment you can see what apps/flows that are already in those environments would be impacted. So Managed Environments gives you the visibility of what DLP policies area already applied to an environment, but the CoE Kit can additionally give you visibility into what impact those policies have on existing apps/flows.

This is a comparison of the specific features available in Managed Environments, the CoE kit has a wide range of admin, governance and nurture features beyond that - such as bulk updating permissions, environment and DLP request management, clean up of orphaned/abandoned resources, Pulse survey, Maker assessments etc.

Overall it will depend on your use cases and needs for governance - I would say it's good to start with what's out of the box available in the product, as that's less maintenance and configuration effort on your side. And if you then discover you need additional features, see if the CoE kit can help with those.

We'll make sure to write this up properly to add to our docs as well!

bronsonacoutts commented 2 years ago

Thanks @manuelap-msft! That is actually quite fantastic, I think perhaps you might do your technical writers out of a job if you keep that up!

manuelap-msft commented 2 years ago

This has been added to our docs yesterday - it's pretty similar to what I shared earlier with you, just pasting the link here for completeness: https://docs.microsoft.com/en-us/power-platform/guidance/coe/overview#how-to-use-the-coe-starter-kit-alongside-power-platform-admin-center

Any further questions, please do let us know!

bronsonacoutts commented 2 years ago

Thanks Manuela!

[image: Mailtrack] https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality11& Sender notified by Mailtrack https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality11& 28/07/22, 22:30:43

On Thu, 28 Jul 2022 at 22:16, Manuela Pichler @.***> wrote:

This has been added to our docs yesterday - it's pretty similar to what I shared earlier with you, just pasting the link here for completeness:

https://docs.microsoft.com/en-us/power-platform/guidance/coe/overview#how-to-use-the-coe-starter-kit-alongside-power-platform-admin-center

Any further questions, please do let us know!

— Reply to this email directly, view it on GitHub https://github.com/microsoft/coe-starter-kit/issues/3259#issuecomment-1198063684, or unsubscribe https://github.com/notifications/unsubscribe-auth/ANHETZMN3U5S7Y3RYCWGWVLVWJ225ANCNFSM54RHT2FQ . You are receiving this because you authored the thread.Message ID: @.***>