SharePoint Online Administration

SharePoint Online is a cloud-based service in Microsoft 365 that provides content management, collaboration, and intranet capabilities. It is the backbone for document storage in Teams, OneDrive, and many other Microsoft 365 services. As a Microsoft 365 Administrator, you must understand how to provision sites, manage permissions, configure sharing, and ensure compliance.

SharePoint Online is built on a multi-tenant architecture. Each tenant has a root site collection (the tenant's root site) and can have many other site collections. A site collection is a logical container that has its own permissions, navigation, and content databases. Within a site collection, you can have one or more sites (subsites). Each site can contain libraries, lists, pages, and web parts.

Key components: - Site Collections: Top-level containers, each with its own owner, storage quota, and resource usage limits. Default site collections include the root site (tenant.sharepoint.com) and the My Site host (for OneDrive). - Sites: Child sites within a site collection. They inherit permissions from the parent by default but can have unique permissions. - Libraries: Document libraries store files and can have metadata columns, versioning, check-out/check-in, and approval workflows. - Lists: Similar to libraries but for structured data (e.g., tasks, contacts, custom lists). - Pages: Web pages that can be customized with web parts. - Web Parts: Reusable components that display content from libraries, lists, or external sources.

SharePoint Online uses a permission model based on SharePoint groups and permission levels. There are three default groups: - Owners: Full control over the site. - Members: Can add, edit, and delete content. - Visitors: Read-only access.

Permission levels define what actions a user can perform (e.g., Read, Contribute, Edit, Full Control). You can create custom permission levels. Permissions can be assigned at the site collection, site, library, folder, or item level. Breaking permission inheritance creates unique permissions for a child object, which can impact performance and management.

Sharing is a critical feature in SharePoint Online. You can share sites, libraries, folders, or individual files with internal users or external guests. Sharing settings are controlled at the tenant level (in SharePoint admin center) and can be overridden at the site level. The sharing options include: - Anyone with the link (anonymous access) – can be restricted to view or edit. - People in your organization – requires authentication. - People with existing access – link works only for those already granted access. - Specific people – only named users.

External sharing can be enabled for guests (Azure AD B2B collaboration). You can set expiration dates for guest access and require guests to sign in using multi-factor authentication.

You can provision sites using the SharePoint admin center, PowerShell, or through Microsoft Teams (which creates a team site). Site templates (e.g., Team site, Communication site) define the default structure and features. Team sites are designed for collaboration with an associated Microsoft 365 group, while Communication sites are for broadcasting information to a broad audience.

Managed metadata allows you to create a central taxonomy of terms that can be used across sites. Content types define the schema for a specific type of content (e.g., a contract with fields for contract number, vendor, and expiration date). You can associate workflows and retention policies with content types.

SharePoint Online has a powerful search engine that indexes content from all sites, libraries, and lists. The search index is updated continuously. You can configure search scopes, result sources, and query rules. Search can also return results from external sources (e.g., file shares) via the cloud hybrid search.

Many organizations have on-premises SharePoint Server and want to integrate with SharePoint Online. Hybrid scenarios include: - Hybrid search: Index on-premises content in the cloud search index. - Hybrid sites: Use a common navigation and site structure across on-premises and online. - Hybrid taxonomy: Share managed metadata between on-premises and online. - Hybrid OneDrive: Redirect users to OneDrive for Business in the cloud.

To configure hybrid, you typically use the SharePoint Hybrid Picker or PowerShell. Azure AD Connect is required for identity synchronization.

As an administrator, you must implement governance policies for site lifecycle, storage limits, and data retention. You can use site policies to automatically close or delete sites after a period of inactivity. Retention labels and data loss prevention (DLP) policies can be applied to SharePoint content. eDiscovery cases can search across all SharePoint sites.

Monitor SharePoint Online health using the Microsoft 365 admin center, SharePoint admin center, and the Microsoft 365 Health Dashboard. Common issues include permission errors, sync problems (OneDrive sync), and slow performance due to large files or complex customizations. Use the SharePoint Online Management Shell to diagnose and resolve issues.

Understanding these interactions is crucial for the MS-102 exam, where questions often span multiple workloads.

A multinational company with 50,000 users needs to organize content by region and department. They create a hub site for each region (e.g., North America, Europe, Asia) and associate department sites as child sites. Permissions are managed via Azure AD security groups. External sharing is enabled for partners but restricted to 'Existing guests' with expiration of 90 days. They use managed metadata for consistent tagging across regions. The challenge is maintaining performance with many sites; they monitor resource usage and enforce storage quotas (e.g., 5 TB per department). Misconfiguration often occurs when permission inheritance is broken too deeply, leading to management overhead and access issues.

An organization migrating from SharePoint 2013 to SharePoint Online uses the SharePoint Migration Tool (SPMT) to move content. They plan a hybrid environment during transition: on-premises search results appear in SharePoint Online via cloud hybrid search. They configure Azure AD Connect for identity sync and use the Hybrid Picker to set up hybrid sites and taxonomy. A common mistake is not updating DNS records for the hybrid configuration, causing authentication failures. They also need to manage duplicate content and ensure that migrated sites have correct permissions.

A hospital uses SharePoint Online to store patient records (with appropriate de-identification). They enforce strict retention policies: documents must be kept for 7 years, then deleted. They use retention labels applied automatically via a content type. DLP policies block sharing of any document containing patient identifiers with external users. They also enable audit logging and regularly review sharing activity. The biggest risk is accidental external sharing; they configure sharing to require explicit approval for guests. Performance is a concern when storing large medical images; they set file size limits and use Power Automate workflows to compress files.