Provisioning template configuration

Every out-of-the-box provisioning template is set up in the same template builder. The builder has three steps: Template Settings, Provisioning Settings and Approval. This page walks through each step, using a Teams template, which shows every part of the builder. Templates for other services show only the parts that apply to them.

To see what requesters and approvers see in Microsoft Teams, see End user experience.

Before you begin

• Your Rencore role includes the Create Provisioning permission. Owner, Admin and Contributor have it. See Rencore roles.
• Provisioning is part of the Premium and Enterprise Plans.
• The first time the feature is used, a Microsoft 365 administrator grants Rencore Governance the permissions to create workspaces. See Consent.

Open the template builder

To open a template in the builder, you will need to:

1. Go to Provisioning > Manage Provisioning Templates > Create provisioning template. The Provisioning Template Library opens.
2. Optionally, filter the library by service.
3. Highlight the template you want and click Use this Template. Its predefined settings load into the builder.

Step 1: Template settings

Template Settings sets how the template appears to requesters.

• Title and Description: the name and description requesters see in the template gallery. The title must be unique.
• Who can see this template: Everybody, Only Me (for testing) or Only members of these groups.
• How is the template presented in gallery: the icon, and whether the template is marked as recommended.
• Template Use Company Guidelines: instructions and links that requesters see before they start a request.

Click Next at the top of the page.

Step 2: Provisioning settings

Provisioning Settings holds the governance settings of the workspace the template creates. For most settings, you also choose whether the requester can change the value in the request.

Security

• Visibility: Public or Private.
• Sensitivity Label: a label from your tenant, as scanned into Rencore Governance.
• Owners and Members: predefined owners and members.

Policies

• Minimum Owners: how many owners the requester must enter.
• Team Name Prefix and Team Name Suffix: free text or a data placeholder from the request form.
• M365 Group mailNickname: the mailNickname property of the Microsoft 365 group.

See Limitations to provisioning naming conventions.

Channels and apps

• Channels: the channels the Team starts with. Click Pre-defined Teams channels to see or add the available channels. See Create a suggested Teams channel.

• Installed Apps: the Teams apps installed when the Team is created.

Team settings

• The member and guest permissions that are turned on in the Team. Team Owners can always change these settings in Teams.

Site settings

• Use custom Site Url and Custom Site Url: a fixed site URL. If the URL is taken, a number starting with _1 is added.

Group settings

• Hide M365 group from Outlook and Disable M365 group welcome message. Hiding the group also turns off the welcome message.

PnP template

• Use custom template: applies a PnP provisioning template on top of the builder settings. Only team and SharePoint site templates have this setting. See Use a PnP provisioning template.

Consent

Rencore Governance needs these permissions for your Microsoft 365 tenant the first time the feature is used. An administrator of the tenant grants them:

• Read and write all groups.
• Read all users’ full profiles.
• Have full control of all site collections.

Click Next at the top of the page.

Step 3: Approval

Turn on approvals when someone must approve each request before the workspace is created.

• Approvers: email addresses, or a data placeholder.
• Whether all approvers must approve, or one approval is enough.
• Whether approvers must add a comment.
• Title and Details: the subject and body of the approval email. Both can use data placeholders.
• Whether the email is sent, and whether a reminder follows.
• Send reminder in (days) and Timeout in (days): when the reminder is sent, and when the request times out if Cancel on timeout is on.

Save the template

To save the template, you will need to:

1. Click Done at the top right of the screen.
2. Turn the template on right away, or click Save as draft to finish it later.

The Provisioning Template Instances screen opens. A template that is turned on appears in the Rencore Teams App for everyone you made it visible to.