enterprise software course
Cloud Office Admin Centre: Users, Security and Compliance
Administer a cloud office suite: people, licences, mail, files, devices, security and reports.
about this course
What you will be able to do
- Remember Remember : the admin centre tour.
- Apply Apply : users, groups and licences.
- Apply Apply : mail and calendars.
- Understand Understand : files, sites and teams.
- Analyse Analyse : sign-in and device security.
- Evaluate Evaluate : compliance, data protection and audit.
- Create Create : tenant governance and automation.
- Evaluate Evaluate : tenant health audit and admin handover.
Task, condition and standard
Task
Administer a cloud office suite: people, licences, mail, files, devices, security and reports. Finish all 8 modules on a practice set-up.
Condition
A free trial or practice account, practice data only (never real customer data), a peer circle and a mentor for the final review.
Standard
Every module standard is met; records are kept; a peer and a mentor rate the work 'Meets' or better on the rubric.
Who it is for: IT support staff, office managers, small-business owners, junior administrators. Requirements: a computer and internet. Materials: slides with notes, worked examples, activities, quiz, rubric.
How the ladder works: modules climb from L1 (remember) to L7 (create); the ladder section shows each level as a slide. Take them in order; the first three suit new learners, 4 and 5 suit practitioners, 6 and 7 suit advanced staff.
lesson by lesson
8 modules with worked examples
Module 1 The admin centre tour 2 hRememberL1 Basic
One portal controls the whole office suite.
- Home, users, groups, billing, health.
- Roles: global admin should be few.
- Service health and message centre.
Activity. Take the tour and list ten menu items with purpose.
Standard to meet. Answer ten correctly.
Slides with notes
Module 2 Users, groups and licences 3 hApplyL2 Awareness
Joiners, movers and leavers done the same way every time.
- Create user, assign licence.
- Groups for teams and mail.
- Leaver: block sign-in, convert mailbox, remove licence.
Activity. Process a joiner, a mover and a leaver.
Standard to meet. Complete all three with the checklist.
Slides with notes
Module 3 Mail and calendars 3 hApplyL3 Foundation
Mail needs correct records and rules.
- Shared mailbox and alias.
- Mail flow rules.
- Domain records: mx, spf, dkim, dmarc (never edit without a plan).
Activity. Create a shared mailbox and one rule.
Standard to meet. Check that it works and grant minimal permissions.
Slides with notes
Module 4 Files, sites and teams 3 hUnderstandL4 Practitioner
Where files live decides who can see them.
- Sites, libraries, sharing links.
- Guest access rules.
- Retention basics.
Activity. Set sharing limits for one site.
Standard to meet. Set guests to expire in 30 days.
Slides with notes
Module 5 Sign-in and device security 4 hAnalyseL5 Specialist
Most attacks start with a stolen password.
- Multi-factor sign-in.
- Conditional access.
- Device compliance.
- Break-glass account stored safely.
Activity. Design a baseline policy set.
Standard to meet. Test the policy on a pilot group first.
Slides with notes
Module 6 Compliance, data protection and audit 4 hEvaluateL6 Advanced
Know where sensitive data is and prove who did what.
- Labels and data-loss rules.
- Audit log search.
- Retention and legal hold.
Activity. Create a label and test a rule.
Standard to meet. Check that the rule blocks the test file.
Slides with notes
Module 7 Tenant governance and automation 4 hCreateL7 Super expert
Run the tenant like a product.
- Admin roles by task.
- Scripted bulk changes with review.
- Monthly health report.
- Disaster plan.
Activity. Write a governance pack.
Standard to meet. Describe roles, review, report and recovery.
Slides with notes
Module 8 Tenant health audit and admin handover 4 hEvaluateL7 Super expert
Once the tenant is running, an audit shows what has drifted. A good handover lets a new admin take over without surprises.
- Audit users and roles: find unused accounts, shared passwords and too many top-level admins.
- Audit sharing, mail rules and device policies against your written baseline.
- Score each area as pass, fix soon or fix now, and give every finding an owner and a date.
- Prepare a handover pack: access list, policy list, recovery steps and a calendar of regular tasks.
Activity. Audit a practice tenant using a checklist of 15 items. Produce a table of findings with a rating, an owner and a fix date, plus a one-page handover note.
Standard to meet. Check all 15 items, rate and assign an owner to every finding, and write a handover note that lets a new admin find roles, policies and recovery steps.
Slides with notes
assessment
How you are checked
Evidence: your records from each activity. A peer and a mentor mark it. Pass: no criterion at 'Not yet'.
| Criterion | Not yet | Meets | Exceeds |
|---|---|---|---|
| Accuracy | Steps wrong | Steps right on practice data | Right and explained to a peer |
| Evidence | No records | Records for each module | Records and a lessons note |
| Safety and privacy | Real data used | Practice data only | Rules written for others |
| Standard | Misses the standard | Meets every module standard | Meets and improves it |
Ten-question check, with model answers
Q1. Why should a tenant have only two or three global admins?
Model answer: A top-level account can change everything, so each extra one is a bigger target and a bigger risk of mistakes. Everyone else gets a smaller role that fits their task. (Covered in module 1: The admin centre tour. To pass that module: Answer ten correctly.)
Q2. A user leaves on Friday at 5 pm. List the main steps in order.
Model answer: Block sign-in, reset sessions, convert or keep the mailbox for the agreed time, move files to the manager and remove the licence. Do them from the leaver checklist. (Covered in module 2: Users, groups and licences. To pass that module: Complete all three with the checklist.)
Q3. What is the benefit of a shared mailbox over sharing one password?
Model answer: Each agent signs in with their own account, so access is tracked and can be removed one person at a time. A shared password gives no record of who did what. (Covered in module 3: Mail and calendars. To pass that module: Check that it works and grant minimal permissions.)
Q4. Explain in one line each what SPF, DKIM and DMARC do.
Model answer: SPF lists the servers allowed to send for your domain. DKIM signs each message so it can be proven genuine. DMARC tells receivers what to do when a check fails. (Covered in module 3: Mail and calendars. To pass that module: Check that it works and grant minimal permissions.)
Q5. A site is shared with anyone who has the link. Is that a problem and what would you change?
Model answer: Yes, because the link can be forwarded to anyone. Change to named guests only and set the access to expire, for example after 30 days. (Covered in module 4: Files, sites and teams. To pass that module: Set guests to expire in 30 days.)
Q6. A sign-in comes from a new country at 3 am. Which control should react?
Model answer: A conditional access policy should ask for a second proof or block the sign-in. Multi-factor sign-in stops most stolen-password attacks. (Covered in module 5: Sign-in and device security. To pass that module: Test the policy on a pilot group first.)
Q7. A script will create 200 users from a file. What checks make this safe?
Model answer: Have someone review the file and the script, test on a few rows first and keep a list of the created accounts so they can be removed if something is wrong. (Covered in module 7: Tenant governance and automation. To pass that module: Describe roles, review, report and recovery.)
Q8. A file labelled Confidential is attached to an email going outside the company. What should a data-loss rule do?
Model answer: Block the message or warn the sender and log the event, depending on the rule. The test file in the exercise should be blocked. (Covered in module 6: Compliance, data protection and audit. To pass that module: Check that the rule blocks the test file.)
Q9. You must find out who deleted a shared folder last week. Where do you look?
Model answer: Search the audit log by date, activity type and site. The result shows the user, the time and the action. (Covered in module 6: Compliance, data protection and audit. To pass that module: Check that the rule blocks the test file.)
Q10. Compare a tenant audit with a monthly health report, and say what an audit adds.
Model answer: The monthly report tracks a few numbers over time. An audit checks every area against the written baseline and gives each finding a rating, an owner and a fix date. (Covered in module 8: Tenant health audit and admin handover. To pass that module: Check all 15 items, rate and assign an owner to every finding, and write a handover note that lets a new admin find roles, policies and recovery steps.)
levels L1 to L7
The ladder, slide by slide
Seven slides, one per level. Open each for the slide text and the speaker notes.
Slide 1 L1 Basic: L1 Basic: find your way
Remember the main menus of the admin centre and what each one is for. Identify where users, groups, billing and service health are shown. Recognise why only a few people hold the top role.
Speaker notes. Give a ten minute tour and ask learners to find a user and a licence. Check they can say what a group is. A common mistake is clicking into settings without knowing what they change.
Slide 2 L2 Awareness: L2 Awareness: understand the risks
Understand why a stolen password is the most common way in. Explain what multi-factor sign-in and sharing limits protect. Describe the joiner, mover and leaver idea.
Speaker notes. Use a short story of a leaver who still had access. Ask what could go wrong. Watch for learners who think a strong password alone is enough.
Slide 3 L3 Foundation: L3 Foundation: do the standard tasks
Apply the checklist to create a user, assign a licence, add a group and set up a shared mailbox. Reset a password safely. Follow the steps in order every time.
Speaker notes. Let learners complete each task on a practice tenant. Check licences and group membership afterwards. Common mistake: giving extra roles to make a problem go away.
Slide 4 L4 Practitioner: L4 Practitioner: run daily operations
Apply mail rules, sharing limits and device checks across a small company. Analyse a sign-in report and spot odd behaviour. Fix access problems without raising the role.
Speaker notes. Give a case with three user complaints. Ask learners to find the cause for each. Common mistake: changing many settings at once, so the real fix is unknown.
Slide 5 L5 Specialist: L5 Specialist: design the security baseline
Analyse risks and design sign-in, device and data protection policies. Create labels and rules and test them on a pilot group. Keep a safe emergency account.
Speaker notes. Ask learners to explain each policy in one sentence for a non-technical manager. Check the pilot results. Common mistake: forgetting the emergency account and locking everyone out.
Slide 6 L6 Advanced: L6 Advanced: audit and improve
Evaluate the whole tenant against a written baseline. Compare findings by risk and effort, and give each an owner and date. Review audit logs to answer who did what and when.
Speaker notes. Give a messy practice tenant and a checklist. Check that ratings match the evidence. Common mistake: listing problems without owners or deadlines.
Slide 7 L7 Super expert: L7 Super expert: govern the tenant
Create a governance pack with admin roles by task, reviewed scripts for bulk changes, a monthly report and a recovery plan. Evaluate trade-offs between safety and ease of use. Teach others to run the tenant safely.
Speaker notes. Ask for a pack another admin could use on day one. Check the rollback list and recovery test. Common mistake: scripts run without a review or a way back.
jobs this leads to
Where this takes you
- IT support technician. Creates users and fixes access.
- Office administrator. Manages licences and shared mailboxes.
- Security administrator. Applies sign-in and data rules.
- Collaboration lead. Runs teams and sites.
- Cloud administrator. Owns the whole tenant.
Next courses: data skills, process improvement, a sector course for your target employer.
ten locations and global
Your place
Local law changes how you store customer data and issue invoices. Check it for your place first.
India (Bengaluru)
Language: English, Hindi, Kannada. Use INR for amounts. Personal data rule: Digital Personal Data Protection Act 2023. Skills frame to cite: National Skills Qualifications Framework (NSQF) and the national credit framework.
Netherlands (Eindhoven area)
Language: Dutch, English. Use EUR for amounts. Personal data rule: EU GDPR (Dutch: AVG), supervised by the Autoriteit Persoonsgegevens. Skills frame to cite: the Dutch qualification framework (NLQF) linked to the European Qualifications Framework.
UAE (Dubai and Abu Dhabi)
Language: Arabic, English. Use AED for amounts. Personal data rule: Federal Decree-Law No. 45 of 2021 (personal data protection). Skills frame to cite: the emirate education and training regulators (for example KHDA in Dubai) and the national qualifications framework.
Brazil (Sao Paulo)
Language: Portuguese (Spanish and English support). Use BRL for amounts. Personal data rule: LGPD (Lei Geral de Protecao de Dados). Skills frame to cite: the national technical-education catalogue and the national S-system training bodies.
Canada (Toronto)
Language: English, French. Use CAD for amounts. Personal data rule: PIPEDA, with provincial rules where they apply. Skills frame to cite: the provincial colleges framework and the national credential-recognition guidance.
United States
Language: English, Spanish. Use USD for amounts. Personal data rule: state privacy laws (for example California), and COPPA for children under 13. Skills frame to cite: state and community-college credit systems.
Singapore
Language: English, Mandarin, Malay, Tamil. Use SGD for amounts. Personal data rule: Personal Data Protection Act (PDPA). Skills frame to cite: the Singapore national skills frameworks and the national credit system.
Australia
Language: English. Use AUD for amounts. Personal data rule: the Privacy Act 1988 and the Australian Privacy Principles. Skills frame to cite: the Australian Qualifications Framework (AQF) levels.
Hong Kong (Eastern Asia)
Language: Chinese (Cantonese, Mandarin), English. Use HKD for amounts. Personal data rule: the Personal Data (Privacy) Ordinance. Skills frame to cite: the Hong Kong Qualifications Framework.
Georgia and Israel (Western Asia)
Language: Georgian, Hebrew, Arabic, English. Use GEL or ILS for amounts. Personal data rule: the personal data law of the country where the learner lives. Skills frame to cite: the national qualifications framework of that country.
Cayman Islands (Caribbean)
Language: English. Use KYD for amounts. Personal data rule: the Data Protection Act. Skills frame to cite: the local education and training framework.
Mexico
Language: Spanish, English. Use MXN for amounts. Personal data rule: the federal law on personal data held by private parties. Skills frame to cite: the national competency certification system and the education ministry levels.
next
Draft
Draft course. Written in our own words from our own training outlines; no third-party text is used. Not live.