{"id":1636,"date":"2018-08-16T18:01:11","date_gmt":"2018-08-16T18:01:11","guid":{"rendered":"https:\/\/developer.microsoft.com\/en-us\/office\/blogs\/?p=1636"},"modified":"2018-08-16T18:01:11","modified_gmt":"2018-08-16T18:01:11","slug":"managed-access-to-microsoft-graph-data-in-private-preview","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/managed-access-to-microsoft-graph-data-in-private-preview\/","title":{"rendered":"Managed Access to Microsoft Graph Data in Private Preview"},"content":{"rendered":"<p><span style=\"font-family: Calibri\"><span style=\"color: #000000\">We\u2019re pleased to announce that we are expanding the focus of the Managed Access to Microsoft Graph Data preview, announced this spring at our Build 2018 conference, to include scenarios for Enterprises as well as ISVs.\u00a0 <\/span>Managed Access to Graph in Microsoft Azure provides new management and control tools for developing applications that connect to the Microsoft Graph within the Microsoft Azure environment.\u00a0<\/span><\/p>\n<p><span style=\"font-family: Calibri\"><span style=\"color: #000000\">The organizational data that exists within an Office 365 tenant and is accessed through the Microsoft Graph is a fantastic source of raw material for the construction of rich insights that have the power to drive digital transformation.\u00a0 We understand that the security and privacy of this data is of paramount importance and are committed to taking proactive steps that might limit any unwanted access.\u00a0 We also understand that companies can and will seek to use Office 365 tenant data for the purpose of deriving insights, and can choose between building those insights using their own IT resources or buying them from an Independent Software Vendor (ISV).\u00a0 <\/span><\/span><\/p>\n<p><span style=\"color: #000000;font-family: Calibri\">In either case, administrators must carefully consider the challenges inherent to moving and managing significant amounts of their organizational data.\u00a0\u00a0 Managed Access to Microsoft Graph Data is designed to give administrators new controls over the Office 365 data they provide to application developers who forge insights with that data.\u00a0\u00a0 There are three primary dimensions to the service:<\/span><\/p>\n<p><span style=\"font-family: Calibri\"><span style=\"color: #000000\"><b>Granular consent:\u00a0 <\/b>Unlike standard consent models, where an administrator can only grant or deny an application access to specific data types, Managed Access to Microsoft Graph Data raises the bar.\u00a0 Applications can specify exactly what types of data and\/or filter content that an application can access.\u00a0 On the other side of this equation, administrators must give explicit approval to access Office 365 data before access is granted.\u00a0 The request must specify the level of access requested, describe data policy enforcement, the reason for the request and the exact schema of the data requested.\u00a0 As a result, applications may use only the data essential to their function, while unrelated content is not provided.\u00a0 For example, an app may consume email headers, while body content and attachments are excluded. <\/span><\/span><\/p>\n<p><span style=\"font-family: Calibri\"><span style=\"color: #000000\"><b>Data Governance:<\/b> Microsoft is facilitating rich, connected communication between Office 365 and Azure with respect to the status of customers\u2019 data.\u00a0 Developers creating applications that leverage Managed Access to Microsoft Graph Data can specify a set of detailed policies with which they intend to comply. <i>\u00a0<\/i>\u00a0Office 365 administrators may then review and consent to these policies.\u00a0 This practice minimizes compliance management overhead.\u00a0 Once consent is given, Microsoft monitors an application\u2019s adherence to policy.\u00a0 In instances where an application violates (or attempts to violate) a policy established by the organization, Microsoft stops the flow of data to that application.\u00a0 <\/span><\/span><\/p>\n<p><span style=\"font-family: Calibri\"><span style=\"color: #000000\"><b>Scalable Data Access:<\/b> Rich applications require access to large amounts of data, often from many users in your organization at once, joined together.\u00a0 Historically, application developers have needed to build complex infrastructure and make thousands upon thousands of API calls to orchestrate this data delivery.\u00a0\u00a0 But Managed Access to Microsoft Graph leverages the power of Azure Data Factory to deliver Office data from the entirety of your organization to your application, on a repeatable schedule, with just a few simple steps.<\/span><\/span><\/p>\n<p><span style=\"font-family: Calibri\"><span style=\"color: #000000\"><b>Discrete Azure services: <\/b>\u00a0<\/span><span style=\"color: #000000\">Whether you\u2019re leveraging an <\/span><a href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-managed-applications\/\">Azure Managed Application<\/a><span style=\"color: #000000\"><b> <\/b>built by others, or an application that you wrote yourself, your application and your data are collocated tightly together in a separately- provisioned Azure instance.\u00a0 <\/span><span style=\"color: #000000\">Applications connect to a copy of the specifically requested dataset located within a separately-provisioned Azure instance \u2013 never directly to the data sources powering their apps.\u00a0\u00a0 From that Azure instance however, developers can use the full range of Azure tools and capabilities to deliver rich experiences \u2013 from websites built on best-in-class serving platforms to deep insights driven by our big data and analytics tools \u2013 to derive insights, all from within Azure\u2019s compliance boundaries.<\/span><\/span><\/p>\n<p><span style=\"font-family: Calibri\"><span style=\"color: #000000\">Developers interested in creating applications with managed access to Microsoft Graph data can apply to participate in our limited public preview by providing the information <\/span><a href=\"https:\/\/aka.ms\/managedaccessmsgraph\">requested on this page<\/a><\/span><span style=\"color: #000000;font-family: Calibri\">.<\/span><\/p>\n<p><span style=\"color: #000000;font-family: Calibri\">\u00a0<\/span><\/p>\n<p><span style=\"color: #000000;font-family: Calibri\">Happy coding!<\/span><ins datetime=\"2018-07-09T22:03\"><\/ins><\/p>\n<p><span style=\"color: #000000;font-family: Calibri\">The Office Ecosystem team<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>We\u2019re pleased to announce that we are expanding the focus of the Managed Access to Microsoft Graph Data preview, announced this spring at our Build 2018 conference, to include scenarios for Enterprises as well as ISVs. <\/p>\n","protected":false},"author":69076,"featured_media":25159,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3,11],"tags":[],"class_list":["post-1636","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-graph","category-office-add-ins"],"acf":[],"blog_post_summary":"<p>We\u2019re pleased to announce that we are expanding the focus of the Managed Access to Microsoft Graph Data preview, announced this spring at our Build 2018 conference, to include scenarios for Enterprises as well as ISVs. <\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/posts\/1636","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/users\/69076"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/comments?post=1636"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/posts\/1636\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/media\/25159"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/media?parent=1636"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/categories?post=1636"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/tags?post=1636"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}