什么是协作管理?What is collaboration governance?

协作管理是管理用户对资源的访问权限、遵守业务标准并确保数据安全方式。Collaboration governance is how you manage users' access to resources, compliance with your business standards, and ensure the security of your data.

目前,组织使用的是各种不同的工具集。Organizations today are using a diverse tool set. 开发人员团队使用团队聊天、主管人员发送电子邮件,以及整个组织通过企业社交进行连接。There's the team of developers using team chat, the executives sending email, and the entire organization connecting over enterprise social. 由于每个组都是独一无二的,并且有自己的功能需求和工作风格,因此使用了多种协作工具。Multiple collaboration tools are in use because every group is unique and has their own functional needs and work style. 一些用户将仅使用电子邮件,而其他用户主要在聊天中活动。Some will use only email while others will live primarily in chat.

如果用户认为 IT 提供的工具不符合其需求,他们可能会下载支持其方案的最常用消费者应用。If users feel the IT-provided tools do not fit their needs, they will likely download their favorite consumer app which supports their scenarios. 虽然此过程允许用户快速入门,但这会导致整个组织感到沮丧的用户体验,同时具有多个登录名、共享困难和没有一个查看内容的位置。Although this process allows users to get started quickly, it leads to a frustrating user experience across the organization with multiple logins, difficulty sharing, and no single place to view content. 此概念称为"影子 IT",给组织带来了重大风险。This concept is referred to as “Shadow IT” and poses a significant risk to organizations. 它会降低统一管理用户访问、确保安全性和服务合规性需求的能力。It reduces the ability to uniformly manage user access, ensure security, and service compliance needs.

Microsoft 365 组、Teams 和 Yammer 等服务为用户提供了支持,通过提供协作所需的工具降低了影子 IT 的风险。Services such as Microsoft 365 groups, Teams, and Yammer empower users and reduces the risk of shadow IT by providing the tools needed to collaborate. Microsoft 365 具有一组丰富的工具,可用于实现组织可能需要的任何管理功能。Microsoft 365 has a rich set of tools to implement any governance capabilities your organization might require.

显示 Microsoft 365 中的协作管理选项的图表

本系列文章将帮助您了解组、团队和 SharePoint 设置如何交互、哪些管理功能可用以及如何为 Microsoft 365 中的协作功能创建和实施调控计划。This series of articles will help you understand how groups, teams, and SharePoint settings interact, what governance capabilities are available, and how to create and implement a governance plan for the collaboration features in Microsoft 365.

设置与 Microsoft 365 的安全协作Setting up secure collaboration with Microsoft 365

有许多选项用于部署 Microsoft 365 组和 Teams,以在组织中实现安全协作。There are many options for deploying Microsoft 365 Groups and Teams for secure collaboration in your organization. 我们建议你使用此管理内容以及设置与 Microsoft 365 的安全协作及其关联文章,为组织创建最佳协作解决方案。We recommend you use this governance content alongside Set up secure collaboration with Microsoft 365 and its associated articles to create the best collaboration solution for your organization.

数据派驻Data residency

如果你的组织是多方组织,并且你对不同的地理位置有数据驻留要求,请包含 Microsoft 365 多地理位置作为协作治理计划的一部分。If your organization is multi-national and you have data residency requirements for different geographies, include Microsoft 365 Multi-Geo as part of your collaboration governance plan.

为什么 Microsoft 365 组很重要Why Microsoft 365 groups are important

Microsoft 365 组允许你选择要与之协作的一组人员,并轻松设置供这些人员共享的资源集合。Microsoft 365 groups lets you choose a set of people with whom you wish to collaborate, and easily set up a collection of resources for those people to share. 向组添加成员会自动向组提供的所有资产授予所需的权限。Adding members to the group automatically grants the needed permissions to all assets provided by the group. Teams 和 Yammer 均使用 Microsoft 365 组来管理其成员身份。Both Teams and Yammer use Microsoft 365 groups to manage their membership.

Microsoft 365 组包括一套链接资源,用户可使用这些资源进行通信和协作。Microsoft 365 groups include a suite of linked resources that users can use for communication and collaboration. 组始终包括 SharePoint 网站、Planner、Power BI 工作区、邮箱和日历以及 Stream。Groups always include a SharePoint site, Planner, a Power BI workspace, a mailbox and calendar, and Stream. 根据组的创建方式,可以选择添加其他服务,如 Teams、Yammer 和 Project。Depending on how you create the group, you can optionally add other services such as Teams, Yammer, and Project.

显示 Microsoft 365 组和相关服务的图表

资源Resource 说明Description
CalendarCalendar 对于与组相关的计划事件For scheduling events related to the group
收件箱Inbox 对于团队成员之间的电子邮件对话。For email conversations between group members. 此收件箱具有电子邮件地址,可以设置为接受来自组外部甚至组织外部人员的邮件,这非常像传统通讯组列表。This inbox has an email address and can be set to accept messages from people outside the group and even outside your organization, much like a traditional distribution list.
OneNote 笔记本OneNote notebook 收集想法、研究和信息For gathering ideas, research, and information
计划表Planner 在团队成员之间分配和管理项目任务For assigning and managing project tasks among your group members
Power BI WorkspacePower BI Workspace 包含仪表板和报表的数据协作空间A data collaboration space with dashboards and reports
项目和路线图Project and Roadmap 基于 Web 的项目管理工具Web-based project management tools
SharePoint 团队网站SharePoint team site 与组有关的信息、链接和内容的中央存储库A central repository for information, links and content relating to your group
StreamStream 视频流服务A video streaming service
TeamsTeams Microsoft 365 中基于聊天的工作区A chat-based workspace in Microsoft 365
Yammer 组Yammer group 进行对话和共享信息的常见位置A common place to have conversations and share information

Microsoft 365 组包括各种管理控制,包括过期策略、命名约定和阻止的词语策略,可帮助你管理贵组织的组。Microsoft 365 Groups includes a variety of governance controls, including an expiration policy, naming conventions, and a blocked words policy, to help you manage groups in your organization. 由于组控制成员身份和对此资源套件的访问权限,因此管理组是管理 Microsoft 365 中的协作的关键部分。Because groups control membership and access to this suite of resources, managing groups is a key part of governing collaboration in Microsoft 365.

为组织定义协作策略Define a collaboration strategy for your organization

Microsoft 365 中有多个可以协作和对话的地方。There are multiple places to collaborate and have conversations within Microsoft 365. 了解用户可以在何处开始对话可以帮助您定义通信策略。Understanding where users can start conversations can help you define a strategy for communication.

Microsoft 365 支持三种主要通信方法:There are three main communication methods supported by Microsoft 365:

  • Outlook:通过电子邮件与共享组收件箱和日历进行协作Outlook: collaboration through email with a shared group inbox and calendar
  • Microsoft Teams:一个基于持久聊天的工作区,你可以围绕各种主题进行非正式、实时的对话,这些对话按特定子组组织Microsoft Teams: a persistent-chat-based workspace where you can have informal, real-time, conversations around a variety of topics, organized by specific sub-groups
  • Yammer:用于协作的企业社交体验Yammer: enterprise social experience for collaboration

显示何时使用 Teams、Yammer 和 Outlook 的关系图

  • Teams:基于聊天的工作区 (高速协作) 内部循环Teams: chat-based workspace (high velocity collaboration) – inner loop

    • 构建用于与用户每天合作的人协作Built for collaboration with the people your users work with every day
    • 在单一体验中将信息置于用户的指尖Puts information at the fingertips of users in a single experience
    • 添加选项卡、连接器和机器人Add tabs, connectors and bots
    • 实时聊天、音频/视频会议、录制的会议Live chat, audio/video conferencing, recorded meetings
  • Yammer:跨组织连接 (企业社交) – 外部循环Yammer: connect across the org (enterprise social) – outer loop

    • 实践社区 - 具有共同兴趣或专业知识但不一定每天一起工作的跨职能小组Communities of practice - Cross-functional groups of people who share a common interest or expertise but are not necessarily working together on a day-to-day basis
    • 领导连接、学习社区、基于角色的社区Leadership connection, learning communities, role-based communities
  • 邮箱和日历 (基于电子邮件的协作) Mailbox and calendar (email-based collaboration)

    • 用于与一组人员进行有针对性的通信Used for targeted communication with a group of people
    • 与其他组成员的会议的共享日历Shared calendar for meetings with other group members

在确定了如何在 Microsoft 365 中使用协作功能时,请考虑以下通信方法以及用户可能在不同方案中使用的方法。As you determine how you want to use collaboration features in Microsoft 365, consider these methods of communication and which your users are likely to use in different scenarios.

备注

当通过 Yammer 或 Teams 新建 Office 365 组时,该组在 Outlook 或通讯簿中不可见,因为这些用户之间的主要通信发生在各自的客户端中。When a new Office 365 Group is created via Yammer or Teams, the group isn't visible in Outlook or the address book because the primary communication between those users happens in their respective clients. Yammer 组无法连接到 Teams。Yammer groups cannot be connected to Teams.

最佳做法Best practices

开始管理规划过程时,请牢记以下最佳做法:As you start your governance planning process, keep these best practices in mind:

  • 与用户交谈 - 确定协作功能的最大用户,并与用户会面以了解其核心业务需求和用例方案。Talk to your users - identify your biggest users of collaboration features and meet with them to understand their core business requirements and use case scenarios.

  • 平衡风险和好处 - 查看业务、法规、法律和合规性需求,并规划可针对所有结果进行优化的解决方案。Balance risks and benefits - review your business, regulatory, legal, and compliance needs and plan a solution that optimizes for all outcomes.

  • 适应不同的组织和不同类型的 内容和方案 - 考虑不同组或部门以及不同类型的内容(如 Intranet 内容)与用户的 OneDrive 内容的不同需求。Adapt to different organizations and different types of content and scenarios - consider the different needs for different groups or departments and different types of content such as intranet content versus a user's OneDrive content.

  • 与业务优先级保持 一致 - 业务目标将帮助您定义在治理方面需要投入的时间和精力。Align to business priorities - business goals will help you define how much time and energy you need to invest in governance.

  • 直接在所 创建的解决方案中嵌入治理决策 - 许多管理决策可通过打开或关闭 Microsoft 365 中的功能实现。Embed governance decisions directly in the solutions you create - many governance decisions can be implemented by turning on or off features in Microsoft 365.

  • 使用分阶段方法 - 首先向一小组用户推出协作功能。Use a phased approach - Roll collaboration features out to a small group of users first. 从他们处获取反馈,观看技术支持票证,并更新任何所需的设置或流程,然后再进入更大的组。Get feedback from them, watch for help desk tickets, and update any needed settings or processes before proceeding to a larger group.

  • 通过培训加强 - 调整解决方案(如 Microsoft 365 学习路径)以确保通过 Microsoft 提供的培训强化组织特定的预期。Reinforce with training - adapt solutions such as Microsoft 365 learning pathways to ensure that your organization-specific expectations are reinforced with Microsoft-provided training.

  • 制定在组织中传达 治理策略和指南的策略 - 在 SharePoint 通信网站中创建 Microsoft 365 采用中心,以传达策略和过程。Have a strategy for communicating governance policies and guidelines in your organization - create a Microsoft 365 Adoption Center in a SharePoint communication site to communicate policies and procedures.

  • 定义角色和职责 - 确定管理核心团队,首先制定有关设置和命名以及外部访问的关键治理决策,然后完成其余决策。Define roles and responsibilities - identify your governance core team and work through key governance decisions about provisioning and naming and external access first, and then work through the remaining decisions.

  • 业务和技术变化时重新访问你的决策 - 定期开会,查看新功能和新业务预期。Revisit your decisions as business and technology changes - meet periodically to review new capabilities and new business expectations.

若要进一步了解这些做法,请阅读 创建协作管理计划For a closer look at these practices, read Create your collaboration governance plan.

最终用户影响和变更管理End user impact and change management

由于可以通过多种方式创建组和团队,因此建议培训用户以使用最适合贵组织的方法:Because groups and teams can be created in several ways, we recommend training your users to use the method that fits your organization the best:

  • 如果组织使用电子邮件执行大部分通信,请指示用户在 Outlook 中创建组。If your organization does most of its communication using email, instruct your users to create groups in Outlook.
  • 如果组织大量使用 SharePoint 或正在从本地 SharePoint 迁移,请指示用户创建 SharePoint 团队网站进行协作。If your organization heavily uses SharePoint or is migrating from SharePoint on-premises, instruct your users to create SharePoint team sites for collaboration.
  • 如果你的组织已部署 Teams,请指示你的用户创建一个团队,当他们需要协作空间时。If your organization has deployed Teams, instruct your users to create a team when they need need a collaboration space.

如果用户不熟悉组与相关服务之间如何关联,这有助于避免混淆。This helps avoid confusion if users are unfamiliar with how groups relate to their related services. 若要详细了解如何与用户讨论组,请参阅向用户解释 Microsoft 365 组For more information about how to talk to your users about groups, see Explaining Microsoft 365 Groups to your users.

关键管理功能和许可要求Key governance capabilities and licensing requirements

Microsoft 365 中协作的管理功能包括 Microsoft 365、Teams、SharePoint 和 Azure Active Directory 中的功能。Governance capabilities for collaboration in Microsoft 365 include features in Microsoft 365, Teams, SharePoint, and Azure Active Directory.

功能或特性Capability or feature 说明Description 许可Licensing
团队和网站共享Team and site sharing 控制团队、组和网站能否与组织外部人员共享。Control if teams, groups, and sites can be shared with people outside your organization. Microsoft 365 E5 或 E3Microsoft 365 E5 or E3
域允许/阻止Domain allow/block 将与组织外部人员共享限制为来自特定域的用户。Restrict sharing with people outside your organization to people from specific domains. Microsoft 365 E5 或 E3Microsoft 365 E5 or E3
自助式网站创建Self-service site creation 允许或阻止用户创建自己的 SharePoint 网站。Allow or prevent users from creating their own SharePoint sites. Microsoft 365 E5 或 E3Microsoft 365 E5 or E3
受限制的网站和文件共享Restricted site and file sharing 将网站、文件和文件夹共享限制为特定安全组的成员。Restrict site, file, and folder sharing to members of a specific security group. Microsoft 365 E5 或 E3Microsoft 365 E5 or E3
受限制的组创建Restricted group creation 将团队和组创建限制为特定安全组的成员。Restrict team and group creation to members of a specific security group. 具有 Azure AD Premium 或 Azure AD Basic EDU 许可证的 Microsoft 365 E5 或 E3Microsoft 365 E5 or E3 with Azure AD Premium or Azure AD Basic EDU licenses
组命名策略Group naming policy 对组和团队名称强制实施前缀或后缀。Enforce prefixes or suffixes on group and team names. 具有 Azure AD Premium 或 Azure AD Basic EDU 许可证的 Microsoft 365 E5 或 E3Microsoft 365 E5 or E3 with Azure AD Premium or Azure AD Basic EDU licenses
组过期策略Group expiration policy 将非活动组和团队设置为过期,并指定时间段后删除。Set inactive groups and teams to expire and be deleted after a specified period of time. 具有 Azure AD Premium 许可证的 Microsoft 365 E5 或 E3Microsoft 365 E5 or E3 with Azure AD Premium licenses
按组的来宾访问Per-group guest access 允许或阻止每个组与组织外部人员共享团队和组。Allow or prevent team and group sharing with people outside your organization on a per-group basis. Microsoft 365 E5 或 E3Microsoft 365 E5 or E3

协作治理规划分步规划Collaboration governance planning step-by-step

按照以下基本步骤创建管理计划:Follow these basic steps to create your governance plan:

  1. 考虑关键业务目标和流程 - 创建管理计划 以满足业务需求。Consider key business goals and processes - create your governance plan to meet the needs of your business.
  2. 了解服务中的设置 - 组和 SharePoint 中的设置互相交互,就像组 、SharePoint 和 Teams 和其他服务 中的设置一样Understand settings in services - settings in groups and SharePoint interact with each other, as do settings in groups, SharePoint and Teams and other services. 在规划管理策略时,请务必了解这些交互。Be sure to understand these interactions as you plan your governance strategy.
  3. 规划管理用户访问 - 规划要授予组 、SharePoint和 Teams 中的用户的访问权限级别。Plan to manage user access - plan the level of access you want to grant users in groups, SharePoint, and Teams.
  4. 计划管理合规性设置 - 查看 Microsoft 365 组、Teams 和 SharePoint 协作的可用合规性选项Plan to manage compliance settings - review the available compliance options for Microsoft 365 groups, Teams, and SharePoint collaboration.
  5. 规划管理通信 - 查看协作 方案的可用通信管理选项Plan to manage communications - review the available communications governance options for collaboration scenarios.
  6. 规划组织和生命周期管理 - 选择要用于组和团队创建、命名、过期 和存档的策略Plan for organization and lifecycle governance - choose the policies you want to use for group and team creation, naming, expiration, and archiving. 此外,了解组、团队和 Yammer 的生命周期 结束选项Also, understand the end of lifecycle options for groups, teams, and Yammer

建议的调控步骤的图示

管理员培训Training for administrators

Microsoft Learn 中的这些培训模块可帮助你了解 Microsoft 365 中的调控功能。These training modules from Microsoft Learn can help you learn the governance features in Microsoft 365.

信息保护Information protection

培训:Training: 管理信息保护和治理Manage information protection and governance
信息保护培训图标 如今,生成的数据数量比以往更快地增长,员工希望任何地方都完成工作,并且法规环境不断变化。The amount of data being generated today is growing faster than ever, employees want to get work done everywhere, and the regulatory landscape is constantly changing. Microsoft 的信息保护和治理解决方案可帮助组织在保持数据受保护和人员高效之间实现正确平衡。Microsoft's solutions for information protection and governance help organizations achieve the right balance between keeping their data protected and their people productive. 此学习途径可帮助你准备 Microsoft 365 认证:安全管理员关联与Microsoft 365 认证:企业管理专家认证。This learning path can help you prepare for the Microsoft 365 Certified: Security Administrator Associate and Microsoft 365 Certified: Enterprise Administration Expert certifications.

5 小时 13 分钟 - 学习路径 - 7 个模块5 hr 13 min - Learning Path - 7 Modules



培训:Training: 使用 Microsoft 365 保护企业信息Protect enterprise information with Microsoft 365
Teams 培训图标 保护和保证组织的信息安全以往任何时候都更具挑战性。Protecting and securing your organization's information is more challenging than ever. 使用 Microsoft 365 保护企业信息学习路径介绍如何防止敏感信息被意外过度分享或滥用,如何发现和分类数据,如何使用敏感度标签保护数据,以及如何同时监视和分析敏感信息以防信息丢失。The Protect enterprise information with Microsoft 365 learning path discusses how to protect your sensitive information from accidental oversharing or misuse, how to discover and classify data, how to protect it with sensitivity labels, and how to both monitor and analyze your sensitive information to protect against its loss. 此学习路径可帮助你准备 Microsoft 365 认证:安全管理员关联和 Microsoft 365 认证:企业管理专家认证。This learning path can help you prepare for the Microsoft 365 Certified: Security Administrator Associate and Microsoft 365 Certified: Enterprise Administration Expert certifications..

1 小时 - 学习路径 - 5 个模块1 hr - Learning Path - 5 Modules

安全性和合规性Security and compliance

培训:Training: 展示有关 Microsoft 365 安全和合规性功能的基本知识Demonstrate fundamental knowledge of Microsoft 365 security and compliance capabilities
安全与合规培训图标 了解 Microsoft 365 安全性和合规性解决方案领域以及可用于帮助企业保护企业并满足法规要求的功能。Learn about the Microsoft 365 security and compliance solutions areas and the capabilities available to help enterprises secure their enterprise and meet regulatory requirements. 如果你不熟悉基本的云计算概念,我们建议你学习云概念 - 云计算原则If you're unfamiliar with basic cloud computing concepts, we recommend you take Cloud Concepts - Principles of cloud computing.

3 小时 11 分钟 - 学习路径 - 8 个模块3 hr 11 min - Learning Path - 8 Modules

插图Illustrations

这些插图将帮助您了解组和团队如何与 Microsoft 365 中的其他服务交互,以及哪些治理和合规性功能可帮助您在组织中管理这些服务。These illustrations will help you understand how groups and teams interact with other services in Microsoft 365 and what governance and compliance features are available to help you manage these services in your organization.

面向 IT 架构师的 Microsoft 365 中的组Groups in Microsoft 365 for IT Architects

对于 Microsoft 365 中的组,IT 架构师需要了解的信息What IT architects need to know about groups in Microsoft 365

Item 说明Description
组信息图的缩略图Thumb image for groups infographic
PDF | VisioPDF | Visio
2019 年 6 月更新Updated June 2019
这些图示详细介绍了不同类型的组,如何创建和管理这些组,以及一些治理建议。These illustrations detail the different types of groups, how these are created and managed, and a few governance recommendations.

Microsoft 365 中生产力服务的逻辑体系结构,以 Microsoft Teams 为主导。The logical architecture of productivity services in Microsoft 365, leading with Microsoft Teams.

Item 说明Description
Teams 逻辑体系结构海报缩略图Thumb image for Teams logical architecture poster
PDF | VisioPDF | Visio
2019 年 4 月更新Updated April 2019
Microsoft 提供了一系列生产力服务,这些服务协同工作,提供数据治理、安全性和符合性相关功能的协作体验。Microsoft provides a suite of productivity services that work together to provide collaboration experiences with data governance, security, and compliance capabilities.

此系列图示展示了企业架构师生产力服务的逻辑体系结构,以 Microsoft Teams 为主导。This series of illustrations provides a view into the logical architecture of productivity services for enterprise architects, leading with Microsoft Teams.

Microsoft 365 信息保护和合规性功能Microsoft 365 information protection and compliance capabilities

Microsoft 365 包括一组广泛的信息保护和合规性功能。Microsoft 365 includes a broad set of information protection and compliance capabilities. 这些功能与 Microsoft 的生产力工具一起旨在帮助组织实时协作,同时遵守严格的法规合规性框架。Together with Microsoft’s productivity tools, these capabilities are designed to help organizations collaborate in real time while adhering to stringent regulatory compliance frameworks.

这组插图使用监管最严格的行业之一金融服务,演示如何应用这些功能来解决常见的法规要求。This set of illustrations uses one of the most regulated industries, financial services, to demonstrate how these capabilities can be applied to address common regulatory requirements. 可随时根据自己的使用情况来修改这些插图。Feel free to adapt these illustrations for your own use.

ItemItem 说明Description
模型海报:Microsoft 365 信息保护和合规性功能Model poster: Microsoft 365 information protection and compliance capabilities
英语:以 PDF 格式下载 | 以 Visio 格式下载English: Download as a PDF | Download as a Visio
日语:以 PDF 格式下载 | 以 Visio 格式下载Japanese: Download as a PDF | Download as a Visio
2020 年 11 月更新Updated November 2020
包括:Includes:
  • Microsoft 信息保护和数据丢失防护Microsoft information protection and data loss prevention
  • 保留策略和保留标签Retention policies and retention labels
  • 信息屏障Information barriers
  • 通信合规性Communication compliance
  • 内部风险Insider risk
  • 第三方数据摄取Third-party data ingestion

会议会话Conference sessions

观看这些会议会话,详细了解 Microsoft 365 组和 Teams 的治理。Watch these conference sessions to learn more about governance for Microsoft 365 Groups and Teams.

基础知识Fundamentals

了解 Microsoft 365 组的基础和新的创新,包括大规模管理和治理、推动使用和采用的最佳方案以及自助服务。Learn the fundamentals and new innovations in Microsoft 365 Groups, including management and governance at scale, best practices for driving usage and adoption, and self-service.

治理Governance

了解如何设置组过期生命周期、命名策略、分类标签、与外部来宾的协作以及管理组创建权限。Learn how to set up your groups expiry lifecycle, naming policies, classification labels, collaboration with external guests, and manage group creation permissions.

客户示例Customer example

请参阅 Microsoft 365 组、SharePoint、Teams 和 Yammer 如何协同工作以提供全局协作平台的后台示例。See a behind-the-scenes example of how Microsoft 365 Groups, SharePoint, Teams, and Yammer work together to provide a global collaboration platform.

另请参阅See also

Microsoft 365 安全中心文档Microsoft 365 security documentation

Microsoft 365 合规性文档Microsoft 365 compliance documentation