Versions Compared

Old Version 11

changes.mady.by.user Sigalit Hassid

Saved on

compared with

New Version Current

changes.mady.by.user Sigalit Hassid

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Prerequisites for SharePoint Online

...

The URL of the SharePoint admin center of the SharePoint tenant you will be setting CardioLog Analytics on.

...

Prerequisites for installing the CardioLog Analytics SaaS Power BI Reports 

  1. At least one user account with a Power BI Pro or Power BI Premium Per User (PPU) license. We highly recommend Power BI Premium Per User (PPU) to benefit from increased Power BI resources, faster report loading and refresh times, and enhanced capabilities for monitoring Power BI capacity and resource usage. To find the optimal Power BI license plan for your organization, you can use this Power BI licensing calculator.
    Note: End users who only need to consume reports do not require a Power BI license. You can share reports with them in exported formats, such as CSV, PDF, or Excel, or embed them within SharePoint using the "publish to web" feature (which generates a public link to the report).

    Download the CardioLog Analytics App from the Microsoft Office App Store (installing the App requires global admin permissions).
    Image Removed
  2. Download the CardioLog Analytics SaaS Tracking Agent solution for SharePoint Online - CardioLog Analytics Integration.wsp
  3. Make sure you have the MSOnline module in PowerShell.
  4. Make sure any SharePoint preservation policies are temporarily turned off, while installing the CardioLog Analytics SaaS App, in order to approve the App:
    Office 365 Admin > Security and Compliance > Data governance > Retention > Policies > set Status Off
    Image Removed

    End users can access Power BI reports by logging in with their personal Microsoft 365 accounts via a web browser. Installing Power BI Desktop is not required.

  5. An account with Global Admin permissions is required to perform the following actions:

    1. Grant Permissions to the CardioLog Analytics Power BI Connector Azure Entra ID (Azure AD) App to enable the app to connect to your organization's Power BI environment. The app is automatically created after connecting to Power BI in the configuration page.

      1. Create a new security group in Azure Entra ID (Azure AD) - Microsoft Azure Portal > Azure Entra ID > Groups > New Group

      2. Add the CardioLog Analytics Power BI Connector app registration as a member in the newly created security group.

      3. Allow the app to use the Power BI API - Power BI Admin Portal > Tenant Settings > Developer Settings > Enable Service principals can use Fabric APIs, select Specific security groups and add the previously created group.

    2. Create a new CardioLog Analytics SaaS workspace in Power BI - Power BI Admin Portal > Tenant settings > Workspace settings > enable the Create workspaces (new workspace experience) setting.

    3. Add the app as an Admin on the workspace - Power BI > Workspaces > CardioLog Analytics SaaS > Manage access > Add people or groups > add the created security group and assign the Admin role.

  6. The Power BI dataset size is limited based on your Power BI license. In case the limit is reached, upgrade your Power BI license plan.

  7. The Power BI data processing resources are limited based on your Power BI license. In case resources are exceeded, upgrade your Power BI license plan.

  8. The Power BI dataset is refreshed once a day. Only one dataset is allowed. In case multiple datasets and/or multiple refreshes per day are required, contact us to upgrade your subscription plan. 

  9. Support for custom made Power BI reports and measures, as well as integrations with additional data sources will require professional services.

Prerequisites for installing the CardioLog Analytics SaaS App from the Microsoft Store

  1. Access to the internet from all end users workstations, make sure that the following domains are not blocked by the browser: "azurewebsites.net" and "windows.net"

  2. The URL of the SharePoint admin center of the SharePoint tenant you will be setting CardioLog Analytics on.

  3. An account with Microsoft 365 Global Admin permissions is required in order to install the CardioLog Analytics SaaS App.

  4. Make sure that your tenant allows custom Apps authentication in order to install the CardioLog Analytics SaaS App and in order for CardioLog Analytics SaaS to securely communicate with the SharePoint API.  

    Note: In case your tenant has this option disabled and DisableCustomAppAuthentication is set to True (note that it is disabled by default for SharePoint Online tenants created on August 2020 or later), you can execute the following command in SharePoint Online Management Shell in order to enable it:

    Info
    iconfalse
    Set-SPOTenant -DisableCustomAppAuthentication $false


  5. Make sure control access based on specific network locations is turned off, in order to allow communications to CardioLog Analytcs Analytics SaaS.
    Office 365 Admin > All Admin Centers > SharePoint     Admin Center > Device access > Control access based on network location > Uncheck "Only allow access Policies > Access control > Network location > Turn off "Allow access only from specific IP address locationsranges".
    Image Removed
    Make sure custom scripts are turned on (changes in this setting take up to 24 hours to apply):
    Office 365 Admin > Admin Centers > SharePoint Admin Center > Settings > Custom Script > Select Allow in both options
    Image Removed
    Image Removed

    Image Added

  6. Verify an App Catalog is available in the SharePoint Online tenant:
    1. Sign in to Office 365 with your SharePoint Online global admin account.
    2. Go to the SharePoint admin center.
      Image Removed 
       to Office 365 Admin > All Admin Centers > SharePoint.

      Image Added

    3. Select Apps from the Quick Launch bar on the left, and then select App Catalog
    4. If there is no app catalog site created yet, select Create a new app catalog site, and then select OK.



    5.  On the Create App Catalog Site Collection page, enter the required information, and then select OK.

        

Prerequisites for

...

installing the CardioLog Analytics SaaS Tracking Agent 

Prerequisites for installing the CardioLog Analytics SaaS Tracking Agent using a SharePoint App

  1. When using a Microsoft Entra ID App (recommended):
    1. Prepare a SharePoint global administrator account to consent to the required permissions to automatically install all tracking components on your sites.
  2. When using a SharePoint App (deprecated):
    1. Prepare a SharePoint global administrator account to create a 'full-trust' SharePoint App.
    2. Make sure that your tenant allows custom Apps authentication in order for the SharePoint App to securely communicate with the SharePoint API.  

      Note: In case your tenant has this option disabled and DisableCustomAppAuthentication is set to True (note that it is disabled by default for SharePoint Online tenants created on August 2020 or later), you can execute the following command in SharePoint Online Management Shell in order to enable it:

      Code Block
      Set-SPOTenant -DisableCustomAppAuthentication $false
  3. Make sure that the site collections you would like to track are not locked with NoAccess state.

Prerequisites for installing the CardioLog Analytics SaaS Tracking Agent using a PowerShell Script

  1. Prepare a Microsoft Office 365 service account with the following permissions in order to install the CardioLog Analytics SaaS Tracking Agent:
    • SharePoint tenant administrator account; 
    • Site collection administrator (not just administrator) of the app catalog site collection of your tenant;
    • Administrator of all the site collections that you are looking forward to include in the CardioLog Analytics SaaS reports.
  2. Make sure you have PowerShell version 5.1 or higher, with the MSOnline module installed.

  3. Custom scripts should be temporarily allowed for the duration of the installation (DenyAddAndCustomizePages should be set to Disabled), on your App Catalog and on each site collection you wish to monitor, in order to add the JavaScript tracking code and Tracking Agent application (sppkg for modern sites, wsp solution for classic sites).

  4. Make sure that the site collections you would like to track are not locked with NoAccess state.

Prerequisites for installing the CardioLog Analytics SaaS Tracking Agent manually

  1. Prepare a Microsoft Office 365 service account with the following permissions in order to install the CardioLog Analytics SaaS Tracking Agent components:
    • SharePoint tenant administrator account; 
    • Site collection administrator (not just administrator) of the app catalog site collection of your tenant;
    • Administrator of all the site collections that you are looking forward to include in the CardioLog Analytics SaaS reports.

  2. Custom scripts should be temporarily allowed for the duration of the installation (DenyAddAndCustomizePages should be set to Disabled), on your App Catalog and on each site collection you wish to monitor, in order to add the JavaScript tracking code and Tracking Agent application (sppkg for modern sites, wsp solution for classic sites).

  3. Make sure that the site collections you would like to track are not locked with NoAccess state.

Prerequisites for tracking PnPSearch

Info
Note: Tracking PnP Search in SharePoint Online requires an additional license and is not included out-of-the-box.

  1. Supported Versions:

    • PnP Search version 4.7

    • PnP Search version 4.13

  2. Supported Controls:

    • Search control

    • Search Results control

  3. Supported Layouts in the Search Results Control:

    • List

    • Details List

Prerequisites for SharePoint On-Prem

Prerequisites for installing the CardioLog Analytics SaaS Power BI Reports 

  1. At least one user account with a Power BI Pro or Power BI Premium Per User (PPU) license. We highly recommend Power BI Premium Per User (PPU) to benefit from increased Power BI resources, faster report loading and refresh times, and enhanced capabilities for monitoring Power BI capacity and resource usage. To find the optimal Power BI license plan for your organization, you can use this Power BI licensing calculator.
    Note: End users who only need to consume reports do not require a Power BI license. You can share reports with them in exported formats, such as CSV, PDF, or Excel, or embed them within SharePoint using the "publish to web" feature (which generates a public link to the report). End users can access Power BI reports by logging in with their personal Microsoft 365 accounts via a web browser. Installing Power BI Desktop is not required.

  2. An account with Global Admin permissions is required to perform the following actions:

    1. Grant Permissions to the CardioLog Analytics Power BI Connector Azure Entra ID (Azure AD) App to enable the app to connect to your organization's Power BI environment. The app is automatically created after connecting to Power BI in the configuration page.

      1. Create a new security group in Azure Entra ID (Azure AD) - Microsoft Azure Portal > Azure Entra ID > Groups > New Group

      2. Add the CardioLog Analytics Power BI Connector app registration as a member in the newly created security group.

      3. Allow the app to use the Power BI API - Power BI Admin Portal > Tenant Settings > Developer Settings > Enable Service principals can use Fabric APIs, select Specific security groups and add the previously created group.

    2. Create a new CardioLog Analytics SaaS workspace in Power BI - Power BI Admin Portal > Tenant settings > Workspace settings > enable the Create workspaces (new workspace experience) setting.

    3. Add the app as an Admin on the workspace - Power BI > Workspaces > CardioLog Analytics SaaS > Manage access > Add people or groups > add the created security group and assign the Admin role.

  3. The Power BI dataset size is limited based on your Power BI license. In case the limit is reached, upgrade your Power BI license plan.

  4. The Power BI data processing resources are limited based on your Power BI license. In case resources are exceeded, upgrade your Power BI license plan.

  5. The Power BI dataset is refreshed once a day. Only one dataset is allowed. In case multiple datasets and/or multiple refreshes per day are required, contact us to upgrade your subscription plan. 

  6. Support for custom made Power BI reports and measures, as well as integrations with additional data sources will require professional services.

Prerequisites for configuring CardioLog Analytics SaaS with SharePoint On-Prem

  1. All SharePoint On-Premises environments integrated with our product must use HTTPS with SSL/TLS certificates issued by a publicly trusted Certificate Authority (CA). Connections over HTTP or any non-secure protocols are not supported. 
  2. Access to the internet from all end users workstations, make sure that the following domains are not blocked by the browser: "azurewebsites.net" and "windows.net"
  3. The SharePoint farm admin service account credentials (make sure the farm admin account has full access rights in to the selected web applications user policyin SharePoint Central Administration > Manage Web Application > User Policy).
  4. Download

    Access from the CardioLog Analytics SaaS

    Tracking Agent solution for SharePoint 2013/2016 - CardioLogTrackingAgentFeature.wspConfigure a site-to-site VPN to securly access the customers' SharePoint environment from Intlock's Azure network

    Azure network to the customer’s SharePoint On-Premise API is required. The access method can be configured based on the customer’s preference and security policies, such as:

    • Site-to-Site VPN – Secure connection between CardioLog Analytics SaaS Azure network and the customer’s SharePoint environment. The list of supported VPN devices and instructions on configuring the VPN can be
    found here. Contact us for more details.

...

    • found here. 
    • Public IP with Firewall Rules – Controlled inbound access from the CardioLog Analytics SaaS Azure network.
    • Azure Application Proxy – Secure SharePoint access via Microsoft Azure AD Application Proxy.

    For more details, please contact Intlock Support.

Prerequisites for installing the CardioLog Analytics SaaS Tracking Agent 

  1. Prepare a user account with the following permissions in order to install the CardioLog Analytics SaaS Tracking Agent:
    • SharePoint farm administrator; 
    • A local administrator on the SharePoint central admin server and WFE servers.
  2. Make sure you have PowerShell version 5.1 or higher.
  3. For customers with SharePoint 2019 modern sites,
    1. Prepare a user account that is a member of the sites Owners group and has Full Control permissions on the App Catalog.
    2. Verify your environment supports using Apps for SharePoint 2019 and enable Apps for your farm:
      1. Go to the SharePoint Central Administration.
      2. Navigate to Apps and Configure Store Settings.

        Image Added

      3. Make sure you have the App Purchases enabled.
        SharePoint Central Administration > Apps > Configure Store Settings > App Purchases > Select Yes for         Should end users be able to get apps from the SharePoint Store?

        Image Added

Prerequisites for Viva Engage (Yammer)

  1. A dedicated service account that is a Verified Admin in the Yammer Viva Engage network.
  2. At least one least one user account with a Power BI Pro or Power BI pro account (the Yammer Premium Per User (PPU) license (the Viva Engage reports are displayed in Power BI). This user will become the owner of the app workspace in Power BI and will be able to share it with others in the organization and collaborate on reports.
  3. Enable Soft Delete3rd Party Applications (to install the CardioLog Analytics SaaS app from the Yammer Apps Directory)
    1. Log on to Yammer Viva Engage with a verified admin and click on the gear icon to open Settings.

      Image Added

    2. Settings > Edit Network Admin Settings > Network > Configuration > Enabled Features > select 3rd Party Applications.

      Image Added

      Image Added


      Image Added

  4. Enable Archive data retention policy (to import data about deleted content).
    1. Log on to Viva Engage with a verified admin and click on the gear icon to open Settings.Image Removed
    2. Settings > Network Admin > Content and Security > Data Retention > select Soft Delete Archive option.

      Image Added

  5. Enable Private Content mode (to import data about private groups)
    1. Log on to Yammer Viva Engage with a verified adminadmin and click on the gear icon to open Settings.
    2. Go to Settings > Network Admin > Content and Security > Content Mode > select Private Content mode and click Save.
  6. Enable the new Viva Engage for all users with opt-out option only for Admins (to install the Yammer configuration app).
    1. Log on to Viva Engage with a verified admin and click on the gear icon to open Settings.
    2. Settings > Edit Network Admin Settings > Network > New Viva Engage > select Enable the new Viva Engage for all users with opt-out option only for Admins and click Save.

      Image Added

  7. Disable concealed user, group, and site names (to import actual user names).
    1. Log on to Microsoft 365 admin center.
    2. Go to Settings > Org settings > Reports.
    3. Clear the Display concealed user, group, and site names in all reports option. 

      Image Added

Prerequisites for Microsoft Teams and Exchange Online

  1. Disable concealed user, group, and site names (to import actual user names).
    1. Log on to Microsoft 365 admin center.
    2. Go to Settings > Org settings > Reports.
    3. Clear the Display concealed user, group, and site names in all reports option. 

      Image Added

 

 

Note: Intlock supports merely products and/or solutions within third party vendor’s Mainstream Support policy, including but not limited to Windows (OS), Windows Server, SQL Server databases, browsers, etc. Intlock support for products and/or solutions under third party vendor’s Extended Support policy, might requires further efforts based on professional services, which will be priced separately by Intlock upon Client’s request. Intlock at its sole discretion might not provide any support services whatsoever to any third party vendor products and/or solutions that are not being included under third party vendors' Mainstream or Extended Support policies.