{
  "schemaVersion": 1,
  "platform": "microsoft-365",
  "label": "Microsoft 365",
  "route": "/microsoft-365/",
  "sourceRoot": "content/microsoft-365",
  "summary": "Personal-tenant administration evidence organized by Microsoft 365 technology, task, result, proof, scope, and limitation.",
  "technologies": [
    {
      "slug": "tenant-administration",
      "label": "Tenant Administration",
      "status": "validated",
      "statusLabel": "Demonstrated in personal tenant",
      "skill": "Microsoft 365 tenant administration",
      "task": "Reviewed organization settings, verified domains, subscribed services, users, groups, and admin-center state.",
      "result": "A structured tenant inventory and proof map connect administrative work to reviewable exports, screenshots, and manifests.",
      "proof": {
        "label": "Open the Microsoft 365 proof map",
        "href": "/evidence-library/projects/microsoft-365-lab/m365-entra-site-proof-map-20260605.html"
      },
      "scope": "Personal Microsoft 365 tenant.",
      "limitations": "Does not represent client, production, or enterprise-scale tenant ownership."
    },
    {
      "slug": "entra-id",
      "label": "Entra ID",
      "status": "validated",
      "statusLabel": "Demonstrated in personal tenant",
      "skill": "Identity and access administration",
      "task": "Reviewed users, groups, memberships, directory roles, devices, sign-ins, and directory audit records.",
      "result": "Identity objects and administrative relationships are preserved in structured exports with bounded claims.",
      "proof": {
        "label": "Review Entra evidence",
        "href": "/evidence-library/projects/microsoft-365-lab/m365-entra-site-proof-map-20260605.html"
      },
      "scope": "Read-only review and evidence capture in a personal tenant.",
      "limitations": "Does not prove large-scale lifecycle ownership or privileged production administration."
    },
    {
      "slug": "security-compliance",
      "label": "Security and Compliance",
      "status": "validated",
      "statusLabel": "Validated in personal tenant",
      "skill": "Identity and messaging security administration",
      "task": "Reviewed Defender mail protections and Conditional Access evaluation, corrected an external-user policy scope issue, and validated the resulting sign-in behavior.",
      "result": "Audit and sign-in evidence show the policy update succeeded, MFA remained effective, and the external-user block no longer applied to the internal test account.",
      "proof": {
        "label": "Open the messaging and security case study",
        "href": "/m365-messaging-security.html"
      },
      "scope": "Personal Microsoft 365 developer tenant.",
      "limitations": "Does not prove organization-wide security assurance, production incident response, or enterprise policy ownership."
    },
    {
      "slug": "applications",
      "label": "Applications",
      "status": "validated",
      "statusLabel": "Application inventory reviewed",
      "skill": "Application and service-principal governance",
      "task": "Reviewed app registrations, enterprise applications, service principals, and OAuth permission grants.",
      "result": "Application identities and delegated relationships are represented in structured evidence.",
      "proof": {
        "label": "Review application evidence",
        "href": "/evidence-library/projects/microsoft-365-lab/m365-entra-site-proof-map-20260605.html"
      },
      "scope": "Read-only inventory and governance review.",
      "limitations": "Does not prove application development, production consent ownership, or tenant-wide remediation."
    },
    {
      "slug": "exchange-online",
      "label": "Exchange Online",
      "status": "validated",
      "statusLabel": "Validated in personal tenant",
      "skill": "Exchange Online support administration",
      "task": "Configured and validated a shared mailbox with delegation, a distribution group, an enforced external-sender transport rule, and message delivery tracing.",
      "result": "PowerShell and message-trace evidence confirm the scoped Exchange objects, delegation, rule state, and delivered test messages.",
      "proof": {
        "label": "Open the messaging and security case study",
        "href": "/m365-messaging-security.html"
      },
      "scope": "Personal Microsoft 365 developer tenant.",
      "limitations": "Does not prove production mail-flow ownership, retention governance, enterprise-scale messaging administration, or client tenant responsibility."
    },
    {
      "slug": "intune",
      "label": "Intune",
      "status": "validated",
      "statusLabel": "Validated on physical Autopilot endpoint",
      "skill": "Windows Autopilot and Microsoft Intune endpoint administration",
      "task": "Registered and targeted a physical Windows endpoint, completed user-driven Microsoft Entra join and Intune enrollment through branded OOBE and ESP, deployed required Microsoft 365 Apps and security settings, and remediated Secure Boot compliance.",
      "result": "Endpoint and Intune evidence confirm Entra join, active MDM enrollment, required application deployment, BitLocker, Defender, firewall, VBS, Secure Boot, successful Settings Catalog check-in, and final compliant state.",
      "proof": {
        "label": "Open the Windows Autopilot and Intune case study",
        "href": "/windows-autopilot-intune.html"
      },
      "scope": "One physical Lenovo endpoint in a scoped personal Microsoft 365 developer tenant pilot.",
      "limitations": "Demonstrates a controlled single-device Autopilot and Intune pilot, not production fleet ownership or enterprise-scale endpoint operations."
    },
    {
      "slug": "sharepoint",
      "label": "SharePoint",
      "status": "documented",
      "statusLabel": "Preserved documentation collection",
      "skill": "SharePoint documentation and content preservation",
      "task": "Preserved an indexed SharePoint export collection with source paths, hashes, excerpts, and curated navigation.",
      "result": "The original documentation remains inspectable without presenting exported pages as live SharePoint resources.",
      "proof": {
        "label": "Open the preserved SharePoint index",
        "href": "/evidence-library/preserved-sharepoint/index.html"
      },
      "scope": "Preserved personal-lab documentation exports.",
      "limitations": "Does not prove administration of a live production SharePoint environment."
    },
    {
      "slug": "teams",
      "label": "Teams",
      "status": "documented",
      "statusLabel": "Documented in preserved sources",
      "skill": "Teams and group collaboration administration",
      "task": "Documented team, channel, group, and collaboration setup concepts through preserved lab material.",
      "result": "Teams-related administration knowledge is connected to preserved source documentation.",
      "proof": {
        "label": "Browse preserved collaboration documentation",
        "href": "/evidence-library/preserved-sharepoint/index.html"
      },
      "scope": "Personal-lab documentation.",
      "limitations": "Does not prove ownership of a live organizational Teams environment."
    },
    {
      "slug": "automation",
      "label": "Automation",
      "status": "validated",
      "statusLabel": "Repository-backed",
      "skill": "Microsoft Graph and PowerShell evidence automation",
      "task": "Used read-only scripts and structured exports to capture tenant, identity, policy, application, sign-in, and audit evidence.",
      "result": "Repeatable collection workflows produce reviewable CSV, JSON, Markdown, and manifest artifacts.",
      "proof": {
        "label": "Review automation and evidence work",
        "href": "/projects.html"
      },
      "scope": "Verified repository scripts and documented references.",
      "limitations": "Referenced scripts are not treated as executed or authored unless the raw source is present and verified."
    }
  ]
}