UmsWiki - User contributions [en]

G Suite

2022-08-04T08:55:51Z

Tod: /* FAQ */

UMS integrates to G Suite with the module G Suite Sync which:

*Creates users and their e-mail accounts
*Maintains users in G Suite, i.e. data changes are synchronised to UMS
*Synchronises passwords
*Deletes users who no longer attend the school

Integration to G Suite quickly becomes profitable. With UMS, the school saves resources by automating many manual tasks

*Avoid having to program scripts to synchronise the data
*Users are automatically created with data from your student administration system
*It reduces the workload for the IT-department

==Prerequisites==

===Supported administrative systems===

===Module requirements===
[[UMS]]

===Additional functionality===

===Testing after setup===

===What to have ready===

===Is any physical item required===

===Should third party be contacted===

==Installation==
'''Google Apps'''
[[File:Googleappsadminsettings.png|none|thumb|577x577px]]

======Organization settings======
See description how to create/setup further down this page

''Users''

'''“Mail Alias”'''

Choose what to use as the users mail address (login).

'''“Disable users”'''

When marked the users will be disabled when they are no longer attending classes.

'''“Delete users”'''

Choose if users are to be deleted after grace period has ended.

'''“Forward mail to on premise mail server”'''

This will forward the users Office 365 mail to the primary mail address from AD (If user does not have a proxy address it will read it from the mail attribute)

'''“Keep inactive before deleting x days”'''

Specify a grace period where users are disabled.

''Distribution lists''

'''“Maintain lists”'''

Mark this to create distribution groups in Office 365. The groups will be created, updated and deleted if this is specified.

'''“Delete lists”'''

Mark this to delete distributions groups when they are no longer active in the administrative system. Check the data export manuals too when this happens

'''“Delete unused lists after x days”'''

Specify in days how long the distribution groups are to be kept alive in Office 365 before deletion.

'''“Only senders inside my organization”'''

With this marked only users in the domain will be able to send to distribution groups created by UMS.

''Template security groups''

'''“Maintain”'''

This will create the security group entered in the field “template security group” in the destination node in the template settings.

''Timetable''

'''“Maintain”'''

Mark this to create timetable blocks in Google Apps. They will be created, updated and deleted.

'''“Delete old”'''

Mark this to delete old timetable blocks from calendars.

===''Site''===
[[File:Googleappssite.png|none|thumb|720x720px]]

'''“Automation type”'''

Full: Means that site maintenance will be fully automated.

'''“Remove learner method”'''

“Deleted in AD”

Users will be removed from site when they are not active in UMS anymore

“Finished on activity/course”

Users will be removed when they have finished with the course.

'''“Delete sites”'''

“Auto delete”

Sites will be delete when the last student has left the site

“Manual Delete”

Sites will not be deleted by UMS. This has to be done by an administrator

'''“Send mail to teacher(s)”'''

Send mail notification to teachers when they are attached to a site.

'''“Create x days before”'''

Choose how many days before start that the sites are to be created.

'''“Delete x days after end”'''

Choose how many days after end that the sites are to be deleted.

'''“Teacher rights on sites”'''

Rights the teacher will have on the site when attached.

'''“Learner rights on sites”'''

Rights the student/learner will have on the site when attached.

==='''SQL Groups'''===
Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''“Activity Sites”'''

'''“Do not create”'''

It will not create any sites based on activities.

'''“LMS has to be checked”'''

The field Aktivitet_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all sites.

'''Title'''

Title of the site. Changing this after a site has been created will cause it to be updated.

'''Description'''

Description of the site. Changing this after a site has been created will cause it to be updated.

==='''Search filter and criteria'''===
This will enable you to concatenate sites that would have been created as to or more sites to be created as one site.
[[File:Googleappssearchfilters.png|none|thumb|401x401px]]

'''“Remarks”'''

This is just for description purposes.

'''“Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the site with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

 '''“Length”'''

How many characters will be removed from the string.

“'''Add activity short description to node ID'''“

This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

===='''Examples'''====
If you have three activities named English1, English2, English3 and you only want one SharePoint site.

Set the settings as shown below
[[File:Googleappsseachfilters2.png|none|thumb|413x413px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

'''“Course Sites”'''

Course URL’s will always be created as “activity_course”.

'''“Do not create”'''

It will not create any sites based on courses.

'''“LMS has to be checked”'''

The field Skolefag_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all sites.

'''Title'''

Title of the site. Changing this after a site has been created will cause it to be updated.

'''Description'''

Description of the site. Changing this after a site has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate sites that would have been created as two or more sites to be created as one site.
[[File:Googleappsseachfilters3.png|none|thumb|427x427px]]

'''“Remarks”'''

This is just for description purposes.

'''“Course Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the site with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

'''“Activity Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the site with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

==='''<big>Drive</big>'''===
[[File:Googleappsdrive.png|none|thumb|720x720px]]

'''“Automation type”'''

'''<big>Full</big>''': Means that drive maintenance will be fully automated.

'''<big>“Remove learner method”</big>'''

'''“Deleted in AD”'''

Users will be removed from drive when they are not active in UMS anymore

'''“Finished on activity/course”'''

Users will be removed when they have finished with the course.

'''<big>“Delete drives”</big>'''

'''“Auto delete”'''

Drives will be delete when the last student has left the drive

'''“Manual Delete”'''

Drives will not be deleted by UMS. This has to be done by an administrator

'''“Send mail to teacher(s)”'''

Send mail notification to teachers when they are attached to a drive.

'''“Create x days before”'''

Choose how many days before start that the drives are to be created.

'''“Delete x days after end”'''

Choose how many days after end that the drives are to be deleted.

'''“Teacher rights on drives”'''

Rights the teacher will have on the drive when attached.

'''“Learner rights on drives”'''

Rights the student/learner will have on the drive when attached.

'''“SQL Groups”'''

Members of these groups will be attached to all drives created with this setting as teachers
[[File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''“Activity Drives”'''

'''“Do not create”'''

It will not create any sites based on activities.

'''“LMS has to be checked”'''

The field Aktivitet_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all drives.

'''Description'''

Description of the drive. Changing this after a drive has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate drives that would have been created as to or more drives to be created as one drive.
[[File:Googleappssearchfilters.png|none|thumb|401x401px]]

'''“Remarks”'''

This is just for description purposes.

'''“Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the drive with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

 '''“Length”'''

How many characters will be removed from the string.

“'''Add activity short description to node ID'''“

This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

'''Examples'''

If you have three activities named English1, English2, English3 and you only want one SharePoint drive.

Set the settings as shown below
[[File:Googleappsseachfilters2.png|none|thumb|413x413px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

'''“Course Drives”'''

Course URL’s will always be created as “activity_course”.

'''“Do not create”'''

It will not create any drives based on courses.

'''“LMS has to be checked”'''

The field Skolefag_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create drives based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all drives.

'''Description'''

Description of the drive. Changing this after a drive has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate drives that would have been created as two or more drives to be created as one drive.

[[File:Googleappsseachfilters3.png|none|thumb|427x427px]]
'''“Remarks”'''

This is just for description purposes.

'''“Course Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the drive with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

'''“Activity Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the drive with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

=== ''Classroom'' ===
There can only be a maximum of 990 classrooms in total in one organization.

'''Google designed features (Not UMS)'''

If a teacher leaves the school, the material that he has put into classrooms will be deleted as well.

If a user has too many classrooms it will be very slow for this user.
[[File:Googleappsclassroomsettings.png|none|thumb|720x720px]]

'''“Automation type”'''

Full: Means that classroom maintenance will be fully automated.

'''“Remove learner method”'''

“Deleted in AD”

Users will be removed from classroom when they are not active in UMS anymore

“Finished on activity/course”

Users will be removed when they have finished with the course.

'''“Delete classrooms”'''

“Auto delete”

Classrooms will be delete when the last student has left the classroom

“Manual Delete”

Classrooms will not be deleted by UMS. This has to be done by an administrator

'''“Send mail to teacher(s)”'''

Send mail notification to teachers when they are attached to a classroom.

'''“Create x days before”'''

Choose how many days before start that the classroom s are to be created.

'''“Delete x days after end”'''

Choose how many days after end that the classroom s are to be deleted.

'''“SQL Groups”'''

Members of these groups will be attached to all classrooms created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''“Activity Classroomss”'''

'''“Do not create”'''

It will not create any sites based on activities.

'''“LMS has to be checked”'''

The field Aktivitet_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all classrooms.

'''Description'''

Description of the classroom. Changing this after a classroom has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate classrooms that would have been created as to or more classrooms to be created as one classroom.
[[File:Googleappssearchfilters.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssearchfilters.png|none|thumb|401x401px]]

'''“Remarks”'''

This is just for description purposes.

'''“Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the classroom with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

 '''“Length”'''

How many characters will be removed from the string.

“'''Add activity short description to node ID'''“

This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

'''Examples'''

If you have three activities named English1, English2, English3 and you only want one SharePoint classroom.

Set the settings as shown below
[[File:Googleappsseachfilters2.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsseachfilters2.png|none|thumb|413x413px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

'''“Course Classrooms”'''

Course URL’s will always be created as “activity course”.

'''“Do not create”'''

It will not create any classrooms based on courses.

'''“LMS has to be checked”'''

The field Skolefag_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create classrooms based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all classrooms.

'''Description'''

Description of the classroom. Changing this after a classroom has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate classrooms that would have been created as two or more classrooms to be created as one classroom.
[[File:Googleappsseachfilters3.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsseachfilters3.png|none|thumb|427x427px]]

'''“Remarks”'''

This is just for description purposes.

'''“Course Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the classroom with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

'''“Activity Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the classroom with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

=== '''Organization Settings''' ===
When creating Google API refer to this lInk

[[Google app API|http://wiki.inlogic.dk/index.php/Google_app_API]] [[File:Googleappsorganizationsettings.png|none|thumb|378x378px]]

'''“Description”'''

Add a description to be able to identify the account.

'''“Admin login”'''

Mail address of an administrative user

'''“Password”'''

Password for the admin login specified

'''“Domain”'''

The google domain that is used.

'''“Client ID”, “Client Secret”'''

This is obtained when following the instructions in the PDF document

'''“Refresh token”'''

This will be generated the first time google synchronization is started. If this is reset UMS will asked for it again when the next synchronization is run.

'''“Timetable Users”'''

This can be used when creating timetable blocks. Look in timetable documentation for this feature.

'''Template Settings'''

This is where you specify which templates are synchronized with Google and how.
[[File:Googleappstemplateeditor.png|none|thumb|687x687px]]

'''“Setting”'''

This is the setting described above

'''“Organization setting”'''

Specify where the users are created
[[File:Googleappsaosettings.png|none|thumb|422x422px]]

'''Path'''

This is where all users is placed

'''Use this path when below 13 years of age'''

This is where users that are under 13 years is placed. If this is not specified everyone will be placed under the path setting. (This is helpful when it comes to Google+)

'''OU Description'''

The description that is set on the OU when it is created.

'''Site settings'''

Settings used when creating sites from this template
[[File:Googleappssitesettings.png|none|thumb|422x422px]]

'''Site category'''

A list of categories added to the site when creating it separated with a ;

A category called UMS will be added aswell. (This cannot be change)

'''“SQL Groups”'''

Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''Drive settings'''

Settings used when creating drives from this template
[[File:Googleappsdrivesettings.png|none|thumb|429x429px]]

'''“Path”'''

The path where the drives are created

'''Create user specific subfolder'''

Create a folder for each student that is attached to each drive

'''Suffix'''

A text string that is appended to the folder name

'''Create subfolder (Teacher Read/Write - Student Read)'''

A folder where teachers can upload data that students can only read

'''Suffix'''

A text string that is appended to the folder name

'''Create subfolder (Teacher Read/Write - Student Read/Write)'''

A folder where teachers and students can share data both with read/write

'''Suffix'''

A text string that is appended to the folder name

'''Example'''
[[File:Googleappsstudents.png|none|thumb|279x279px]]

'''“SQL Groups”'''

Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''Classroom settings'''

Settings used when creating classrooms from this template
[[File:Googleappsclassroomsettings2.png|none|thumb]]

'''“SQL Groups”'''

Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

==Installation G Suite Sync==
Steps to make UMS sync work with G Suite.

Log on <nowiki>https://console.developers.google.com</nowiki> with your Google Admin account.

Create a project
[[File:Googlesyncproject2.png|none|thumb|594x594px]]

When created choose project and click the newly created project.

Choose “Enable and manage APIs”. Enable these APIs
[[File:Googlesyncenableapi.png|none|thumb|463x463px]]

Click credentials

And choose “OAuth client ID”

Choose settings as show on below image. Name can be changed.
[[File:Googlesyncoauth.png|none|thumb|499x499px]]

Then choose “Create”

Which creates an OAuth 2.0 client ID

Enter Client ID and Client Secret into UMS
[[File:Googlesyncoauth2.png|none|thumb|513x513px]]

Go back to “Overview” and choose “Enabled APIs”

Click on each API you added and choose Quota
[[File:Googlesyncenableapi2.png|none|thumb|517x517px]]

Set the number as high as you can without “apply for higher quota”
[[File:Googlesyncapplyhighquota.png|none|thumb|439x439px]]

And you are done with this site.

Now Log on https://admin.google.com with your Google Admin account

Find “Other Google Services” - can be located under “More Controls” or under APPS aplaced at page bottom.

Click “add services” upper right corner

Then click “Add it now” on “Groups for Business”
[[File:Googlesyncservices.png|none|thumb|495x495px]]

Back to start and choose “Security”

Choose “API reference” and check “Enable API access”
[[File:Googlesyncsecurity.png|none|thumb|439x439px]]

Go to the UMS “usermanagement folder” and run “GoogleApps_Sync.exe” manually.

Login to Google using credentials from Google Organization settings.

When logged in succesfully, “Accept” the following
[[File:Googlesyncaccept.png|none|thumb|578x578px]]
If you get a “This page can’t be displayed”
[[File:Googlesyncpagenotfound.png|none|thumb|315x315px]]

Do not be alarmed. The job has been activated and you can check your GoogleApps_Sync.log to confirm that the job has completed running.

==Parameters==
> GoogleApps_Sync.exe [<optional> Action]
Eg.
> GoogleApps_Sync.exe

> GoogleApps_Sync.exe UsersOnly
{| class="wikitable"
|+Users
!Parameter
!Description
|-
|UsersOnly
|Runs all the parameters in this table
|-
|CreateLearners
|
|-
|CreateStaff
|
|-
|UpdateLearners
|
|-
|UpdateStaff
|
|-
|RenameLearners
|Rename the learners with a new mail/Login
|-
|RenameTeachers
|Rename the teachers with a new mail/Login
|-
|DeleteLearners
|
|-
|DeleteStaff
|
|-
|DisableLearners
|
|-
|EnableLearners
|
|-
|DisableStaff
|
|-
|EnableStaff
|
|-
|UpdateLearnerOU
|Move the learners to the correct OU
|-
|UpdateTeacherOU
|Move the teachers to the correct OU
|-
|UpdateTeacherMailForward
|
|-
|UpdateLearnerMailForward
|
|}
{| class="wikitable"
|+Groups
!Parameter
!Description
|-
|GroupsOnly
|Runs all the parameters in this table
|-
|CreateGroups
|
|-
|CleanUpGroups
|
|-
|AddTeachersToGroups
|
|-
|RemoveTeachersFromGroups
|
|-
|AddLearnersToGroups
|
|-
|RemoveLearnersFromGroups
|
|}
{| class="wikitable"
|+Template groups
!Parameter
!Description
|-
|TemplateGroupsOnly
|Runs all the parameters in this table
|-
|RemoveUsersFromTemplateGroups
|Remove users from template security groups
|-
|AddUsers2TemplateGroups
|Add users to template security groups
|-
|DeleteTemplateGroups
|Delete groups that are no longer template security groups
|}
{| class="wikitable"
|+Web sites
!Parameter
!Description
|-
|WebSitesOnly
|Runs all the parameters in this table
|-
|AddSites2DB
|Add new sites to UMS DB
|-
|CreateSites
|
|-
|UpdateSites
|
|-
|DeleteSites
|
|-
|AddTeachers2Site
|
|-
|AddLearners2Site
|
|-
|DeleteTeachersWebSites
|
|-
|DeleteLearnersWebSites
|
|}
{| class="wikitable"
|+Classroom
!Parameter
!Description
|-
|ClassroomOnly
|Runs all the parameters in this table
|-
|AddClassrooms2DB
|Add new classrooms to UMS DB
|-
|CreateClassrooms
|
|-
|UpdateClassrooms
|
|-
|DeleteClassrooms
|
|-
|AddTeachers2Classroom
|
|-
|AddLearners2Classroom
|
|-
|DeleteTeachersClassroom
|
|-
|DeleteLearnersClassroom
|
|}
==Technical settings==

==FAQ==
Why do I not get the drive/site created?

1. Activity

a. Is there a user on the activity with a primary template that has an office 365 setting attached

b. Is the flag Aktivitet_LMS = True

2. Course

a. Is there a user on the course with a primary template that has an office 365 setting attached

b. Is the flag Skolefag_LMS = True

===CreateGroups Error===
''Get root folders [Inlogic_Alle 1e-elever]''

''(CreateGroups) Error Google.Apis.Requests.RequestError''

''Not Authorized to access this resource/api [403] Errors [ Message[Not Authorized to access this resource/api] Location[ - ] Reason[forbidden] Domain[global]''

''Get root folders''

''(CreateGroups) Error Google.Apis.Requests.RequestError''

''Not Authorized to access this resource/api [403]''

''Errors [ Message[Not Authorized to access this resource/api] Location[ - ] Reason[forbidden] Domain[global]''

'''The reason why that error occurs is that the mail adr. is used by another group or user. Test by manually creating a group in google admin portal. The image below shows the error.'''

'''To correct this error''': create a '''USER''' with the same email address and then delete it again. After this, it will be possible to create the Group.
[[File:Fgd.png|left|thumb|935x935px]]

Username Generator

2022-07-06T07:49:25Z

Tod: /* Settings */

This is used to generate usernames for users in UMS.

==Steps==
First you need to create some options for the setting your going to create later on.

Then add the database replacements.

Then create a setting with a list of prioritized options.

Finally add a username setting to the template that needs this.

==Options==

====AddString====
This option lets you add a fixed string to the username
[[File:UsernameGenerator Options AddString.jpg|none|thumb|656x656px]]

====AutoNumber====
This option lets you add a number to the username.
[[File:UsernameGenerator Options AutoNumber.jpg|none|thumb|656x656px]]

You can define the starting number and pad left to make sure it has the correct length.

If you set the start number to 1 and set pad left to 4, the number will be 0001

This number will automatically increase when a duplicate string is found in username.

'''eg - If the username starts with AB then it will return AB0001'''

'''AB0001 (first instance autonumber)'''

'''AC0001 (first instance autonumber)'''

'''AD0001 (first instance autonumber)'''

'''AB0002 (next instance autonumber)'''

The username number is stored in the database in the table "UsernameGenerator_Numbers"

====DBField====
This option lets you take a field from the database table ImportFromDB and use as a starting string.
[[File:UsernameGenerator Options DBField.jpg|none|thumb|656x656px]]

====LowerCase====
This lowercases the username.
[[File:UsernameGenerator Options LowerCase.jpg|none|thumb|656x656px]]

====Pad====
This lets you pad the username either left or right with a character you specify and a length.
[[File:UsernameGenerator Options Pad.jpg|none|thumb|656x656px]]
If you pad 12 right and the username is AB it will return ABkkkkkkkkkk.

====Replace====
This lets you replace characters in the username with new characters or blank.
[[File:UsernameGenerator Options Replace.jpg|none|thumb|656x656px]]

If you check "Use replace from database table" it will use this feature "Database replacements".
[[File:UsernameGenerator Options DBReplace.jpg|none|thumb|656x656px]]
 

====Replace all non alphanumeric====
This will replace all characters in the username that are not within these ranges with the new string or blank

a-z

A-Z

0-9

-
[[File:UsernameGenerator Options ReplaceAllNonAlphanumeric.jpg|none|thumb|765x765px]]

====Substring====
This will replace a part of the username with a new string or blank.
[[File:UsernameGenerator Options SubString.jpg|none|thumb|656x656px]]
====Uppercase====
This uppercases the username.
[[File:UsernameGenerator Options UpperCase.jpg|none|thumb|656x656px]]

==Database replacements==
Define the strings you want to have replace with new or blank string.
[[File:UsernameGenerator Database replacements.jpg|none|thumb|492x492px]]
When it looks at a username it will run through all the rows and replace them if they are found.

 

== Example as uni-login ==

=== 2 letters of first name followed by 2 letters of last name and Autonumber. ===

=== Create these Option: ===

* First name: Create option that retrieves first name from DBfield
* Last Name : Create option that retrieves last name from DBfield
* AutoNumber : Create option autonumber. As shown below in Autonumber picture
* DB Replace: Create option DB replace, which change å, ø, å etc. As shown below in DB Replacement picture.
* First 2 characters : Create option take first 2 characters. As shown below in first 2 characters picture.
* First 4 characters : Create option take first 4 characters. As shown below in first 4 characters picture.
* Pad Right 2: Create option Pad Right 2. As shown below in Pad Right 2 picture.
* Pad Right 4: Create option Pad Right 4. As shown below in Pad Right 4 picture.
* Replace all non alphanumeric
* LowerCase ALL

Vicktor Jeppesen : VIJE0123

Tonny Thomsen : TOTH0124

Sultan Kirkegård SUKI0125

Autonumber starts at 123 and runs up. Padding character 0 and pad length 4. e.g. Sultan Kirkegård S U K I 0 1 2 3
[[File:Skærmbillede 2022-07-06 090457.png|none|thumb|489x489px]]

DB Replacement.
[[File:Replacement.png|none|thumb|491x491px]]

First 2 characters.
[[File:First2chara.png|none|thumb|491x491px]]

First 4 characters
[[File:First4.png|none|thumb|495x495px]]
Pad right 2 (J Hansen) Username = JFHA
[[File:Imagesdf.png|none|thumb|514x514px]]

Pad Right 4 (Jan H) Username = JAHF
[[File:Sds.png|none|thumb|520x520px]]

==Settings==
This is where you create a prioritized list options. This setting is then attached to a template.
[[File:UsernameGenerator Settings.jpg|none|thumb|383x383px]]

File:Sds.png

2022-07-06T07:46:39Z

Tod:

sfsf

File:Imagesdf.png

2022-07-06T07:38:25Z

Tod:

dsf

File:First4.png

2022-07-06T07:34:58Z

Tod:

ada

File:First2chara.png

2022-07-06T07:27:26Z

Tod:

File:Replacement.png

2022-07-06T07:22:51Z

Tod:

sdf

File:Skærmbillede 2022-07-06 090457.png

2022-07-06T07:05:41Z

Tod:

sdf

Username Generator

2022-06-30T06:57:11Z

Tod: /* Pad */

STIL UNI Login

2022-06-28T13:43:17Z

Tod: /* FAQ */

UNI•Login er et digitalt ID for børn, unge og ansatte på institutioner, som giver adgang til nationale tjenester og en lang række pædagogiske services og online læremidler. UNI•Login kan bruges både til gratis webtjenester og til webtjenester, som institutionerne kan abonnere på. Institutionerne benytter ofte UNI•Login til adgangsstyring på lokalnet, intranet, trådløse net, skytjenester og andre webløsninger, hvor brugerne skal sikres nem adgang. UNI-Login leveres af STIL, Styrelsen for IT og Læring, der tidligere hed Uni-C.

==Prerequisites==

===Supported administrative systems===
Alle

===Module requirements===
[[UMS]]

===Should third party be contacted===
Kræver en adgang til WS17 ved STIL som skal bestilles.

https://viden.stil.dk/display/STILVIDENOFFENTLIG/Tilslutning#expand-Sdanopretterduentilslutningsaftale

OLD LINK (http://www.stil.dk/It-og-administration/Brugere-og-adgangsstyring/Udbyder-UNILogin/UNI-Login-Eksport)

==UNI-C Dataprovider==
Sender UNI-Login’s til STIL

For at sende disse data til STIL skal man aktiverer servicen '''UNILogin Upload'''. Se mere her [[Configurator/Services]]

Når det er indtastet vil servicen hvert 5 minut se efter om der er kommet en ny students tabel og sende nye data til STIL.

Når man har indtastet navnet og gemt skal man starte servicen "'''UMS UNILogin Upload'''" eller genstarte serveren.

Sættes op på den enkelte template under UNI-C noden
[[File:STIL Account setting.jpg|none|thumb|485x485px]]

===Account settings===
Her bestemmes hvor man vil sende brugerne fra den pågældende template hen.

===Institution number===
Det institutions nummer hvor data skal sendes hen.

===Upload UNI Logins to STIL===
Tells UMS that all templates using this setting will be uploaded to STIL. This will create/add users to the institution number.

===Create new UNI login when CPR changes===
When a CPR changes UMS will tell STIL that it has to create a new UNI login.

If this checkbox is not checked, then you must manually change the UNI Login at https://ba.emu.dk at the same time you change it in the administrative system.

===Access group===
Members of this Active Directory group will have access to this account in UMS Web.

The module is called STIL Settings and can be found under the Control Panel in UMS Web.

===Write back webservice pincode===
Bruges til kommunikation med elevplan hvis fraværs beskeder skal sendes til dem

===Elevplan Institution number===
Det elevplans institutions nummer hvor data skal sendes hen.

===Elevplan keyord===
SMS keyword som UMS reagerer på når det sendes ind til UMS gateway. Når det står først i Sms’en vil den blive sendt videre til elevplan. Man vil modtage en SMS fra elevplan om at den er modtaget hvis ikke man får den indenfor 30 minutter, skal man gensende Sms’en.

===Company mail address for employees===
Det bruges når der laves en upload af data til STIL til unilogin generering (UNILogin Upload). Man kan bestemme den adresse man har ved uddannelses institutionen. Bruges f.eks. til SDBF systemet.

===Company mail address for students===
Det bruges når der laves en upload af data til STIL til unilogin generering (UNILogin Upload). Man kan bestemme den adresse man har ved uddannelses institutionen.

===Mail===
Lister felterne fra students tabellen hvis man lader den stå i <Not Used> vil den automatisk bruge brugernavnet som man har i AD.

===Mail Domain===
Her indtaster man f.eks. inlogic.dk

Hvis ikke man vælger at indtaste noget i feltet mail domain men kun sætter mail feltet vil mail feltet skulle indeholde hele mail adressen.

==UNI-Login Settings==
[[File:Stiluniloginsettings.png|none|thumb|569x569px]]

===Use UNI-Login===
Her sættes der op om denne template skal bruge UNI-Login

===Force update UNI-Login===
Hvis man ændrer UNI-Login skal det så slå igennem i UMS. Dette vil betyde at brugeren bliver nedlagt og en ny oprettet.

==Upload af data==
For at kunne uploade data som sendes til STIL skal man have et Onlinetjeneste-abonnement. Informationer om dette kan findes her.

http://www.stil.dk/It-og-administration/Brugere-og-adgangsstyring/Udbyder-UNILogin/Onlinetjenester

For at bestille skal man sende en mail til [[Mailto:uniloginudbyder@STIL.dk| uniloginudbyder@STIL.dk]] med teksten og bestillingsformularen.

===Bestillingsformular===
Vi vil gerne have en konto som har adgang til WS10 upload og WS17 download af UNI-Logins. inLogic løsning.
Oplysninger
IP:
Institutions numre:
Dette findes under Modules -> UNI-Sync
[[File:STIL UNISync setup.jpg|none|thumb|368x368px]]

===Activate UNI-Sync===
Skal vi sende/hente data fra STIL

===Institution numbers===
Indtast hvilke institutions numre der skal hentes fra

===Data provider settings (Onlinetjeneste-abonnement)===
Indstillinger som skal bruges til WS10 (Sende data) og WS17 (hente data)

http://www.stil.dk/~/media/STIL/Filer/PDF13_14/140521%20UNI%20Login%20Import%20WS10%20v31.pdf

http://www.stil.dk/~/media/STIL/Filer/Publikationer/Tekniske%20vejledninger/UNI-ogin%20Eksport%20WS17%20v1.3.pdf

===Username===
Username need to access webservice.

===Password===
Password need to access webservice.

===Password synchronization (UNI-Sync abonnement)===
For at kunne password synkroniserer med STIL skal man have et UNI-Sync abonnement. Informationer findes her

http://www.stil.dk/It-og-administration/Brugere-og-adgangsstyring/Institutioner-og-kommuner/UNISync

(Det er kun nødvendigt at sætte kryds ved punkt A3 =” Automatisk via en webservice (kræver kendskab til SOAP)”.)

===Username===
Username need to access webservice.

===Password===
Password need to access webservice.

==Opsætning på brugeradministrationen==
For at kunne hente fra STIL og sende data til STIL skal man give lov til det. Det sætter man op i <nowiki>https://ba.emu.dk</nowiki>

En vejledning for opsætningen af WS17 kan findes her.

<nowiki>http://www.stil.dk/~/media/STIL/Filer/PDF15/150714%2017ws%20afsend%20og%20godkend%20Dataforspoergsel%20til%20skoler.pdf</nowiki>

UMS vil hente alle WS10

===Pakke===
Man skal som minimum have adgang til en fuld eller mellem pakke. Specifikationerne for de enkelte pakker kan ses nedenunder.

Dataaftale for UNI-Login Eksport

(UNI-Login webservice ws17)

Udbydere med ws17 dataadgang kan trække nedenstående information afhængigt af den valgte pakke.
{| class="wikitable"
| colspan="8" | - Den fulde pakke: Alle data i skemaet - markeret F

- Mellem pakken: Data i skemaet, som er markeret M

- Den lille pakke: Data i skemaet, som er markeret L

Data om ansatte, elever, værger og andre kontaktpersoner
|-
| colspan="3" | - CPR-nummer
| colspan="2" |F
| colspan="2" |M
|
|-
| colspan="3" | - Fornavn(e)
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Efternavn
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Privatadresse (Se adresseinformation)
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Hjemmetelefon (Se telefonnummer-information)
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Arbejdstelefon (Se telefonnummer-information)
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Mobiltelefon (Se telefonnummer-information)
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - E-mail
| colspan="2" |F
| colspan="2" |M
|
|-
| colspan="3" | - Fødselsdag
| colspan="2" |F
| colspan="2" |M
|
|-
| colspan="3" | - Køn
| colspan="2" |F
| colspan="2" |M
|
|-
| colspan="3" | - PhotoId
| colspan="2" |F
| colspan="2" |M
|
|-
| colspan="3" |
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" |Adresseinformation:
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" | - Om adressen er beskyttet
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Adressens vejnavn, nr. og etage
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Postnummer
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - By
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Landekode
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Land
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Kommunekode
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Kommunenavn
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" |
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" |Telefonnummer-information:
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" | - Om telefonnummeret er beskyttet
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Telefonnummer
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" |
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" |Supplerende data om elever
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" | - Studietype (elev eller stud)
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Studienummer
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Elevens niveau (for grundskoleelever)
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Elevens hovedgruppe (klasse)
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Yderligere grupper elever er tilknyttet
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Kontaktlærer
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Kontaktperson(er)s relation (mor, far osv.)
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Om kontaktperson(er) har forældremyndighed
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Afdeling, bygning eller værelsesnummer på efterskoler
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - ID i det lokale studieadministrative system
| colspan="2" |F
| colspan="2" |M
|L
|}
{| class="wikitable"
|Supplerende data om ansatte
|
|
|
|-
|<nowiki>- Ansættelsestype (lærer, tap, pæd eller gæst)</nowiki>
|F
|M
|L
|-
|<nowiki>- Initialer</nowiki>
|F
|M
|L
|-
|<nowiki>- Stilling</nowiki>
|F
|M
|L
|-
|<nowiki>- Afdeling, bygning eller værelsesnummer på efterskoler</nowiki>
|F
|M
|L
|-
|<nowiki>- Grupper medarbejderen er tilknyttet</nowiki>
|F
|M
|L
|-
|<nowiki>- ID i det lokale studieadministrative system</nowiki>
|F
|M
|
|-
|
|
|
|
|-
|Data om UNI-Login for ansatte og elever
|
|
|
|-
|<nowiki>- UNI-Login brugernavn (brugerID)</nowiki>
|F
|M
|L
|-
|<nowiki>- Initialpassword</nowiki>
|F
|M
|
|-
|<nowiki>- Om inititalpassword er gældende password</nowiki>
|F
|M
|
|-
|<nowiki>- Brugerens navn i UNI-Login</nowiki>
|F
|M
|
|-
|<nowiki>- SkoleKom-navn</nowiki>
|F
|M
|
|-
|<nowiki>- Brugerens selvvalgte email-adresse i UNI-Login</nowiki>
|F
|M
|
|-
|<nowiki>- Brugerens selvvalgte mobilnummer i UNI-Login</nowiki>
|F
|M
|
|-
|
|
|
|
|-
|Data om grupper på institutionen
|
|
|
|-
|<nowiki>- Gruppeid</nowiki>
|F
|M
|L
|-
|<nowiki>- Gruppenavn</nowiki>
|F
|M
|L
|-
|<nowiki>- Gruppetype</nowiki>
|F
|M
|L
|-
|<nowiki>- Niveau</nowiki>
|F
|M
|L
|-
|<nowiki>- Spor</nowiki>
|F
|M
|L
|-
|<nowiki>- Startdato</nowiki>
|F
|M
|L
|-
|<nowiki>- Slutdato</nowiki>
|F
|M
|L
|}

==FAQ==

===Hvordan checker jeg om min IP er åbnet hos STIL?===
Man kan teste adgangen via denne url:

<nowiki>https://ws04.infotjeneste.uni-c.dk/infotjenesteunilogin-ws/ws?WSDL</nowiki>

Den skulle gerne returnere et xml. Dokument – hvis i får en Access denied, så er der ikke åbnet for jeres IP.

===Hvilke CPR numre sendes til STIL (Gammel ordning)===
Alle rigtige CPR numre

Alle Fiktive CPR numre begyndende med 6,7,8 eller 9 og som overholder modulus 11

===Hvilke CPR numre bliver ikke sendt til STIL (Gammel ordning)===
Alle CPR numre som ikke overholder modulus 11

Alle CPR numre som indeholder bogstaver

===Hvilke CPR numre sendes til STIL (Ny ordning)===
Numerisk værdi der overholder modulus 11

Hvis cpr numre indeholder bogstaver opretter UMS Uni-login på baggrund af SLI id.

===Hvis man skifter CPR nummer beholder man så sit UNI Login===
Ja

===Må der kører andre importer end den fra inLogic===
Nej, det vil ødelægge automatikken med at beholde sit unilogin hvis man skifter CPR.

===Kan man få generet UNI-Login’s med det samme===
Ikke helt, men næsten.

Det kræver 2 kørsler af GetStudents med en upload af data imellem (UNILogin Upload servicen skal have kørt). Inden man kører anden kørsel af GetStudents skal STIL have haft nok tid til at lægge data fra deres back end miljø ud til de webservice’s hvor man henter data. En tommel finger regel kunne være 20-30 minutter.

===Skal Easy-C jobs slåes fra (C001 og C002)===
Ja de må ikke køre sammen med vores

===Skal LUDUS jobs slåes fra===
Ja kun upload man kan stadig download til ludus

===InstitutionPerson ikke indlæst! Ikke forventet CPR til localPersonID - skal omidentificeres: LocalPersonId====
Read this [[STIL UNI Login#Create new UNI login when CPR changes]] 

===Errors = Fejl 8: Gruppen blev sat til en anden GroupType end Hovedgruppe===
Errors = Fejl 8: Gruppen blev sat til en anden GroupType end Hovedgruppe, men der findes 1 Student med gruppen som MainGroupId fra en anden importkilde! Fjern f.rst alle elever fra hovedgruppen i den anden kilde: GroupId=20amu006

Fejlen rettes ved at sikre at der ikke køres nogen andre imports end fra UMS. Derefter skal man rydde op i manuelt tilknyttede brugere som stadig har denne gruppe som stamklasse.

 

===Initial user password.===
It is not possible to change the initial password in the STIL/UNi-C Administrative website.

'''Find Unilogin på bruger i SQL UniSync.'''

select * from UniSync

where CivilRegistrationNumber =' '

 

=== Errors Duplicate unique value = double space in name ===
(UploadToUniSync) Error uploading XML. Institution number = 661015 - Username = ws661015 - Password = xYhrNhixLQSg Errors = org.xml.sax.SAXParseException; Duplicate unique value '''[Ekstra mat for..r 2022 (2hf)'''] declared for identity constraint of element "Institution".

UMS.UMSException: org.xml.sax.SAXParseException; Duplicate unique value [Ekstra mat for..r 2022 (2hf)] declared for identity constraint of element "Institution". at UNILogin_Upload.Worker.UploadWS10_Net5(XmlImport Institution) at UNILogin_Upload.Worker.UploadToUniSync(CancellationToken stoppingToken)

Intranote

2022-05-30T12:52:55Z

Tod:

The DocuNote integration allows IntraNote to retrieve data from the UMS web server.

==Prerequisites==

===Module requirements===
[[UMS]]

===What to have ready===
An opened firewall directly into the UMS. Typically port 80 or 443

==Installation==
See [[Configurator/Webservice|Webservice]]

===Template Setting===
Create a Intranote setting than will be attached to a template. Intranote can only retrieve data from the templates that have an option attached.

[[File:Intranote.png|815x815px]]

UMS will generate a department code when pressing Generate. department code must be used in Intranote to retrieve data.

==Technical settings==

==FAQ==

=== What happens after the configurations are done ? ===
When configurations are done in backend, inLogic is responsible for communicate technical details only to our customers .

Forward technical Information to your personal contact at intranote.

* See [[Configurator/Webservice|Webservice]]
* Department Code

InLogic SMS Gateway

2022-05-24T13:21:24Z

Tod: /* Root Settings */

==Important==
To be able to send SMS, the inLogic SMS Gateway requires GSM modems with USB interface. We recommend "HUAWEI LTE USB Stick Model: E3372".

===Hardware Compatibility List===
[http://consumer.huawei.com/en/mobile-broadband/e3531/specs/ Huawei E3531]

[http://consumer.huawei.com/en/mobile-broadband/e3372/ Huawei E3372] (inLogic's choice)

[http://consumer.huawei.com/lk/mobile-broadband/dongles/features/e3131-lk.htm Huawei E3131i]

[http://www.tp-link.com/la/products/details/cat-5090_MA260.html TP-Link MA260]

==Network Port Openings==

====TCP port openings from server to gateway. TCP port opening where UMS sms sever service run.====
{| class="wikitable"
!Port
!Usage
|-
|22
|SSH access
|-
|443
|HTTPS access
|}

====TCP port openings from gateway to server.====
{| class="wikitable"
!Port
!Usage
|-
|80
|HTTP access
|-
|443
|HTTPS access
|}

==Prepare Modem==
{|
![[File:20180516 104258-50%.jpg|none|thumb|800x800px]]
!Plug-in Modems

!
!
|-
|[[File:20180516 104358-50%.jpg|none|thumb|800x800px]]
|'''Plug-in Ethernet cable'''

'''Plug-in power cable'''
|
|
|-
|
|
|
|
|-
|
|
|
|
|}

==System Login==
Once the gateway is [[#Prepare Modem|prepared]] and booted, open a browser and go to http://192.168.1.2. Login through the 'Login' button in the top right corner.
[[File:Main Login button.png|none|thumb|1240x1240px]]
You will now see a login box where you can log in with with USERNAME: admin and PASSWORD: admin.
[[File:Login.png|none|thumb|1240x1240px]]

==Main Page==
After logging in, the system info page appears. This page shows the gateway's status.[[File:Main.png|none|thumb|1240x1240px]]
To open the menu, click on this icon: [[File:Foxbox menu button.png|frameless|23x23px]]
[[File:Main with menu.png|none|thumb|1240x1240px]]

==Network Configuration==
Click on menu tab 'Network config'.

Change the IP settings and press 'Save Configuration'. When you have saved your settings, [[InLogic SMS Gateway#Reboot|Reboot]] the gateway as instructed below in 'Modem Settings'.
[[File:Network Config.png|none|thumb|1240x1240px]]

==Modem Settings==

===Hostname and Frontend Settings===

====Hostname====
Open the menu and go to 'Modem Settings'.

Set 'Modem Hostname' as FQDN and save your changes. Your modem will now restart.[[File:Modem Settings Hostname.png|none|thumb|1240x1240px]]

====Frontend====
Open the menu and go to 'Modem Settings'.

If redirect is enable on iis set (HTTPS)

Change 'FrontEnd Address' to fit your configuration and save your settings.[[File:Modem Settings Frontend.png|none|thumb|1240x1240px]]

===Certificate Settings (https)===
Open the menu and go to 'Modem Settings'.

Click 'Choose File' and choose a .pfx certificate from your computer.

Entera a .pfx certificate password in the 'Certificate Password' field and click 'Save'.
[[File:Modem Settings Certificate.png|none|thumb|1240x1240px]]

===User Settings===
Open the menu and go to 'Modem Settings'.

The default admin user password is 'admin'. To change the default admin user password, write the new password in the 'Password' field just below the 'Username' field admin.

The default sendsms user password is 'sendsms'. To change the default sendsms user password, write the new password in the 'Password' field just below the 'Username' field sendsms.

Click 'Save' to confirm the password change.
[[File:Modem Settings User.png|none|thumb|1240x1240px]]

==Control Panel==
Open the menu and go to 'Control Panel'.

Here, you can see staus, as well as turn on and off, the SMS Engine.[[File:Control Panel.png|none|thumb|1240x1240px]]

==SMS==

===Inbox===
To see a log for incoming messages, open the menu and go to 'Inbox'.
[[File:Inbox.png|none|thumb|1240x1240px]]

===Outbox===
To see a log for outgoing messages, open the menu and go to 'Outbox'.
[[File:Outbox.png|none|thumb|1240x1240px]]

===Failed===
To see a log for failed messages, open the menu and go to 'Failed'.
[[File:Failed.png|none|thumb|1240x1240px]]
===Write New===
To write a new SMS, open the menu and go to 'Write New'.

Choose the modem you wish to send your message from in the drop down menu 'Outgoing channel'. If left blank, the system will choose the first available modem.

Enter the phone number you wish to send your SMS to in the 'To' field. Pleas note that international prefix is mandatory.

Write your message in the 'Message' field.

When you have finished, click 'Send'.[[File:Write New guide.png|none|thumb|1240x1240px]]

==Time Zone Settings==
Open the menu and go to 'Time Zone Settings'.

The NTP & Time Zone Settings is by default set to enable external NTP.

For internal NTP, uncheck the 'Enable External NTP' box and write a list of NTP servers separated by comma, in the 'Internal NTP' field.

To change your time zone, choose a time zone from the 'Time Zone' drop down menu.

Click 'Save' to change your settings.
[[File:Time Zone Settings.png|none|thumb|1240x1240px]]

==Tools==
Open the menu and go to 'Modem Settings'.

===Shell===
Use 'in browser' shell to change advanced settings.

Use with caution! Please note that if you make any changes without consulting us first, support will be charged accordingly with our hourly rate.
[[File:Modem Settings Shell.png|none|thumb|1240x1240px]]
===Root Settings===
Change of root password require putty.exe. Default root password can be requested from inlogic.

Use Putty.exe to connect to Inlogic Gateway, run command ''(sudo passwd root'') and follow the instructions on screen.
[[File:Modem Settings Root.png|none|thumb|1240x1240px]]

==Additional information==
Additional information about the product, users, and programs used in the tutorial.
====Usernames and passwords====
====SSH Clients====
{| class="wikitable"
|+A list of SSH Clients
!Program name
!URL
|-
|PuTTy
|https://www.putty.org/
|}

====Open source FTP Client====
{| class="wikitable"
|+A list of FTP clients
!Program name
!URL
|-
|WinSCP
|https://winscp.net/eng/index.php
|-
|FileZilla
|https://filezilla-project.org/
|}
==FAQ==

===Linux commands===
====Update from command line====
rm -rf /mnt/Update/update
<nowiki>wget https://downloads.inlogic.dk/inlogicgatewaymodem/Update.zip -O /mnt/Update/Update.zip</nowiki>
unzip /mnt/Update/Update.zip -d /mnt/Update/update
chmod 777 /mnt/Update/update/mnt/flash/root/updateservice/update.sh
/mnt/Update/update/mnt/flash/root/updateservice/update.sh

'''Commands'''

*Commands shows Status of Apache (systemctl status apache2.service)
*update system ( apt-get udate apt-get update)

===='''Update ubuntu from 18 to 20'''====
Use default answers when running these commands.
sudo sed -i 's/bionic/focal/g' /etc/apt/sources.list
sudo sed -i 's/bionic/focal/g' /etc/apt/sources.list.d/odroid.list
sudo apt-get update -y
sudo apt-get upgrade -y
sudo apt-get dist-upgrade -y

====How to change IP settings====

*nano /etc/network/interfaces.d/eth0
*nano /etc/resolv.conf
*reboot

====Logs====

=====Log viewers=====

*tail
*tail -f (this is similar to using cmtrace in windows)
*nano
*vim

=====Log files=====

*/var/log/smstools/smsd.log
*/var/log/syslog
*/var/log/mysql/error.log
*/var/log/apache2/error.log

=====See USB devices=====

*lsusb

==Rest API==
Theres a REST API to use, to send messages from the inLogic SMS Gateway.

===Send SMS===
{| class="wikitable"
!Title
!
|-
|URL
|source/send_sms.php
|-
|Method
|POST
|-
|URL Parameters
|Username

Password

To

Message
|-
|Success Response
|200 - Success
Returns ID of send SMS
|-
|Error Response
|401 - Unauthorized
|-
|Error Resposne
|403 - Forbidden
|-
|Error Response
|500 - Internal server error
|-
|Sample Request
|source/send_sms.php?username=smsuser&pwd=testpassword123&from=ums&to=22446688&message=Dette er en test besked
|-
|Notes
|
|}

Example
curl -X POST <nowiki>https://modem.ums.dk/source/send_sms.php?username=</nowiki><USERNAME>&pwd=<PASSWORD>&from=ums&to=<RECIEPIENT>&message=<MESSAGE>

===Check SMS Status===
{| class="wikitable"
!Title
!
|-
|URL
|webservice/getstatus.php
|-
|Method
|POST
|-
|URL Parameters
|Username

Password

ID
|-
|Success Response
|200 - Success
Returns status of send SMS

ScheduledToSend = -1

OK = 0

OK_WithError = 1

InUMSQueue = 2

InModemQueue = 3

Failed = 4

IDNotFound = 5

SentViaMail = 100

FailedSendingViaMail = 101
|-
|Error Response
|401 - Unauthorized
|-
|Error Resposne
|403 - Forbidden
|-
|Error Response
|500 - Internal server error
|-
|Sample Request
|webservice/getstatus.php?=smsuser&pwd=testpassword123&id=1
|-
|Notes
|
|}

Example
curl -X POST https://modem.ums.dk/webservice/getstatus.php?username=<USERNAME>&pwd=<PASSWORD>&id=<ID>

InLogic SMS Gateway

2022-05-20T18:58:15Z

Tod: /* Root Settings */

==Important==
To be able to send SMS, the inLogic SMS Gateway requires GSM modems with USB interface. We recommend "HUAWEI LTE USB Stick Model: E3372".

===Hardware Compatibility List===
[http://consumer.huawei.com/en/mobile-broadband/e3531/specs/ Huawei E3531]

[http://consumer.huawei.com/en/mobile-broadband/e3372/ Huawei E3372] (inLogic's choice)

[http://consumer.huawei.com/lk/mobile-broadband/dongles/features/e3131-lk.htm Huawei E3131i]

[http://www.tp-link.com/la/products/details/cat-5090_MA260.html TP-Link MA260]

==Network Port Openings==

====TCP port openings from server to gateway. TCP port opening where UMS sms sever service run.====
{| class="wikitable"
!Port
!Usage
|-
|22
|SSH access
|-
|443
|HTTPS access
|}

====TCP port openings from gateway to server.====
{| class="wikitable"
!Port
!Usage
|-
|80
|HTTP access
|-
|443
|HTTPS access
|}

==Prepare Modem==
{|
![[File:20180516 104258-50%.jpg|none|thumb|800x800px]]
!Plug-in Modems

!
!
|-
|[[File:20180516 104358-50%.jpg|none|thumb|800x800px]]
|'''Plug-in Ethernet cable'''

'''Plug-in power cable'''
|
|
|-
|
|
|
|
|-
|
|
|
|
|}

==System Login==
Once the gateway is [[#Prepare Modem|prepared]] and booted, open a browser and go to http://192.168.1.2. Login through the 'Login' button in the top right corner.
[[File:Main Login button.png|none|thumb|1240x1240px]]
You will now see a login box where you can log in with with USERNAME: admin and PASSWORD: admin.
[[File:Login.png|none|thumb|1240x1240px]]

==Main Page==
After logging in, the system info page appears. This page shows the gateway's status.[[File:Main.png|none|thumb|1240x1240px]]
To open the menu, click on this icon: [[File:Foxbox menu button.png|frameless|23x23px]]
[[File:Main with menu.png|none|thumb|1240x1240px]]

==Network Configuration==
Click on menu tab 'Network config'.

Change the IP settings and press 'Save Configuration'. When you have saved your settings, [[InLogic SMS Gateway#Reboot|Reboot]] the gateway as instructed below in 'Modem Settings'.
[[File:Network Config.png|none|thumb|1240x1240px]]

==Modem Settings==

===Hostname and Frontend Settings===

====Hostname====
Open the menu and go to 'Modem Settings'.

Set 'Modem Hostname' as FQDN and save your changes. Your modem will now restart.[[File:Modem Settings Hostname.png|none|thumb|1240x1240px]]

====Frontend====
Open the menu and go to 'Modem Settings'.

If redirect is enable on iis set (HTTPS)

Change 'FrontEnd Address' to fit your configuration and save your settings.[[File:Modem Settings Frontend.png|none|thumb|1240x1240px]]

===Certificate Settings (https)===
Open the menu and go to 'Modem Settings'.

Click 'Choose File' and choose a .pfx certificate from your computer.

Entera a .pfx certificate password in the 'Certificate Password' field and click 'Save'.
[[File:Modem Settings Certificate.png|none|thumb|1240x1240px]]

===User Settings===
Open the menu and go to 'Modem Settings'.

The default admin user password is 'admin'. To change the default admin user password, write the new password in the 'Password' field just below the 'Username' field admin.

The default sendsms user password is 'sendsms'. To change the default sendsms user password, write the new password in the 'Password' field just below the 'Username' field sendsms.

Click 'Save' to confirm the password change.
[[File:Modem Settings User.png|none|thumb|1240x1240px]]

==Control Panel==
Open the menu and go to 'Control Panel'.

Here, you can see staus, as well as turn on and off, the SMS Engine.[[File:Control Panel.png|none|thumb|1240x1240px]]

==SMS==

===Inbox===
To see a log for incoming messages, open the menu and go to 'Inbox'.
[[File:Inbox.png|none|thumb|1240x1240px]]

===Outbox===
To see a log for outgoing messages, open the menu and go to 'Outbox'.
[[File:Outbox.png|none|thumb|1240x1240px]]

===Failed===
To see a log for failed messages, open the menu and go to 'Failed'.
[[File:Failed.png|none|thumb|1240x1240px]]
===Write New===
To write a new SMS, open the menu and go to 'Write New'.

Choose the modem you wish to send your message from in the drop down menu 'Outgoing channel'. If left blank, the system will choose the first available modem.

Enter the phone number you wish to send your SMS to in the 'To' field. Pleas note that international prefix is mandatory.

Write your message in the 'Message' field.

When you have finished, click 'Send'.[[File:Write New guide.png|none|thumb|1240x1240px]]

==Time Zone Settings==
Open the menu and go to 'Time Zone Settings'.

The NTP & Time Zone Settings is by default set to enable external NTP.

For internal NTP, uncheck the 'Enable External NTP' box and write a list of NTP servers separated by comma, in the 'Internal NTP' field.

To change your time zone, choose a time zone from the 'Time Zone' drop down menu.

Click 'Save' to change your settings.
[[File:Time Zone Settings.png|none|thumb|1240x1240px]]

==Tools==
Open the menu and go to 'Modem Settings'.

===Shell===
Use 'in browser' shell to change advanced settings.

Use with caution! Please note that if you make any changes without consulting us first, support will be charged accordingly with our hourly rate.
[[File:Modem Settings Shell.png|none|thumb|1240x1240px]]
===Root Settings===
Change of root password requires login to shell. Default root password can be requested from inlogic.

Login to shell, run password command and follow the instructions on screen.
[[File:Modem Settings Root.png|none|thumb|1240x1240px]]

==Additional information==
Additional information about the product, users, and programs used in the tutorial.
====Usernames and passwords====
====SSH Clients====
{| class="wikitable"
|+A list of SSH Clients
!Program name
!URL
|-
|PuTTy
|https://www.putty.org/
|}

====Open source FTP Client====
{| class="wikitable"
|+A list of FTP clients
!Program name
!URL
|-
|WinSCP
|https://winscp.net/eng/index.php
|-
|FileZilla
|https://filezilla-project.org/
|}
==FAQ==

===Linux commands===
====Update from command line====
rm -rf /mnt/Update/update
<nowiki>wget https://downloads.inlogic.dk/inlogicgatewaymodem/Update.zip -O /mnt/Update/Update.zip</nowiki>
unzip /mnt/Update/Update.zip -d /mnt/Update/update
chmod 777 /mnt/Update/update/mnt/flash/root/updateservice/update.sh
/mnt/Update/update/mnt/flash/root/updateservice/update.sh

'''Commands'''

*Commands shows Status of Apache (systemctl status apache2.service)
*update system ( apt-get udate apt-get update)

===='''Update ubuntu from 18 to 20'''====
Use default answers when running these commands.
sudo sed -i 's/bionic/focal/g' /etc/apt/sources.list
sudo sed -i 's/bionic/focal/g' /etc/apt/sources.list.d/odroid.list
sudo apt-get update -y
sudo apt-get upgrade -y
sudo apt-get dist-upgrade -y

====How to change IP settings====

*nano /etc/network/interfaces.d/eth0
*nano /etc/resolv.conf
*reboot

====Logs====

=====Log viewers=====

*tail
*tail -f (this is similar to using cmtrace in windows)
*nano
*vim

=====Log files=====

*/var/log/smstools/smsd.log
*/var/log/syslog
*/var/log/mysql/error.log
*/var/log/apache2/error.log

=====See USB devices=====

*lsusb

==Rest API==
Theres a REST API to use, to send messages from the inLogic SMS Gateway.

===Send SMS===
{| class="wikitable"
!Title
!
|-
|URL
|source/send_sms.php
|-
|Method
|POST
|-
|URL Parameters
|Username

Password

To

Message
|-
|Success Response
|200 - Success
Returns ID of send SMS
|-
|Error Response
|401 - Unauthorized
|-
|Error Resposne
|403 - Forbidden
|-
|Error Response
|500 - Internal server error
|-
|Sample Request
|source/send_sms.php?username=smsuser&pwd=testpassword123&from=ums&to=22446688&message=Dette er en test besked
|-
|Notes
|
|}

Example
curl -X POST <nowiki>https://modem.ums.dk/source/send_sms.php?username=</nowiki><USERNAME>&pwd=<PASSWORD>&from=ums&to=<RECIEPIENT>&message=<MESSAGE>

===Check SMS Status===
{| class="wikitable"
!Title
!
|-
|URL
|webservice/getstatus.php
|-
|Method
|POST
|-
|URL Parameters
|Username

Password

ID
|-
|Success Response
|200 - Success
Returns status of send SMS

ScheduledToSend = -1

OK = 0

OK_WithError = 1

InUMSQueue = 2

InModemQueue = 3

Failed = 4

IDNotFound = 5

SentViaMail = 100

FailedSendingViaMail = 101
|-
|Error Response
|401 - Unauthorized
|-
|Error Resposne
|403 - Forbidden
|-
|Error Response
|500 - Internal server error
|-
|Sample Request
|webservice/getstatus.php?=smsuser&pwd=testpassword123&id=1
|-
|Notes
|
|}

Example
curl -X POST https://modem.ums.dk/webservice/getstatus.php?username=<USERNAME>&pwd=<PASSWORD>&id=<ID>

Office 365

2022-05-19T07:04:14Z

Tod: /* Testing after setup */

Our Office 365 SharePoint Portal is a dedicated solution for school, which want an easy-to-use learning portal. Students and teachers are often presented with advanced and complex solutions that does everything they need and then some and as a result, they are difficult to use. We have decided to do things differently and therefore the Office 365 SharePoint Portal gives you the features you need to get the most out of SharePoint. Nothing more, nothing less. The portal is simple and easy to use. This way you avoid confusion and having to navigate yet another complex system. In terms of design, you have two options: the portal can use our standard skin, as pictured above, or our second skin, which we made for primary schools.

==Prerequisites==

===Module requirements===
[[UMS]]

===Testing after setup===
Users get created in Office 365

'''Then run these powershell commands'''

Install Powershell 7

*Run in Powershell : iex "& { $(irm <nowiki>https://aka.ms/install-powershell.ps1</nowiki>) } -UseMSI"
*https://docs.microsoft.com/en-us/powershell/scripting/install/installing-powershell-on-windows

Run these commands in Powershell 7 administrator mode:

#'''Enable TLS 1.2 for Powershell commands'''
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

$NugetPackageProvider = Get-PackageProvider -ListAvailable -Name NuGet -ErrorAction SilentlyContinue
if (!$NugetPackageProvider) {Install-PackageProvider -Name NuGet -RequiredVersion 2.8.5.201 -Scope AllUsers -Force}

$ExchangeOnlineManagement = Get-Module -ListAvailable -Name ExchangeOnlineManagement -ErrorAction SilentlyContinue
if (!$ExchangeOnlineManagement) {Install-Module -Name ExchangeOnlineManagement -Scope AllUsers -Force}

'''Use this command only if no repository is available'''

Register-PSRepository -Default -Verbose

===[[MSGraphPermissions|Graph permissions]]===

==Installation==

===Office 365===
Enter Admin credentials for a service account with administrator privileges to access Office 365.
[[File:Office365 Setting.jpg|none|thumb|838x838px]]

===Credentials===

=====Tenant setting=====
Choose a tenant setting used for connection to Office 365-

=====Domain=====
Enter the domain that you want the users and groups to have when they are created. E.g. <Username>@<Domain>

===Users===

=====Login=====
Choose what the users shall use to log in to Office365.

======Mail Address======
Choose what to use as the users mail address.

=====Enable password never expires=====
When marked the password will never expire for the users.

=====Disable strong password=====
Use this to bypass the default password complexity.

=====Users are created through third party program=====
This normally means ADFS is used to synchronize users

=====Forward mail to on premise mail server=====
This will forward the users Office 365 mail to the primary mail address from AD (If user does not have a proxy address it will read it from the mail attribute)

=====Use Active Directory for info=====
This tells UMS to take Department, Title and Organization from AD instead of AD Attributes in UMS.

=====Usage location=====
This will tell UMS to set usage location when creating a user

=====Disable users=====
When marked the users will be disabled when they are no longer attending classes.

=====Keep active before disabling x days=====
Specify a grace period where users are active before disabling.

=====Delete users=====
Choose if users are to be deleted after grace period has ended.

=====Keep disabled before deleting x days=====
Specify a grace period where users are disabled.

=====Hide from address list=====
Hide the newly created item from address list.

=====Mailbox language=====
Specify which language is to be default for the users.

=====Mailbox time zone=====
Specify which time zone is to be default for the users.

=====Calendar Rights=====
Set the calendar rights on a user when he is created

=====Calendar object UPN=====
Specify the UPN to put on the users calendar with the rights specified below

If using a group then it must be of type "'''Mail enabled security'''".

====Group UPN for keep alive users====
Specify a group where users that is kept alive is a member of.

This must be a Microsoft 365 group.

UMS will create the group if it doesn't exist.

====Group UPN for disabled users====
Specify a group where users that is disabled is a member of.

This must be a Microsoft 365 group.

UMS will create the group if it doesn't exist.

===Template groups===

====Maintain security group====
This will create the security group entered in the field template security group in the destination node in the template settings.

====Maintain extra groups====
This will create all the groups from the [[Configurator/Extra groups|extra groups]] template tab. All users will have direct group member ship.

===Distribution lists===

====Maintain lists====
Mark this to create distribution groups in Office 365. The groups will be created, updated and deleted if this is specified.

====Delete lists====
Mark this to delete distributions groups when they are no longer active in the administrative system. Check the data export manuals too when this happens

====Delete unused lists after x days====
Specify in days how long the distribution groups are to be kept alive in Office 365 before deletion.

====Only senders inside my organization====
With this marked only users in the domain will be able to send to distribution groups created by UMS.

Disabling this will allow the groups to be visible in OneDrive and Classroom

===Picture settings===
This takes the picture privacy setting that the user has set into consideration. The picture will not be uploaded if the user has chosen not to allow his picture to be shared. The picture will not be removed again if it has been uploaded.

====Student picture library====
Define where the pictures are for the students that uses this template. If this is not set, no pictures will be uploaded to Office 365.

====Employee picture library====
Define where the pictures are for the employees that uses this template. If this is not set, no pictures will be uploaded to Office 365.

===Timetable===

====Maintain====
Mark this to create timetable blocks in Office 365. They will be created, updated and deleted.

====Delete old====
Mark this to delete old timetable blocks from calendars.

====Room setting====
Create rooms with timetable blocks.

=====Manage=====
[[File:Office365roomsettings.png|none|thumb|378x378px]]

=====Room displayname=====

=====Prefix=====
Text that can be added to the start of what is chosen in Generator.

=====Generator=====
Choose what is to define the room.

=====Suffix=====
Text that can be added to the end of what is chosen in Generator.

=====Resulting displayname=====
Summary of the chosen display name as it will be shown in Office 365.

=====Set rights to rooms=====
Sets the rights on rooms when created

This has to be a '''Distribution Group''' Otherwise it won't work
[[File:Office365roomsettings2.png|none|thumb|274x274px]]

======Owner======
Users will be able to create, read, modify and delete all items and files, and create sub-folders. As the folder owner, they can change the permission levels others have for the folder. (Does not apply to delegates.).

======Publishing Editor======
Users can create, read, modify and delete all items and files, and create sub-folders. (Does not apply to delegates.).

======Editor======
Users can create, read, modify and delete all items and files..

======Publishing Author======
Users can create and read items and files, create sub-folders, and modify and delete items and files they create. (Does not apply to delegates.).

======Author======
Users can create and read items and files and modify and delete items and files you create.

======Nonediting Author======
Users have full read details. Can create items and delete own items. Folder visible.

======Reviewer======
Users can read items and files only.

======Contributor======
Users can create items and files only. The contents of the folder does not appear. (Does not apply to delegates.).

'''''Note''''' ''With author or editor permissions, a delegate has send-on-behalf-of permission. Sent messages contain both the managers and delegates names. Message recipients see the managers name in the Sent On Behalf Of box and the delegates name in the From box.''

=====Define rooms to be created=====
Specify the rooms to be created based on a filter. If nothing is entered, every room will be created.
[[File:Office365criteria.png|none|thumb|202x202px]]

======Room number and Room name======
Can be found in the skemabrikker_rooms table in SQL.

===Office 365 SharePoint site setting===
This will create SharePoint sites
[[File:Office365sharepointsitesettings.png|none|thumb|720x720px]]
[[File:Office365sharepointsitesettings2.png|none|thumb|567x567px]]

====''Site settings''====

=====Automation type=====
Full: Means that site maintenance will be fully automated.

=====Remove learner method=====
Deleted in AD

Users will be removed from site when they are not active in UMS anymore

Finished on activity/course

Users will be removed when they have finished with the course.

=====Delete sites=====
Auto delete

Sites will be delete when the last student has left the site

=====Manual Delete=====
Sites will not be deleted by UMS. This has to be done by an administrator

=====Send mail to teacher(s)=====
Send mail notification to teachers when they are attached to a site.

=====Create x days before=====
Choose how many days before start that the sites are to be created.

=====Delete x days after end=====
Choose how many days after end that the sites are to be deleted.

=====Teacher rights on sites=====
Rights the teacher will have on the site when attached.

=====Learner rights on sites=====
Rights the student/learner will have on the site when attached.

=====Check if group rights match=====
When UMS looks for UMS-groups on the site, it will do so based on two criteria’s.

The correct rights and the correct name. Unchecking this will disable the first criteria and only look for a group with the right name. (This is when users change the UMS-group rights on a site manually)

=====SQL Groups=====
Members of these groups will be attached to all sites created with this setting as teachers
[[File:Office365sqlgroups.png|none|thumb|447x447px]]

=====Group name=====
This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

====Activity Sites====
Do not create

It will not create any sites based on activities.

LMS has to be checked

The field Aktivitet_LMS in the students table has to be True. (Look in the documentation for the specific administrative system to see how this is set)

Based on template filter

Create sites based on a filter that is specified per template.
[[File:Office365filters.png|none|thumb|507x507px]]

All

Create all sites.

Title

Title of the site. Changing this after a site has been created will cause it to be updated.

Description

Description of the site. Changing this after a site has been created will cause it to be updated.

===Search filter and criteria===
This will enable you to concatenate sites that would have been created as to or more sites to be created as one site.

=====Remarks=====
This is just for description purposes.

=====Filter=====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

=====Semester roll=====
Use replace string with empty

This will replace a section of the site with an empty string.

=====Start index=====
Determine where to start in string to remove.

=====Length=====
How many characters will be removed from the string.

=====Add activity short description to node ID=====
This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

====Examples====
If you have three activities named English1, English2, English3 and you only want one SharePoint site.

Set the settings as shown below
[[File:Office365filterexample.png|none|thumb|401x401px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

=====Course Sites=====
Course URL’s will always be created as activity_course.

=====Do not create=====
It will not create any sites based on courses.

=====LMS has to be checked=====
The field Skolefag_LMS in the students table has to be True. (Look in the documentation for the specific administrative system to see how this is set)

=====Based on template filter=====
Create sites based on a filter that is specified per template.
[[File:Office365filters.png|none|thumb|507x507px]]

=====All=====
Create all sites.

=====Title=====
Title of the site. Changing this after a site has been created will cause it to be updated.

=====Description=====
Description of the site. Changing this after a site has been created will cause it to be updated.

=====Search filter and criteria=====
This will enable you to concatenate sites that would have been created as two or more sites to be created as one site.
[[File:Office365filter.png|none|thumb|416x416px]]

=====Remarks=====
This is just for description purposes.

=====Course Filter=====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

=====Semester roll=====
Use replace string with empty

This will replace a section of the site with an empty string.

=====Start index=====
Determine where to start in string to remove.

=====Length=====
How many characters will be removed from the string.

=====Activity Filter=====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

=====Semester roll=====
Use replace string with empty

This will replace a section of the site with an empty string.

=====Start index=====
Determine where to start in string to remove.

=====Length=====
How many characters will be removed from the string.

After you have created the Office 365 setting you put in on a template.
[[File:Office365templateeditor.png|none|thumb|720x720px]]

Setting: This will created the users with on this template in Office 365 with these settings

===SharePoint settings===
Sites created with setting. If this is not specified no activities/courses on this template will be created.
[[File:Office365template.png|none|thumb|422x422px]]

====Site URL====
Which site collection is used when creating sites

Language: The default language of the created site

Course Template

Standard SharePoint: Use a standard template from SharePoint

Course template: Enter a name of a template that resides in the site collection. If nothing is entered it will default to the Team site template

UMS SharePoint Portal: Create sites based on the UMS SharePoint Portal product

====OneNote Class Notebook setting====
Choose a Class Notebook setting. This will create a Class Notebook created in the SharePoint site.

====SQL Groups====

Members of these groups will be attached to all sites created with this setting as teachers[[File:Office365sqlgroups.png|none|thumb|447x447px]]

====Group name====
This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

OneNote Class Notebook setting

Define settings for OneNote Class Notebooks.
[[File:OneNotesections SharePoint.png|none|thumb|476x476px]]

====Sections====
Define the section the Class Notebook will be created with. Students that are attached to this Class Notebook will have these sections.
[[File:Office365onenoteclassnotebooksettingedit.png|none|thumb|447x447px]]Use Name instead of title for Notebooks (Last part of URL)

This will make the title of the NoteBook be the same as the last part of the URL of the SharePoint site that the NoteBook is created in. It never changes unless this is unchecked.

Never update Notebook title after creation

The NoteBook will never update the title after it has been created, even though the SharePoint site changes title. it will be created with the title that SharePoint site has at createin time.

===OneNote Class Notebook setting===
[[File:Office365onenoteclassnotebooksettings.png|none|thumb|720x720px]]
[[File:Office365onenoteclassnotebooksettings2.png|none|thumb|720x720px]]

====''Notebook settings''====

====Automation type====
Full: Means that Notebooks maintenance will be fully automated.

====Remove learner method====
Deleted in AD

Users will be removed from Notebooks when they are not active in UMS anymore

Finished on activity/course

Users will be removed when they have finished with the course.

====Delete Notebooks====
Auto delete

Notebooks will be delete when the last student has left the Notebook

Manual Delete

Notebooks will not be deleted by UMS. This has to be done by an administrator

====Send mail to teacher(s)====
Send mail notification to teachers when they are attached to a Notebook.

====Create x days before====
Choose how many days before start that the Notebooks are to be created.

====Delete x days after end====
Choose how many days after end that the Notebooks are to be deleted.

====SQL Groups====

Members of these groups will be attached to all Notebooks created with this setting as teachers[[File:Office365sqlgroups.png|none|thumb|447x447px]]

====Group name====
This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

====Activity Notebooks====

====Do not create====
It will not create any Notebooks based on activities.

====LMS has to be checked====
The field Aktivitet_LMS in the students table has to be True. (Look in the documentation for the specific administrative system to see how this is set)

====Based on template filter====
Create Notebooks based on a filter that is specified per template.
[[File:Office365filters.png|none|thumb|507x507px]]

====All====
Create all Notebooks.

====Title====
Title of the Notebook. Changing this after a Notebook has been created will cause it to be updated.

====Search filter and criteria====
This will enable you to concatenate Notebooks that would have been created as to or more Notebooks to be created as one Notebook.
[[File:Office365filterexample.png|none|thumb|401x401px]]

====Remarks====
This is just for description purposes.

====Filter====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

====Semester roll====
Use replace string with empty

This will replace a section of the Notebook with an empty string.

====Start index====
Determine where to start in string to remove.

====Length====
How many characters will be removed from the string.

====Add activity short description to node ID====
This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

===Examples===
If you have three activities named English1, English2, English3 and you only want one Notebook.

Set the settings as shown below
[[File:Office365filterexample.png|none|thumb|401x401px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

====Course Notebooks====
Course URL’s will always be created as activity course.

====Do not create====
It will not create any Notebooks based on courses.

====LMS has to be checked====
The field Skolefag_LMS in the students table has to be True. (Look in the documentation for the specific administrative system to see how this is set)

====Based on template filter====
Create Notebook based on a filter that is specified per template.
[[File:Office365filters.png|none|thumb|507x507px]]

====All====
Create all Notebooks.

====Title====
Title of the Notebook. Changing this after a Notebook has been created will cause it to be updated.

====Search filter and criteria====
This will enable you to concatenate Notebooks that would have been created as two or more Notebooks to be created as one Notebook.
[[File:Office365filter.png|none|thumb|416x416px]]

====Remarks====
This is just for description purposes.

====Course Filter====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

====Semester roll====
Use replace string with empty

This will replace a section of the Notebook with an empty string.

====Start index====
Determine where to start in string to remove.

====Length====
How many characters will be removed from the string.

====Activity Filter====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

====Semester roll====
Use replace string with empty

This will replace a section of the Notebook with an empty string.

====Start index====
Determine where to start in string to remove.

====Length====
How many characters will be removed from the string.

After you have created the Office 365 setting you put in on a template.
[[File:Office365template2.png|none|thumb|720x720px]]

Setting: This will created the users with on this template in Office 365 with these settings

===OneNote Class Notebook settings===
Notebooks created with setting. If this is not specified no activities/courses on this template will be created.
[[File:Office365settings.png|none|thumb|422x422px]]

====Site collection URL====
Which Notebook collection is used when creating Notebooks

====Language====
The default language of the created Notebook

====Sections====
Define the section the Class Notebook will be created with. Students that are attached to this Class Notebook will have these sections.
[[File:Office365onenoteclassnotebooksettingedit.png|none|thumb|447x447px]]

====SQL Groups====

Members of these groups will be attached to all Notebooks created with this setting as teachers[[File:Office365sqlgroups.png|none|thumb|447x447px]]

====Group name====
This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

===Organization Settings===
[[File:Office365organization.png|none|thumb|656x656px]]

====''Site settings''====

====Description====
Add a description to be able to identify the account.

====SharePoint administration URL====
URL of the SharePoint administration site for the tenant.

====''Credentials settings''====

====Username====
Username used to connect to SharePoint.

====Password====
Password used to connect to SharePoint.

==Parameters==
> LiveAtEdu.exe [<optional> Action]
Eg.
> LiveAtEdu.exe

> LiveAtEdu.exe UsersOnly
{| class="wikitable"
|+Users
!Parameter
!Description
|-
|UsersOnly
|Runs all the parameters in this table
|-
|UpdateUsers
|Update users
|-
|DisableUsers
|Disable users
|-
|EnableUsers
|Enable users
|-
|DeleteUsers
|Delete users
|-
|CreateUsers
|Create users
|-
|UpdateImmutableID
|Update Immutable ID on users
|-
|UpdateOffice365SettingsIDForUsers
|Update Office 365 settings for users if they have changed template
|-
|UpdateUsersObjectID
|Get the object ID from office 365 and save it in UMS DB
|}
{| class="wikitable"
|+User settings
!Parameter
!Description
|-
|RunUserSettings
|Runs all the parameters in this table
|-
|DisableStrongPassword
|Disable strong password for users
|-
|SetMailAddress
|Set mail address on users
|-
|Forward2OnPremiseMail
|Set forward to OnPremise mail on users
|-
|SetCalendarRights
|Set calendar rights on users
|-
|UpdateMailboxTimeZone
|Update timezone for mailbox users
|-
|UpdateMailboxLanguage
|Update language for mailbox users
|-
|EnablePasswordNeverExpires
|Enable password never expires for users
|-
|UpdatePictures
|Update pictures
|-
|Forward2PrivateMail
|Set forward to privatemail on users
|-
|UpdateReplyToAll
|Set Reply to all on users
|-
|ProvisionOneDrive
|Provision OneDrive to users
|-
|UpdateAddressBookPolicy
|Set address book policy on users
|}
{| class="wikitable"
|+Groups
!Parameter
!Description
|-
|GroupsOnly
|Runs all the parameters in this table
|-
|RemoveGroupMembers
|Remove group members from groups
|-
|AddGroupMembers
|Add members to groups
|-
|DeleteGroups
|Delete groups
|-
|CreateGroups
|Create groups
|-
|UpdateGroupsObjectID
|Get the object ID from office 365 and save it in UMS DB
|-
|GetUPNsForGroups
|Get the UPN of template groups from Office 365
|}
{| class="wikitable"
|+Template groups
!Parameter
!Description
|-
|TemplateGroupsOnly
|Runs all the parameters in this table
|-
|RemoveUsersFromTemplateGroups
|Remove users from template security groups
|-
|AddUsers2TemplateGroups
|Add users to template security groups
|-
|DeleteTemplateGroups
|Delete groups that are no longer template security groups
|-
|UpdateTemplateGroupsObjectID
|Get the object ID from office 365 and save it in UMS DB
|-
|GetUPNsForTemplateGroups
|Get the UPN of template security groups from Office 365
|}
{| class="wikitable"
|+Template extra groups
!Parameter
!Description
|-
|TemplateExtraGroupsOnly
|Runs all the parameters in this table
|-
|CreateTemplateExtraGroups
|Create groups from template extra group
|-
|DeleteTemplateExtraGroups
|Delete groups that are no longer in extra groups
|-
|AddTemplateExtraGroupMembers
|Add users to template extra groups
|-
|UpdateTemplateExtraGroupsObjectID
|Get the object ID from office 365 and save it in UMS DB
|}
{| class="wikitable"
|+Keep alive groups
!Parameter
!Description
|-
|KeepAliveGroupsOnly
|Runs all the parameters in this table
|-
|CreateKeepAliveGroups
|Create keep alive groups
|-
|DeleteKeepAliveGroups
|Delete keep alive groups if they are no longer in UMS
|-
|UpdateSetMailAddressOnKeepAliveGroups
|Update the mail address on keep alive groups
|-
|AddKeepAliveGroupMembers
|Add users to keep alive groups
|-
|RemoveKeepAliveGroupMembers
|Remove users from keep alive groups
|}
{| class="wikitable"
|+Disabled groups
!Parameter
!Description
|-
|DisabledGroupsOnly
|Runs all the parameters in this table
|-
|CreateDisabledGroups
|Create disabled groups
|-
|DeleteDisabledGroups
|Delete disabled groups if they are no longer in UMS
|-
|UpdateSetMailAddressOnDisabledGroups
|Update the mail address on disabled groups
|-
|AddDisabledGroupMembers
|Add users to disabled groups
|-
|RemoveDisabledGroupMembers
|Remove users from disabled groups
|}
{| class="wikitable"
|+Teams
!Parameter
!Description
|-
|TeamsOnly
|Runs all the parameters in this table
|-
|AddTeams2DB
|Add Teams to UMS DB
|-
|CreateTeams
|Create Teams
|-
|AddTeamToGroup
|Add teams to groups
|-
|ActivateTeams
|Activate teams
|-
|UpdateTeams
|Update Teams
|-
|DeleteTeams
|Delete Teams
|-
|AddTeachers2TeamsDBTable
|Add teachers to Office365Teams_Teachers table in UMS DB
|-
|AddTeachers2Teams
|Add teachers to Teams
|-
|AddLearners2TeamsDBTable
|Add learners to Office365Teams_Learners table in UMS DB
|-
|AddLearners2Teams
|Add learners to Teams
|-
|TeamsDeleteTeachers
|Delete teachers in Teams
|-
|TeamsDeleteLearners
|Delete learners in Teams
|-
|TeamsUpdateNeedToBeUpdated
|Set update on next run flag
|-
|UpdateLearnersExternalID
|Retrieve the learners object id from Office 365 and save it in UMS DB
|-
|UpdateTeachersExternalID
|Retrieve the teachers object id from Office 365 and save it in UMS DB
|-
|UpdateSchoolsExternalID
|Retrieve the schools object id from Office 365 and save it in UMS DB
|-
|UpdateTeamsExternalID
|Retrieve the teams object id from Office 365 and save it in UMS DB
|}
{| class="wikitable"
|+SharePoint
!Parameter
!Description
|-
|SharepointOnly
|Runs all the parameters in this table
|-
|CreateSites
|Create sites
|-
|AddSites2DB
|Add sites in UMS DB
|-
|DeleteSites
|Delete sites
|-
|UpdateSites
|Update sites
|-
|AddLearners2SitesInDB
|Add learners to UMS DB
|-
|DeleteTeachers
|Delete teachers
|-
|AddTeachers2Sites
|Add teachers to sites
|-
|DeleteSiteGroups
|Delete site groups
|-
|AddTeachers2SitesInDB
|Add teachers to UMS DB
|-
|DeleteLearners
|Delete learners
|-
|AddLearners2Sites
|Add learners to sites
|-
|UpdateSiteURL
|Update sites with new URL
|-
|AddNoteBooks2Sites
|Add OneNote Class NoteBooks to sites
|-
|SharePointDeleteNoteBooks
|Delete OneNote Class NoteBooks from sites
|-
|UpdateNeedToBeUpdated
|Set the update on next run flag
|-
|UpdateSitesIsActive
|Update site active/inactive status
|-
|SharePoint_OneNoteClassNotebook_AddMissingTeachers
|Add missing Teachers to OneNote Class NoteBooks
|-
|SharePoint_OneNoteClassNotebook_AddMissingLearners
|Add missing Learners to OneNote Class NoteBooks
|-
|ReAddLearners2Sites
|Re-add learners to sites if ReAdd is true in DB
|-
|ReAddTeachers2Sites
|Re-add teachers to sites if ReAdd is true in DB
|}
{| class="wikitable"
|+OneNoteClassNoteBook
!Parameter
!Description
|-
|OneNoteClassNotebookOnly
|Runs all the parameters in this table
|-
|AddNotebooks2DB
|Add OneNote Class NoteBooks to UMS DB
|-
|CreateNotebooks
|Create OneNote Class NoteBooks
|-
|UpdateOneNotes
|Update OneNote Class NoteBooks
|-
|DeleteOneNotes
|Delete OneNote Class NoteBooks
|-
|AddTeachers2OneNotesInDB
|Add teachers to OneNote Class NoteBooks in UMS DB
|-
|AddTeachers2OneNotes
|Add teachers to OneNote Class NoteBooks
|-
|AddLearners2OneNotesInDB
|Add learners to OneNote Class NoteBooks in UMS DB
|-
|AddLearners2OneNotes
|Add learners to OneNote Class NoteBooks
|-
|OneNoteDeleteTeachers
|Delete teachers in OneNote Class NoteBooks
|-
|OneNoteDeleteLearners
|Delete learners in OneNote Class NoteBooks
|-
|OneNoteUpdateNeedToBeUpdated
|Set update on next run flag
|}

==Technical settings==

==Maintenance==

===portal.office.com===

====''Teams''====

Go to [http://portal.office.com Office Portal] and login with your admin account( the same UMS uses).

Select settings Services and add-ins and click Teams.
[[File:Office_365_Teams_activation.PNG|1350x1350px|thumb|Activate Teams for a license type, ie. Guest or Education-Student|none]]

==FAQ==

===Office 365 Licens (Unable to assign this license) How to troubleshoot this error===

====Error message from UMS Job log (LiveAtEdu)====

=====''Error = Unable to assign this license''=====
''Set-MsolUserLicense -UserPrincipalName 'khhi3275@ums.dk' -AddLicenses "inLogic:STANDARDWOFFPACK_IW_STUDENT" -LicenseOptions $MyO365Sku''

''Error = Unable to assign this license.''

''29-01-2019 13:23:00 - at Utilities.Office365.SetLicenseForUser(String UPN, List`1 Licenses, SqlConnection& LocalSQLDBConnection)''

'' at LiveAtEdu_Sync.LiveAtEdu_Sync.PerformFunctionUserSettings(String SQLStr, UserFunctions Office365Function, MethodInfo StackFrame)''

''29-01-2019 13:23:00 - khhi3275- UPN = khhi3275@ums.dk''

''29-01-2019 13:23:01 - (UpdateLicenseInfoOnUsers) Error. Could not set license for user - khhi3275@ums.dk ''

*Try adding the same licenses manually to a single user in office365. You could see if that is possible[[File:Licens.jpg|none|thumb|814x814px]]

*The error shows that it is not possible to put the same licenses together[[File:Licens Error.png|none|thumb|812x812px]] 
*Change your licenses in UMS and run the LiveAtEdu job again

===Groups===
How to get groups visible in OneDrive and Classroom

Remove the checkbox from Only senders inside my organization

Why do I not get the site created?

#Activity
##Is there a user on the activity with a primary template that has an office 365 setting attached
##Is the flag Aktivitet_LMS = True
#Course
##Is there a user on the course with a primary template that has an office 365 setting attached
##Is the flag Skolefag_LMS = True

===Disable or enabling user===
Error = Message: Insufficient privileges to complete the operation.

This could be the result of the user trying to be disabled/enabled has roles that does not allow the action like Global Administrator.

===The term 'Set-UnifiedGroup' is not recognized as a name of a cmdlet, function, script file, or executable program.===
https://docs.microsoft.com/en-us/powershell/exchange/find-exchange-cmdlet-permissions?view=exchange-ps

Run this command to check which roletypes are needed
Get-ManagementRole -Cmdlet Set-UnifiedGroup

===A parameter cannot be found that matches parameter name 'type'.===
https://docs.microsoft.com/en-us/powershell/exchange/find-exchange-cmdlet-permissions?view=exchange-ps
[[File:Office365 ExchangeAdminRoleNeeded.jpg|none|thumb|1275x1275px]]

Run this command to check which roletypes are needed
Get-ManagementRole -Cmdlet Get-DistributionGroup

Office 365

2022-05-19T07:03:06Z

Tod: /* Testing after setup */

Our Office 365 SharePoint Portal is a dedicated solution for school, which want an easy-to-use learning portal. Students and teachers are often presented with advanced and complex solutions that does everything they need and then some and as a result, they are difficult to use. We have decided to do things differently and therefore the Office 365 SharePoint Portal gives you the features you need to get the most out of SharePoint. Nothing more, nothing less. The portal is simple and easy to use. This way you avoid confusion and having to navigate yet another complex system. In terms of design, you have two options: the portal can use our standard skin, as pictured above, or our second skin, which we made for primary schools.

==Prerequisites==

===Module requirements===
[[UMS]]

===Testing after setup===
Users get created in Office 365

'''Then run these powershell commands'''

Install Powershell 7

* Run in Powershell : iex "& { $(irm <nowiki>https://aka.ms/install-powershell.ps1</nowiki>) } -UseMSI"
* https://docs.microsoft.com/en-us/powershell/scripting/install/installing-powershell-on-windows

Run these commands in Powershell 7 administrator mode:

#'''Enable TLS 1.2 for Powershell commands'''
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

$NugetPackageProvider = Get-PackageProvider -ListAvailable -Name NuGet -ErrorAction SilentlyContinue
if (!$NugetPackageProvider) {Install-PackageProvider -Name NuGet -RequiredVersion 2.8.5.201 -Scope AllUsers -Force}

$ExchangeOnlineManagement = Get-Module -ListAvailable -Name ExchangeOnlineManagement -ErrorAction SilentlyContinue
if (!$ExchangeOnlineManagement) {Install-Module -Name ExchangeOnlineManagement -Scope AllUsers -Force}

'''Use this command only if no repository is available'''

Register-PSRepository -Default -Verbose

===[[MSGraphPermissions|Graph permissions]]===

==Installation==

===Office 365===
Enter Admin credentials for a service account with administrator privileges to access Office 365.
[[File:Office365 Setting.jpg|none|thumb|838x838px]]

===Credentials===

=====Tenant setting=====
Choose a tenant setting used for connection to Office 365-

=====Domain=====
Enter the domain that you want the users and groups to have when they are created. E.g. <Username>@<Domain>

===Users===

=====Login=====
Choose what the users shall use to log in to Office365.

======Mail Address======
Choose what to use as the users mail address.

=====Enable password never expires=====
When marked the password will never expire for the users.

=====Disable strong password=====
Use this to bypass the default password complexity.

=====Users are created through third party program=====
This normally means ADFS is used to synchronize users

=====Forward mail to on premise mail server=====
This will forward the users Office 365 mail to the primary mail address from AD (If user does not have a proxy address it will read it from the mail attribute)

=====Use Active Directory for info=====
This tells UMS to take Department, Title and Organization from AD instead of AD Attributes in UMS.

=====Usage location=====
This will tell UMS to set usage location when creating a user

=====Disable users=====
When marked the users will be disabled when they are no longer attending classes.

=====Keep active before disabling x days=====
Specify a grace period where users are active before disabling.

=====Delete users=====
Choose if users are to be deleted after grace period has ended.

=====Keep disabled before deleting x days=====
Specify a grace period where users are disabled.

=====Hide from address list=====
Hide the newly created item from address list.

=====Mailbox language=====
Specify which language is to be default for the users.

=====Mailbox time zone=====
Specify which time zone is to be default for the users.

=====Calendar Rights=====
Set the calendar rights on a user when he is created

=====Calendar object UPN=====
Specify the UPN to put on the users calendar with the rights specified below

If using a group then it must be of type "'''Mail enabled security'''".

====Group UPN for keep alive users====
Specify a group where users that is kept alive is a member of.

This must be a Microsoft 365 group.

UMS will create the group if it doesn't exist.

====Group UPN for disabled users====
Specify a group where users that is disabled is a member of.

This must be a Microsoft 365 group.

UMS will create the group if it doesn't exist.

===Template groups===

====Maintain security group====
This will create the security group entered in the field template security group in the destination node in the template settings.

====Maintain extra groups====
This will create all the groups from the [[Configurator/Extra groups|extra groups]] template tab. All users will have direct group member ship.

===Distribution lists===

====Maintain lists====
Mark this to create distribution groups in Office 365. The groups will be created, updated and deleted if this is specified.

====Delete lists====
Mark this to delete distributions groups when they are no longer active in the administrative system. Check the data export manuals too when this happens

====Delete unused lists after x days====
Specify in days how long the distribution groups are to be kept alive in Office 365 before deletion.

====Only senders inside my organization====
With this marked only users in the domain will be able to send to distribution groups created by UMS.

Disabling this will allow the groups to be visible in OneDrive and Classroom

===Picture settings===
This takes the picture privacy setting that the user has set into consideration. The picture will not be uploaded if the user has chosen not to allow his picture to be shared. The picture will not be removed again if it has been uploaded.

====Student picture library====
Define where the pictures are for the students that uses this template. If this is not set, no pictures will be uploaded to Office 365.

====Employee picture library====
Define where the pictures are for the employees that uses this template. If this is not set, no pictures will be uploaded to Office 365.

===Timetable===

====Maintain====
Mark this to create timetable blocks in Office 365. They will be created, updated and deleted.

====Delete old====
Mark this to delete old timetable blocks from calendars.

====Room setting====
Create rooms with timetable blocks.

=====Manage=====
[[File:Office365roomsettings.png|none|thumb|378x378px]]

=====Room displayname=====

=====Prefix=====
Text that can be added to the start of what is chosen in Generator.

=====Generator=====
Choose what is to define the room.

=====Suffix=====
Text that can be added to the end of what is chosen in Generator.

=====Resulting displayname=====
Summary of the chosen display name as it will be shown in Office 365.

=====Set rights to rooms=====
Sets the rights on rooms when created

This has to be a '''Distribution Group''' Otherwise it won't work
[[File:Office365roomsettings2.png|none|thumb|274x274px]]

======Owner======
Users will be able to create, read, modify and delete all items and files, and create sub-folders. As the folder owner, they can change the permission levels others have for the folder. (Does not apply to delegates.).

======Publishing Editor======
Users can create, read, modify and delete all items and files, and create sub-folders. (Does not apply to delegates.).

======Editor======
Users can create, read, modify and delete all items and files..

======Publishing Author======
Users can create and read items and files, create sub-folders, and modify and delete items and files they create. (Does not apply to delegates.).

======Author======
Users can create and read items and files and modify and delete items and files you create.

======Nonediting Author======
Users have full read details. Can create items and delete own items. Folder visible.

======Reviewer======
Users can read items and files only.

======Contributor======
Users can create items and files only. The contents of the folder does not appear. (Does not apply to delegates.).

'''''Note''''' ''With author or editor permissions, a delegate has send-on-behalf-of permission. Sent messages contain both the managers and delegates names. Message recipients see the managers name in the Sent On Behalf Of box and the delegates name in the From box.''

=====Define rooms to be created=====
Specify the rooms to be created based on a filter. If nothing is entered, every room will be created.
[[File:Office365criteria.png|none|thumb|202x202px]]

======Room number and Room name======
Can be found in the skemabrikker_rooms table in SQL.

===Office 365 SharePoint site setting===
This will create SharePoint sites
[[File:Office365sharepointsitesettings.png|none|thumb|720x720px]]
[[File:Office365sharepointsitesettings2.png|none|thumb|567x567px]]

====''Site settings''====

=====Automation type=====
Full: Means that site maintenance will be fully automated.

=====Remove learner method=====
Deleted in AD

Users will be removed from site when they are not active in UMS anymore

Finished on activity/course

Users will be removed when they have finished with the course.

=====Delete sites=====
Auto delete

Sites will be delete when the last student has left the site

=====Manual Delete=====
Sites will not be deleted by UMS. This has to be done by an administrator

=====Send mail to teacher(s)=====
Send mail notification to teachers when they are attached to a site.

=====Create x days before=====
Choose how many days before start that the sites are to be created.

=====Delete x days after end=====
Choose how many days after end that the sites are to be deleted.

=====Teacher rights on sites=====
Rights the teacher will have on the site when attached.

=====Learner rights on sites=====
Rights the student/learner will have on the site when attached.

=====Check if group rights match=====
When UMS looks for UMS-groups on the site, it will do so based on two criteria’s.

The correct rights and the correct name. Unchecking this will disable the first criteria and only look for a group with the right name. (This is when users change the UMS-group rights on a site manually)

=====SQL Groups=====
Members of these groups will be attached to all sites created with this setting as teachers
[[File:Office365sqlgroups.png|none|thumb|447x447px]]

=====Group name=====
This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

====Activity Sites====
Do not create

It will not create any sites based on activities.

LMS has to be checked

The field Aktivitet_LMS in the students table has to be True. (Look in the documentation for the specific administrative system to see how this is set)

Based on template filter

Create sites based on a filter that is specified per template.
[[File:Office365filters.png|none|thumb|507x507px]]

All

Create all sites.

Title

Title of the site. Changing this after a site has been created will cause it to be updated.

Description

Description of the site. Changing this after a site has been created will cause it to be updated.

===Search filter and criteria===
This will enable you to concatenate sites that would have been created as to or more sites to be created as one site.

=====Remarks=====
This is just for description purposes.

=====Filter=====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

=====Semester roll=====
Use replace string with empty

This will replace a section of the site with an empty string.

=====Start index=====
Determine where to start in string to remove.

=====Length=====
How many characters will be removed from the string.

=====Add activity short description to node ID=====
This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

====Examples====
If you have three activities named English1, English2, English3 and you only want one SharePoint site.

Set the settings as shown below
[[File:Office365filterexample.png|none|thumb|401x401px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

=====Course Sites=====
Course URL’s will always be created as activity_course.

=====Do not create=====
It will not create any sites based on courses.

=====LMS has to be checked=====
The field Skolefag_LMS in the students table has to be True. (Look in the documentation for the specific administrative system to see how this is set)

=====Based on template filter=====
Create sites based on a filter that is specified per template.
[[File:Office365filters.png|none|thumb|507x507px]]

=====All=====
Create all sites.

=====Title=====
Title of the site. Changing this after a site has been created will cause it to be updated.

=====Description=====
Description of the site. Changing this after a site has been created will cause it to be updated.

=====Search filter and criteria=====
This will enable you to concatenate sites that would have been created as two or more sites to be created as one site.
[[File:Office365filter.png|none|thumb|416x416px]]

=====Remarks=====
This is just for description purposes.

=====Course Filter=====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

=====Semester roll=====
Use replace string with empty

This will replace a section of the site with an empty string.

=====Start index=====
Determine where to start in string to remove.

=====Length=====
How many characters will be removed from the string.

=====Activity Filter=====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

=====Semester roll=====
Use replace string with empty

This will replace a section of the site with an empty string.

=====Start index=====
Determine where to start in string to remove.

=====Length=====
How many characters will be removed from the string.

After you have created the Office 365 setting you put in on a template.
[[File:Office365templateeditor.png|none|thumb|720x720px]]

Setting: This will created the users with on this template in Office 365 with these settings

===SharePoint settings===
Sites created with setting. If this is not specified no activities/courses on this template will be created.
[[File:Office365template.png|none|thumb|422x422px]]

====Site URL====
Which site collection is used when creating sites

Language: The default language of the created site

Course Template

Standard SharePoint: Use a standard template from SharePoint

Course template: Enter a name of a template that resides in the site collection. If nothing is entered it will default to the Team site template

UMS SharePoint Portal: Create sites based on the UMS SharePoint Portal product

====OneNote Class Notebook setting====
Choose a Class Notebook setting. This will create a Class Notebook created in the SharePoint site.

====SQL Groups====

Members of these groups will be attached to all sites created with this setting as teachers[[File:Office365sqlgroups.png|none|thumb|447x447px]]

====Group name====
This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

OneNote Class Notebook setting

Define settings for OneNote Class Notebooks.
[[File:OneNotesections SharePoint.png|none|thumb|476x476px]]

====Sections====
Define the section the Class Notebook will be created with. Students that are attached to this Class Notebook will have these sections.
[[File:Office365onenoteclassnotebooksettingedit.png|none|thumb|447x447px]]Use Name instead of title for Notebooks (Last part of URL)

This will make the title of the NoteBook be the same as the last part of the URL of the SharePoint site that the NoteBook is created in. It never changes unless this is unchecked.

Never update Notebook title after creation

The NoteBook will never update the title after it has been created, even though the SharePoint site changes title. it will be created with the title that SharePoint site has at createin time.

===OneNote Class Notebook setting===
[[File:Office365onenoteclassnotebooksettings.png|none|thumb|720x720px]]
[[File:Office365onenoteclassnotebooksettings2.png|none|thumb|720x720px]]

====''Notebook settings''====

====Automation type====
Full: Means that Notebooks maintenance will be fully automated.

====Remove learner method====
Deleted in AD

Users will be removed from Notebooks when they are not active in UMS anymore

Finished on activity/course

Users will be removed when they have finished with the course.

====Delete Notebooks====
Auto delete

Notebooks will be delete when the last student has left the Notebook

Manual Delete

Notebooks will not be deleted by UMS. This has to be done by an administrator

====Send mail to teacher(s)====
Send mail notification to teachers when they are attached to a Notebook.

====Create x days before====
Choose how many days before start that the Notebooks are to be created.

====Delete x days after end====
Choose how many days after end that the Notebooks are to be deleted.

====SQL Groups====

Members of these groups will be attached to all Notebooks created with this setting as teachers[[File:Office365sqlgroups.png|none|thumb|447x447px]]

====Group name====
This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

====Activity Notebooks====

====Do not create====
It will not create any Notebooks based on activities.

====LMS has to be checked====
The field Aktivitet_LMS in the students table has to be True. (Look in the documentation for the specific administrative system to see how this is set)

====Based on template filter====
Create Notebooks based on a filter that is specified per template.
[[File:Office365filters.png|none|thumb|507x507px]]

====All====
Create all Notebooks.

====Title====
Title of the Notebook. Changing this after a Notebook has been created will cause it to be updated.

====Search filter and criteria====
This will enable you to concatenate Notebooks that would have been created as to or more Notebooks to be created as one Notebook.
[[File:Office365filterexample.png|none|thumb|401x401px]]

====Remarks====
This is just for description purposes.

====Filter====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

====Semester roll====
Use replace string with empty

This will replace a section of the Notebook with an empty string.

====Start index====
Determine where to start in string to remove.

====Length====
How many characters will be removed from the string.

====Add activity short description to node ID====
This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

===Examples===
If you have three activities named English1, English2, English3 and you only want one Notebook.

Set the settings as shown below
[[File:Office365filterexample.png|none|thumb|401x401px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

====Course Notebooks====
Course URL’s will always be created as activity course.

====Do not create====
It will not create any Notebooks based on courses.

====LMS has to be checked====
The field Skolefag_LMS in the students table has to be True. (Look in the documentation for the specific administrative system to see how this is set)

====Based on template filter====
Create Notebook based on a filter that is specified per template.
[[File:Office365filters.png|none|thumb|507x507px]]

====All====
Create all Notebooks.

====Title====
Title of the Notebook. Changing this after a Notebook has been created will cause it to be updated.

====Search filter and criteria====
This will enable you to concatenate Notebooks that would have been created as two or more Notebooks to be created as one Notebook.
[[File:Office365filter.png|none|thumb|416x416px]]

====Remarks====
This is just for description purposes.

====Course Filter====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

====Semester roll====
Use replace string with empty

This will replace a section of the Notebook with an empty string.

====Start index====
Determine where to start in string to remove.

====Length====
How many characters will be removed from the string.

====Activity Filter====
The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

====Semester roll====
Use replace string with empty

This will replace a section of the Notebook with an empty string.

====Start index====
Determine where to start in string to remove.

====Length====
How many characters will be removed from the string.

After you have created the Office 365 setting you put in on a template.
[[File:Office365template2.png|none|thumb|720x720px]]

Setting: This will created the users with on this template in Office 365 with these settings

===OneNote Class Notebook settings===
Notebooks created with setting. If this is not specified no activities/courses on this template will be created.
[[File:Office365settings.png|none|thumb|422x422px]]

====Site collection URL====
Which Notebook collection is used when creating Notebooks

====Language====
The default language of the created Notebook

====Sections====
Define the section the Class Notebook will be created with. Students that are attached to this Class Notebook will have these sections.
[[File:Office365onenoteclassnotebooksettingedit.png|none|thumb|447x447px]]

====SQL Groups====

Members of these groups will be attached to all Notebooks created with this setting as teachers[[File:Office365sqlgroups.png|none|thumb|447x447px]]

====Group name====
This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

===Organization Settings===
[[File:Office365organization.png|none|thumb|656x656px]]

====''Site settings''====

====Description====
Add a description to be able to identify the account.

====SharePoint administration URL====
URL of the SharePoint administration site for the tenant.

====''Credentials settings''====

====Username====
Username used to connect to SharePoint.

====Password====
Password used to connect to SharePoint.

==Parameters==
> LiveAtEdu.exe [<optional> Action]
Eg.
> LiveAtEdu.exe

> LiveAtEdu.exe UsersOnly
{| class="wikitable"
|+Users
!Parameter
!Description
|-
|UsersOnly
|Runs all the parameters in this table
|-
|UpdateUsers
|Update users
|-
|DisableUsers
|Disable users
|-
|EnableUsers
|Enable users
|-
|DeleteUsers
|Delete users
|-
|CreateUsers
|Create users
|-
|UpdateImmutableID
|Update Immutable ID on users
|-
|UpdateOffice365SettingsIDForUsers
|Update Office 365 settings for users if they have changed template
|-
|UpdateUsersObjectID
|Get the object ID from office 365 and save it in UMS DB
|}
{| class="wikitable"
|+User settings
!Parameter
!Description
|-
|RunUserSettings
|Runs all the parameters in this table
|-
|DisableStrongPassword
|Disable strong password for users
|-
|SetMailAddress
|Set mail address on users
|-
|Forward2OnPremiseMail
|Set forward to OnPremise mail on users
|-
|SetCalendarRights
|Set calendar rights on users
|-
|UpdateMailboxTimeZone
|Update timezone for mailbox users
|-
|UpdateMailboxLanguage
|Update language for mailbox users
|-
|EnablePasswordNeverExpires
|Enable password never expires for users
|-
|UpdatePictures
|Update pictures
|-
|Forward2PrivateMail
|Set forward to privatemail on users
|-
|UpdateReplyToAll
|Set Reply to all on users
|-
|ProvisionOneDrive
|Provision OneDrive to users
|-
|UpdateAddressBookPolicy
|Set address book policy on users
|}
{| class="wikitable"
|+Groups
!Parameter
!Description
|-
|GroupsOnly
|Runs all the parameters in this table
|-
|RemoveGroupMembers
|Remove group members from groups
|-
|AddGroupMembers
|Add members to groups
|-
|DeleteGroups
|Delete groups
|-
|CreateGroups
|Create groups
|-
|UpdateGroupsObjectID
|Get the object ID from office 365 and save it in UMS DB
|-
|GetUPNsForGroups
|Get the UPN of template groups from Office 365
|}
{| class="wikitable"
|+Template groups
!Parameter
!Description
|-
|TemplateGroupsOnly
|Runs all the parameters in this table
|-
|RemoveUsersFromTemplateGroups
|Remove users from template security groups
|-
|AddUsers2TemplateGroups
|Add users to template security groups
|-
|DeleteTemplateGroups
|Delete groups that are no longer template security groups
|-
|UpdateTemplateGroupsObjectID
|Get the object ID from office 365 and save it in UMS DB
|-
|GetUPNsForTemplateGroups
|Get the UPN of template security groups from Office 365
|}
{| class="wikitable"
|+Template extra groups
!Parameter
!Description
|-
|TemplateExtraGroupsOnly
|Runs all the parameters in this table
|-
|CreateTemplateExtraGroups
|Create groups from template extra group
|-
|DeleteTemplateExtraGroups
|Delete groups that are no longer in extra groups
|-
|AddTemplateExtraGroupMembers
|Add users to template extra groups
|-
|UpdateTemplateExtraGroupsObjectID
|Get the object ID from office 365 and save it in UMS DB
|}
{| class="wikitable"
|+Keep alive groups
!Parameter
!Description
|-
|KeepAliveGroupsOnly
|Runs all the parameters in this table
|-
|CreateKeepAliveGroups
|Create keep alive groups
|-
|DeleteKeepAliveGroups
|Delete keep alive groups if they are no longer in UMS
|-
|UpdateSetMailAddressOnKeepAliveGroups
|Update the mail address on keep alive groups
|-
|AddKeepAliveGroupMembers
|Add users to keep alive groups
|-
|RemoveKeepAliveGroupMembers
|Remove users from keep alive groups
|}
{| class="wikitable"
|+Disabled groups
!Parameter
!Description
|-
|DisabledGroupsOnly
|Runs all the parameters in this table
|-
|CreateDisabledGroups
|Create disabled groups
|-
|DeleteDisabledGroups
|Delete disabled groups if they are no longer in UMS
|-
|UpdateSetMailAddressOnDisabledGroups
|Update the mail address on disabled groups
|-
|AddDisabledGroupMembers
|Add users to disabled groups
|-
|RemoveDisabledGroupMembers
|Remove users from disabled groups
|}
{| class="wikitable"
|+Teams
!Parameter
!Description
|-
|TeamsOnly
|Runs all the parameters in this table
|-
|AddTeams2DB
|Add Teams to UMS DB
|-
|CreateTeams
|Create Teams
|-
|AddTeamToGroup
|Add teams to groups
|-
|ActivateTeams
|Activate teams
|-
|UpdateTeams
|Update Teams
|-
|DeleteTeams
|Delete Teams
|-
|AddTeachers2TeamsDBTable
|Add teachers to Office365Teams_Teachers table in UMS DB
|-
|AddTeachers2Teams
|Add teachers to Teams
|-
|AddLearners2TeamsDBTable
|Add learners to Office365Teams_Learners table in UMS DB
|-
|AddLearners2Teams
|Add learners to Teams
|-
|TeamsDeleteTeachers
|Delete teachers in Teams
|-
|TeamsDeleteLearners
|Delete learners in Teams
|-
|TeamsUpdateNeedToBeUpdated
|Set update on next run flag
|-
|UpdateLearnersExternalID
|Retrieve the learners object id from Office 365 and save it in UMS DB
|-
|UpdateTeachersExternalID
|Retrieve the teachers object id from Office 365 and save it in UMS DB
|-
|UpdateSchoolsExternalID
|Retrieve the schools object id from Office 365 and save it in UMS DB
|-
|UpdateTeamsExternalID
|Retrieve the teams object id from Office 365 and save it in UMS DB
|}
{| class="wikitable"
|+SharePoint
!Parameter
!Description
|-
|SharepointOnly
|Runs all the parameters in this table
|-
|CreateSites
|Create sites
|-
|AddSites2DB
|Add sites in UMS DB
|-
|DeleteSites
|Delete sites
|-
|UpdateSites
|Update sites
|-
|AddLearners2SitesInDB
|Add learners to UMS DB
|-
|DeleteTeachers
|Delete teachers
|-
|AddTeachers2Sites
|Add teachers to sites
|-
|DeleteSiteGroups
|Delete site groups
|-
|AddTeachers2SitesInDB
|Add teachers to UMS DB
|-
|DeleteLearners
|Delete learners
|-
|AddLearners2Sites
|Add learners to sites
|-
|UpdateSiteURL
|Update sites with new URL
|-
|AddNoteBooks2Sites
|Add OneNote Class NoteBooks to sites
|-
|SharePointDeleteNoteBooks
|Delete OneNote Class NoteBooks from sites
|-
|UpdateNeedToBeUpdated
|Set the update on next run flag
|-
|UpdateSitesIsActive
|Update site active/inactive status
|-
|SharePoint_OneNoteClassNotebook_AddMissingTeachers
|Add missing Teachers to OneNote Class NoteBooks
|-
|SharePoint_OneNoteClassNotebook_AddMissingLearners
|Add missing Learners to OneNote Class NoteBooks
|-
|ReAddLearners2Sites
|Re-add learners to sites if ReAdd is true in DB
|-
|ReAddTeachers2Sites
|Re-add teachers to sites if ReAdd is true in DB
|}
{| class="wikitable"
|+OneNoteClassNoteBook
!Parameter
!Description
|-
|OneNoteClassNotebookOnly
|Runs all the parameters in this table
|-
|AddNotebooks2DB
|Add OneNote Class NoteBooks to UMS DB
|-
|CreateNotebooks
|Create OneNote Class NoteBooks
|-
|UpdateOneNotes
|Update OneNote Class NoteBooks
|-
|DeleteOneNotes
|Delete OneNote Class NoteBooks
|-
|AddTeachers2OneNotesInDB
|Add teachers to OneNote Class NoteBooks in UMS DB
|-
|AddTeachers2OneNotes
|Add teachers to OneNote Class NoteBooks
|-
|AddLearners2OneNotesInDB
|Add learners to OneNote Class NoteBooks in UMS DB
|-
|AddLearners2OneNotes
|Add learners to OneNote Class NoteBooks
|-
|OneNoteDeleteTeachers
|Delete teachers in OneNote Class NoteBooks
|-
|OneNoteDeleteLearners
|Delete learners in OneNote Class NoteBooks
|-
|OneNoteUpdateNeedToBeUpdated
|Set update on next run flag
|}

==Technical settings==

==Maintenance==

===portal.office.com===

====''Teams''====

Go to [http://portal.office.com Office Portal] and login with your admin account( the same UMS uses).

Select settings Services and add-ins and click Teams.
[[File:Office_365_Teams_activation.PNG|1350x1350px|thumb|Activate Teams for a license type, ie. Guest or Education-Student|none]]

==FAQ==

===Office 365 Licens (Unable to assign this license) How to troubleshoot this error===

====Error message from UMS Job log (LiveAtEdu)====

=====''Error = Unable to assign this license''=====
''Set-MsolUserLicense -UserPrincipalName 'khhi3275@ums.dk' -AddLicenses "inLogic:STANDARDWOFFPACK_IW_STUDENT" -LicenseOptions $MyO365Sku''

''Error = Unable to assign this license.''

''29-01-2019 13:23:00 - at Utilities.Office365.SetLicenseForUser(String UPN, List`1 Licenses, SqlConnection& LocalSQLDBConnection)''

'' at LiveAtEdu_Sync.LiveAtEdu_Sync.PerformFunctionUserSettings(String SQLStr, UserFunctions Office365Function, MethodInfo StackFrame)''

''29-01-2019 13:23:00 - khhi3275- UPN = khhi3275@ums.dk''

''29-01-2019 13:23:01 - (UpdateLicenseInfoOnUsers) Error. Could not set license for user - khhi3275@ums.dk ''

*Try adding the same licenses manually to a single user in office365. You could see if that is possible[[File:Licens.jpg|none|thumb|814x814px]]

*The error shows that it is not possible to put the same licenses together[[File:Licens Error.png|none|thumb|812x812px]] 
*Change your licenses in UMS and run the LiveAtEdu job again

===Groups===
How to get groups visible in OneDrive and Classroom

Remove the checkbox from Only senders inside my organization

Why do I not get the site created?

#Activity
##Is there a user on the activity with a primary template that has an office 365 setting attached
##Is the flag Aktivitet_LMS = True
#Course
##Is there a user on the course with a primary template that has an office 365 setting attached
##Is the flag Skolefag_LMS = True

===Disable or enabling user===
Error = Message: Insufficient privileges to complete the operation.

This could be the result of the user trying to be disabled/enabled has roles that does not allow the action like Global Administrator.

===The term 'Set-UnifiedGroup' is not recognized as a name of a cmdlet, function, script file, or executable program.===
https://docs.microsoft.com/en-us/powershell/exchange/find-exchange-cmdlet-permissions?view=exchange-ps

Run this command to check which roletypes are needed
Get-ManagementRole -Cmdlet Set-UnifiedGroup

===A parameter cannot be found that matches parameter name 'type'.===
https://docs.microsoft.com/en-us/powershell/exchange/find-exchange-cmdlet-permissions?view=exchange-ps
[[File:Office365 ExchangeAdminRoleNeeded.jpg|none|thumb|1275x1275px]]

Run this command to check which roletypes are needed
Get-ManagementRole -Cmdlet Get-DistributionGroup

SMS Alert

2022-04-08T07:48:34Z

Tod: rækkefølgen

SMS Alert provides fast and effective warnings in case of fire, bomb threats, school shootings and other emergency situations. When a crisis arises, everyone needs to be informed of it. And it needs to be done in a simple and transparent way. The SMS Alert module is separate from our other SMS modules, to avoid confusion with other SMS templates.

==Benefits==
There are many benefits of having SMS Alert. The module:

*Supports direct message to the appropriate authorities
*Immediately notifies everyone via their mobile phones
*Creates a sense of security for everyone at the school and their relatives
*Gives you an easy editor with predefined texts, which are almost ready to be sent out
*Lets you defines who has access to SMS Alert
*Turns your entire screen red, when you open the open the module to issue an alarm

==Requirement==

This module is already installed with the standard UMS installation. It requires a valid license for the module, which can be checked under “Help/License info”:
[[File:SmsAlertMenuLicenseInfo.png|none|thumb|827x827px]]

The required license is called “SMS Alert”:
[[File:SmsAlertLicenseInfo.png|none|thumb|651x651px]]

After the license has been verified, UMS is ready to be configured.

==Settings==
All settings regarding this module are located in Template settings, just as “ordinary” users that UMS maintains.
The concept is that each template (group of users), has a location attached to them. This could be the same location for all users/templates->All users on the school is alerted at the same time. Or it could be different locations (a large school with multiple addresses).
[[File:SmsAlertTemplateEditor.png|none|thumb|822x822px]]

Simply edit an existing template and click “Manage…” under location.

[[File:SmsAlertLocation.png|354x354px]]

[[File:SmsAlertAccessGroup.png|none|thumb]]

The settings for a location is:

*Description: A descriptive name for the location (this is the name that the users are shown)
*Access group: Members of the chosen group will have the rights to publish an alert for this location
*Extra numbers: Insert extra phone numbers that will receive this message first (ex. The local police station)
*Extra mailing lists: Insert extra emails that will receive the message
*SMS Alerts: Choose/design the alert messages

==Locations - and how they work==
When you stand on a template, it's only possible to select one location, but you can set the same location on all of your templates to give you a "Select all option".

The selected location in the dropdown is the only one that are visible to the selected users in the AD Group

==SMS Alerts==

Its possible to define multiple alert messages:
[[File:SmsAlertSmsTemplateEditor.png|none|thumb|467x467px]]

Each alert needs a telling display name, and a short and easy to understand text.

 

== SMS sending order ==
1. Custom number from UMS Configurator. (Eg fire brigade and police)

2. Learn who has teaching now. (if the alarm is at 11 o'clock, everyone who teaches at 11 o'clock will be notified first.)

3. Teacher who has teaching at the school later in the day or at another time in school.

4. Guest Users and MassUsers.

5. Students who have tuition now. (if the alarm is at 11 o'clock, everyone who has class at 11 o'clock will be notified first.)

6. Students who have tuition later in the day, or at another time in school.

7. Other students at school.

8. Other Students who are members of the school.

==Push Notification for SMS Alert App==
To add push notification go to Web Setup -> SMS Alert

Select "Send App push notification"

It requires UMS School App.
[[File:Smsalertpushnotification.png|none|thumb|804x804px]]

SSO

2022-03-21T13:16:35Z

Tod: /* FAQ */

[[File:Single-Sign-On-SSO-DK.png|thumb]]
Our Single Sign-on (SSO) module is designed for schools that would like to make it easy for employees and students to use the school's various electronic systems. With the SSO module, users get one login and password that logs them into all the associated services at once.

For example, students can Access the school's LMS system, library system, digital dictionaries and databases with scientific publications - all by signing in with SSO once and for all.

This saves time and effort whenever users need to use one of the school's systems. At the same time, it gives users a simpler everyday life because they do not have to worry about having to keep in mind several logins.

==Prerequisite and purpose==

===Prerequisite===
This requires that:

*An installed Active Directory federation services (AD FS) server.
*Access to configuration snap in. Either via Remote PowerShell or directly on the server.
*An UMS installation, licensed to SSO from inLogic.
*A star or new certificate for the address that the AD FS server needs.

===purpose===

==Installation==

===Installation===

==Change ADFS certificates in UMS==
The UMS server also needs the certificates from the ADFS server. This is done by consuming the metadata. ''You can use <nowiki>https://samlmd2cert.azurewebsites.net/</nowiki> to get the certificate files.'' 

When you have the new and updated certificates from ADFS it needs to be in rootfolder of the UMS Application.

Physical path (C:\inetpub\wwwroot).

And we need to update the records in the UMS database, if the name of the file has changed.
Update SSOSetting set PartnerCertificateFile = 'TheNameOfCertificate_signing.cer'
Where ID = <The id of the active setting>
It is the signing certificate the UMS needs from the ADFS.

Now delete the old certificate files from your UMS folder, do an iisreset to let the UMS resolve the newly entered information in the databse.

==Changing the Self Signed Certificate in SSO.==

#Get started by clicking on the house icon in the menu. Search for IIS and click on Internet Information Services (IIS) Manager.[[File:Sso iis manager.png|none|thumb]]
#In the Connections column on the left, click on the name of the server. Double-click on Server Certificates.[[File:IIS-Cert-1.png|none|thumb|497x497px]]
#In the Actions column on the right, click on Create Self-Signed Certificate.[[File:IIS-Cert-2.png|none|thumb|499x499px]]
#Enter any friendly name and then click OK.[[File:IIS-Cert-3.png|none|thumb|508x508px]]
#You will now have an IIS Self Signed Certificate valid for 1 year listed under Server Certificates.
#Right click on the new create certificate and then click '''Export.'''[[File:IIS-Cert-4.png|none|thumb|742x742px]]
#Remember to delete the old self signed certificate (C:\inetpub\wwwroot).[[File:IIS-Cert-5.png|none|thumb|573x573px]]
#Enter the path (C:\inetpub\wwwroot\UMS-SSO). The new password you type will be used later on when you set up your environment. Please remember this password. Click OK.[[File:IIS-Cert-8.png|none|thumb|771x771px]]
#Open SQl Management Studio and type “''select * from SSOSetting''”. You will see all settings for UMS SSO.
#Update the Certificate by typing “''update SSOSetting set LocalCertificateFile ='UMS-SSO.pfx''”
#Update the Password by typing “''update SSOSetting set LocalCertificatePassword ='Velk0mmen2018''”.[[File:IIS-Cert-9.png|none|thumb|781x781px]]
#Open the IIS Server and click Start. Click Run type IISReset and then click OK.[[File:IIS-Cert-10.png|none|thumb|377x377px]]
#Open the AD FS Server and search for AD FS. Click on AD FS Management.[[File:IIS-Cert-11.png|none|thumb|305x305px]]
#Click on the Trust Relationships folder and then click on Relying Party Trusts.
#In the details panel, click the relying party trust that you want to update from federation metadata.
#In the Action panel, click Update from Federation Metadata.
#In the properties dialog box for the trust, click Update to start the update.
#When the update is complete, click OK.[[File:IIS-Cert-12.png|none|thumb|745x745px]]

==Certificates - Update Service Communication Certificate==

===Things to have ready:===
A new updated certificate with private key - <file>.pfx

A connection to AD FS server, with administrator rights.

First install the certificate on the server, select my computer when asked.

Now go to AD FS -> Service -> Certificates -> Set Service Communications Certificate...

Now select "view more" -> And select the new certificate

[[File:ADFSChangeCertificate.png|1389x1389px]]

And now we need to set the certificate on the http.sys on adfs
Set-AdfsSslCertificate -Thumpprint xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Now go to Services and restart the AD FS Service

==Certificates - Automatic rollover==
Out of the box, ADFS generates two self-signed certificates that are good for one year. One certificate for token signing, and one for token encryption.

The token signing certificate is for signing the tokens used in the user sign on process, and it is considered the “bedrock of security” for ADFS. If someone gained access to this certificate (the public/private key pair), they could impersonate your ADFS environment.

The token decryption certificate is used for encrypting the tokens used in the user sign on process. This certificate isn’t used very often.

For more information about AD FS Certificates see https://blogs.technet.microsoft.com/askpfeplat/2015/01/26/adfs-deep-dive-certificate-planning/

===Token Certificate Validity Periods===
By default, ADFS is configured to generate self-signed token certificates with a duration of one year. This duration can be changed, but keep in mind that the token-signing certificate is the foundation of the sign on process, and therefore, it really shouldn’t have a duration longer than 3 years.

===ADFS Federation Metadata===
The public key portion of both certificates are included in the ADFS Federation Metadata, and are available from a public URL endpoint on all ADFS servers in the farm. Relying Party (RP) applications that can consume federation metadata will automatically pick up certificate changes whenever they pull the federation metadata file (FederationMetadata.xml) from your ADFS environment.

Example URL
<nowiki>https://adfs.contoso.com/FederationMetadata/2007-06/FederationMetadata.xml</nowiki>
Before performing a token certificate rollover, you will want to reach out to your RP partners (application owners) to see how often their application pulls the federation metadata so that they will experience little to no downtime before trusting the new certificates.

However, most applications do not automatically retrieve the federation metadata on a schedule. Instead, an application owner will need to import the federation metadata from an XML file, or manually force the application to retrieve the federation metadata from the URL endpoint.

And then there’s the applications that don’t consume federation metadata at all — they have to be manually updated. This means you will need to send the public key portion of the new certificates to the application owners.

===Certificate and Rollover Settings===
Run the following PowerShell command on the primary ADFS server to view the properties related to certificates:
Get-AdfsProperties | FL AutoCert*, Certificate*

===ADFS Properties Related to Certificate Renewal===
'''Auto Certificate Rollover'''

When the auto-rollover process is enabled (set to “True”), ADFS will automatically generate new “Secondary” certificates before the current ones expire, and then eventually promote them to be “Primary”. For a manual renewal process, this should be set to “False” until you’re ready to generate new “Secondary” certificates.

'''Certificate Generation Threshold'''

New certificates will be generated this number of days before the expiration of the current “Primary” certificates.

'''Certificate Promotion Threshold'''

Number of days the newly generated certificate will exist before being promoted from the “Secondary” certificate to the “Primary” certificate.

'''Certificate Critical Threshold'''

Number of days prior to expiry of the certificates before a new certificate is generated and promoted to the “Primary” certificate.

'''Certificate Duration'''

Validity period of the auto-generated certificates. Default is 1 year.

'''Certificate Rollover Interval'''

Number of minutes at which ADFS checks to see if a new certificate needs to be generated.

===Token Certificate Rollover Process===
There are 3 approaches for rolling over the token certificates. Which one to use will depend on the number of relying party trusts you have, the level of control you wish to exert upon the process, and the timing of the certificate expirations.

'''Automatic Staged Rollover'''

You would use this process when ADFS controls when the new self-signed token certificates are generated, and when they are promoted to become the “Primary” certificates.

'''Manual Staged Rollover'''

You would use this process to manually control when the new self-signed token certificates are generated, and when they are promoted to become the “Primary” certificates.

'''Immediate Manual Rollover'''

Think of this as a certificate cut-over process. You would do this if you wanted to roll over your certificates immediately without having a set of primary and secondary certificates. You would also do this if your current certificates expired and you need to renew immediately.

Keep in mind that there will be outage when Token certificates are immediately generated & promoted. The relying parties (application owners) must update their configuration with the new certificates, but until they do so, single sign-on will not work.

===Automatic Staged Rollover===
This process should only be used if you have already communicated to all your relying party application owners with information about the schedule for which the new certificates will be generated, when they will be promoted to the “Primary” certificate, and when the old certificates will expire.

Note that an ADFS administrator will need to export the public portion of the new certificates and send them to the application owners.

Additionally, you can use this process if all of the relying party applications pull your ADFS federation metadata automatically on a schedule. However, this is very rare because most SaaS providers do not want to incur the expense of querying federation metadata changes for hundreds, thousands, or even millions of endpoints. More than likely, you will need to coordinate with the application owners to update their applications.

Permissions: Domain Admin & Local Admin on the primary ADFS server in the farm.

Step 1: Certificate Duration

Set the number of days that will become the validity period of the new self-signed token certificates.

*1 Year: 365
*3 Years: 1095
*5 Years: 1827

Set-ADFSProperties -CertificateDuration 1095
Step 2: Certificate Generation Threshold

Set the number of days before the expiration date of the current certificates that ADFS should generate the new certificates. Thirty days is usually a good number, but you could make it more.
Set-ADFSProperties -CertificateGenerationThreshold 30
Step 3: Certificate Promotion Threshold

When ADFS generates the new self-signed certificates, they are initially set as “Secondary” certificates. ADFS will then use the value of this property to determine the number of days after the new certificates are generated to promote them to be the “Primary” certificates.
Set-ADFSProperties -CertificatePromotionThreshold 25
Step 4: Certificate Critical Threshold

If for some reason ADFS has not generated new self-signed certificates, or newly generated certificates have not been promoted to “Primary”, ADFS will perform these actions within the number of days set in this property prior to expiry of the current primary certificates. Leaving the default 2 days is usually best.
Set-ADFSProperties -CertificateCriticalThreshold 2
Step 5: Auto Certificate Rollover

This enables/disables the ADFS certificate rollover process, which uses the properties configured in the previous steps to rollover (renew & promote) the token certificates. This needs to be enabled.
Set-ADFSProperties -AutoCertificateRollover $true
Step 6: Export the New Certificates

If needed by the application owners, export the new certificates without their private keys. You can do this while the new certificates are set as “Secondary”.

Open the ADFS Management Console: ADFS > Service > Certificates

For each token certificate, perform the following:

*Right-click the certificate > View Certificate…
*In the new window > Details (tab) > Copy to File (button) > Next
*Select: DER Encoded Binary X.509 (.CER) -or- Base-64 Encoded X.509 (.CER)
*Next > Browse to a location to save the file and give it a name
*Next > Finish

Note: To export the certificate in .PEM format, choose Base-64 Encoded X.509 (.CER), and then rename the saved file with the .pem file extension.

Step 7: Export the Federation Metadata XML

If needed by the application owners, run the below PowerShell commands on the ADFS server to export the new ADFS Federation Metadata XML file. Make sure you modify the File Path before running the commands.
# Set the file path
$FilePath = "C:\Users\ADFSAdmin\Desktop\ADFS-MetaData.xml"

<nowiki>#</nowiki> Export MetaData XML
$mUrl = (Get-ADFSEndpoint | where Protocol -eq "Federation Metadata").FullUrl.ToString()
$httpHelper = new-object System.Net.WebClient
$metadataAsString = $httpHelper.DownloadString($mUrl)
$httpHelper.DownloadFile($mUrl , "$($FilePath)")
Note: If you export the metadata while there are both primary and secondary certificates, both of the certificates will be included in the XML file. After the secondary certificates are promoted to primary, and the old certificates are deleted, you should generate a new XML file for future use.

===Manual Staged Rollover===
You would use this process to manually control when the new self-signed token certificates are generated, and when they are promoted to become the “Primary” certificates. You will have full control over the rollover process. ADFS will not do anything automatically.

Permissions: Domain Admin & Local Admin on the primary ADFS server in the farm.

Step 1: Auto Certificate Rollover

This enables/disables the ADFS certificate rollover process, which uses the properties configured in the below steps to rollover (renew & promote) the token certificates automatically. This should be set to False. If not, run the following command.
Set-ADFSProperties -AutoCertificateRollover $false
Step 2: Certificate Duration

Set the number of days that will become the validity period of the new self-signed token certificates.

*1 Year: 365
*3 Years: 1095
*5 Years: 1827

Set-ADFSProperties -CertificateDuration 1095
Step 3: Certificate Generation Threshold

Set the number of days before the expiration date of the current certificates that ADFS should generate the new certificates. Depending on when you plan to manually generate the new certificates, this number should be greater than the number of days between when you generate the new certificates, and when the old certificates expire.

You need to set this because you have to enable the ADFS auto rollover process in order to generate the new certificates. After you generate the new certificates, you will immediately disable the auto rollover process.

Assuming you will generate the new certificates 30 days before the old ones expire, you could set this to 40.
Set-ADFSProperties -CertificateGenerationThreshold 40
Step 4: Certificate Promotion Threshold

When ADFS generates the new self-signed certificates, they are initially set as “Secondary” certificates. ADFS will then use the value of this property to determine the number of days after the new certificates are generated to promote them to be the “Primary” certificates.

Even though the ADFS auto rollover process will be disabled, this property should be set to a number lower than the above Certificate Generation Threshold property.
Set-ADFSProperties -CertificatePromotionThreshold 35
Step 5: Certificate Critical Threshold

If for some reason ADFS has not generated new self-signed certificates, or newly generated certificates have not been promoted to “Primary”, ADFS will perform these actions within the number of days set in this property prior to expiry of the current primary certificates. Leaving the default 2 days is usually best.
Set-ADFSProperties -CertificateCriticalThreshold 2
Step 6: Generate the New Certificates

When you are ready to generate the new token certificates as “Secondary” certificates, use the below PowerShell commands. Both the current “Primary” certificates and the new “Secondary” certificates will be available to the relying party applications.

Note that you cannot manually generate the new token certificates when the ADFS auto rollover process is disabled. Therefore, the commands enable the process, generates the new certificates as “Secondary”, and then disables the process.
Set-ADFSProperties -AutoCertificateRollover $true

Update-AdfsCertificate -CertificateType Token-Decrypting
Update-AdfsCertificate -CertificateType Token-Signing

Set-ADFSProperties -AutoCertificateRollover $false
Step 7: Export the Certificates

If needed by the application owners, export the certificates without their private keys.

Open the ADFS Management Console: ADFS > Service > Certificates

For each token certificate, perform the following:

*Right-click the certificate > View Certificate…
*In the new window > Details (tab) > Copy to File (button) > Next
*Select: DER Encoded Binary X.509 (.CER) -or- Base-64 Encoded X.509 (.CER)
*Next > Browse to a location to save the file and give it a name
*Next > Finish

Note: To export the certificate in .PEM format, choose Base-64 Encoded X.509 (.CER), and then rename the saved file with the .pem file extension.

Step 8: Export the Federation Metadata XML

If needed by the application owners, run the below PowerShell commands on the ADFS server to export the ADFS Federation Metadata XML file. Make sure you modify the File Path before running the commands.
# Set the file path
$FilePath = "C:\Users\ADFSAdmin\Desktop\ADFS-MetaData.xml"

<nowiki>#</nowiki> Export MetaData XML
$mUrl = (Get-ADFSEndpoint | where Protocol -eq "Federation Metadata").FullUrl.ToString()
$httpHelper = new-object System.Net.WebClient
$metadataAsString = $httpHelper.DownloadString($mUrl)
$httpHelper.DownloadFile($mUrl , "$($FilePath)")
Note: Both primary and secondary certificates will be included in the XML file. After you promote the new certificates and delete the old certificates, you should generate a new XML file for future use.

Step 9: Promote the New Certificates

Before the old certificates expire, you need to promote the new certificates to “Primary”.

ADFS Management Console: ADFS > Service > Certificates

For each “Secondary” token certificate, perform the following:

*Right-click the certificate > Set as Primary

Step 10: Delete the Old Certificates

After the old certificates have expired, you can delete them from the ADFS Management Console. Note that you only have the option to delete “Secondary” certificates. You cannot delete a “Primary” certificate.

ADFS Management Console: ADFS > Service > Certificates

For each “Secondary” token certificate, perform the following:

*Right-click the certificate > Delete

===Immediate Manual Rollover===
When doing an immediate rollover, you force ADFS to immediately generate new certificates, promote them to “Primary”, and delete the old certificates.

You would use these steps if you have a few relying party trusts and the application owners are ready to pull the new federation metadata from the ADFS public endpoint after a rollover. You would also use these steps if the ADFS auto rollover process is disabled, and your token certificates have expired.

After the rollover, you can export the new certificates & federation metadata, and send them to your relying party application owners.

Permissions: Domain Admin & Local Admin on the primary ADFS server in the farm.

Step 1: Certificate Duration

Set the number of days that will become the validity period of the new self-signed token certificates.

*1 Year: 365
*3 Years: 1095
*5 Years: 1827

Set-ADFSProperties -CertificateDuration 1095
Step 2: Generate the New Certificates

Note that you cannot generate the new token certificates when the ADFS auto rollover process is disabled. Therefore, the below commands enable the process, generate the new certificates, and then disable the process. The -Urgent switch indicates that the certificate rollover process should happen immediately, and remove older certificates.
Set-ADFSProperties -AutoCertificateRollover $true

Update-AdfsCertificate -CertificateType Token-Decrypting -Urgent
Update-AdfsCertificate -CertificateType Token-Signing -Urgent

Set-ADFSProperties -AutoCertificateRollover $false
Step 3: Export the Certificates

If needed by the application owners, export the certificates without their private keys.

Open the ADFS Management Console: ADFS > Service > Certificates

For each token certificate, perform the following:

*Right-click the certificate > View Certificate…
*In the new window > Details (tab) > Copy to File (button) > Next
*Select: DER Encoded Binary X.509 (.CER) -or- Base-64 Encoded X.509 (.CER)
*Next > Browse to a location to save the file and give it a name
*Next > Finish

Note: To export the certificate in .PEM format, choose Base-64 Encoded X.509 (.CER), and then rename the saved file with the .pem file extension.

Step 4: Export the Federation Metadata XML

If needed by the application owners, run the below PowerShell commands on the ADFS server to export the ADFS Federation Metadata XML file. Make sure you modify the File Path before running the commands.
# Set the file path
$FilePath = "C:\Users\ADFSAdmin\Desktop\ADFS-MetaData.xml"

<nowiki>#</nowiki> Export MetaData XML
$mUrl = (Get-ADFSEndpoint | where Protocol -eq "Federation Metadata").FullUrl.ToString()
$httpHelper = new-object System.Net.WebClient
$metadataAsString = $httpHelper.DownloadString($mUrl)
$httpHelper.DownloadFile($mUrl , "$($FilePath)")

==FAQ==

How to set SPN

<nowiki>http://www.gatepoint.ch/cmdreferenz/html/9341c753-11ff-4acc-993c-b05d50f32330.htm#bkmk_examples</nowiki>

* Update metadata to Office365. ('''Update-MsolFederatedDomain -DomainName mydomain.com -SupportMultiDomain''') 

==Final==

MSGraphPermissions

2022-01-07T14:24:09Z

Tod: /* Password Administrator */

'''MS graph permissions is a UMS backend requirement from version 8.5.203 which was released in June 2021"'''

'''MS graph permissions are required by these UMS modules (LiveAtEdu,OneNote, Sharepoint, Office 365 Timeblok and MS Teams)'''

 

==Creating App Registration==

Go to [http://portal.azure.com Azure Portal] and login with you admin account( '''the same UMS uses''').

'''!!! ATTENTION !!! use service account that UMS uses'''

When logged in go to Azure Active Directory:
[[File:Graph1.jpg|left|thumb|832x832px]]

Go to App registrations
[[File:Graph2.jpg|none|thumb|831x831px]]

Click on New application registration
[[File:Graph3.jpg|none|thumb|909x909px]]

Give the new App a name ex. "UMSGraph", Choose "Web app / API" in Application type, set "Sign-on URL" to "http://localhost". After setting Application Permission values click "Create"
[[File:Graph43.jpg|none|thumb|913x913px]]

You will return to previous screen, here click "your new app"
[[File:Grahp5.jpg|none|thumb|905x905px]]

Click "Certificates & secrets"

Click "New Client Secret"

Enter a "Description" and set "Expires" to the interval that suits your needs.

Click "Add"
[[File:Graph6.jpg|none|thumb|908x908px]]

Copy "Value ID" We will use this later

'''!!! ATTENTION !!! the key value will never be visible again so ensure to copy it.''' [[File:Graph7.png|none|thumb|790x790px]]

Copy the "VALUE Key into "UMS Configurator" field Client Secret

[[File:Tewxddf.png|frameless|566x566px]]

Copy the "Directory Tenant ID " into "UMS Configurator" Field Tenant ID

Copy the "Appplication Client ID " into "UMS Configurator" Field Client ID
[[File:Id.jpg|none|thumb|1120x1120px]]

Click "Api permissions"

Click "Add a permission"
[[File:Graph8.png|none|thumb|780x780px]]

==Setup UMS to use Application just Created==
In the UMS Configurator go to Modules->Office 365 and click "SharePoint organization settings"
[[File:UMSConfiguratorSharepointOrganizationSettings.png|none|thumb|600x600px]]
Choose your SharePoint organization setting and click "Edit..."
[[File:UMSConfiguratorSharepointOrganizationSettingsEdit.png|none|thumb|600x600px]]
Input your "Tenant Name" ex. "cortenso'''.onmicrosoft.com'''", paste the previously copied Application ID into "Client ID" field and paste previously copied KEY into "Client secret" and click "Ok"
[[File:UMSConfiguratorSharepointOrganizationSettingsEditWindow.png|none|thumb|600x600px]]
You are now all set to use the new MS Graph integration.

==Permissions overview==

===Microsoft Graph===
{| class="wikitable sortable"
|+Default permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Office 365
|Live_at_edu.exe
|-
|Group.ReadWrite.All
|Application
|Microsoft Graph
|Setting group attributes on Office 365 groups
|Live_at_edu.exe
|-
|GroupMember.ReadWrite.All
|Application
|Microsoft Graph
|Manage GroupMembers in Office 365
|Live_at_edu.exe
|-
|Directory.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Azure Active Directory
|Live_at_edu.exe
|-
|MailboxSettings.ReadWrite
|Application
|Microsoft Graph
|Used to set mailbox settings in Office 365.
Used to get/create categories
|Live_at_edu.exe
Skemabrikker.exe
|-
|Calendars.ReadWrite
|Application
|Microsoft Graph
|Used to allow UMS to sync calendar events to Office 365
|Skemabrikker.exe
|-
|Files.ReadWrite.All
|Application
|Microsoft Graph
|Used to provision OneDrive for users
|Live_at_edu.exe
|}
{| class="wikitable sortable"
|+Teams sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|EduRoster.ReadWrite.All
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|Member.Read.Hidden
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|TeamMember.ReadWrite.All
|Application
|Microsoft Graph
|Used to add or remove users from Team
|Live_at_edu.exe
|-
|TeamsTab.ReadWrite.All
|Application
|Microsoft Graph
|Used to create tabs in teams
|Live_at_edu.exe
|-
|TeamsAppInstallation.ReadForTeam.All
|Application
|Microsoft Graph
|Used to install app in teams
|Live_at_edu.exe
|-
|Team.Create
|Application
|Microsoft Graph
|Used to create Teams
|Live_at_edu.exe
|-
|Team.ReadBasic.All
|Application
|Microsoft Graph
|Used to read teams
|Live_at_edu.exe
|}

===SharePoint===
{| class="wikitable sortable"
|+SharePoint sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Sites.FullControl.All
|Application
|Microsoft Graph
|Have full control of all site collections
|Office365_SP_OneNote.exe
|-
|Sites.Manage.All
|Application
|Microsoft Graph
|Read and write items and lists in all site collections
|Office365_SP_OneNote.exe
|-
|Sites.ReadWrite.All
|Application
|Microsoft Graph
|Read and write items in all site collections
|Office365_SP_OneNote.exe
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Read and write user profiles
|Office365_SP_OneNote.exe
|}

===OneNote===
{| class="wikitable sortable"
|+OneNote sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Notes.ReadWrite.All
|Application
|Microsoft Graph
|
|Office365_SP_OneNote.exe
|} 
{| class="wikitable"
|+Password Sync
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Roles and Administrators
|Application
|Microsoft Graph
|Reset password for Users
|Password_Sync
|}

===Password Administrator===

To Add Password administrator roles. Click '''Roles and administrator'''
[[File:Passwordd.png|thumb|1167x1167px|none]]

*Click Add Assignments and Search for App Registrations name and Click Add.

[[File:Password1.png|1167x1167px|thumb|none]]
 

==FAQ :==
If you get this message when trying to reset password in Office365 using MS Graph Api. This is because user is global Admin and therefore MS graph can not Reset password
[[File:Passwordsync.png|none|thumb|1245x1245px]]

MSGraphPermissions

2021-12-09T11:18:58Z

Tod:

'''MS graph permissions is a UMS backend requirement from version 8.5.203 which was released in June 2021"'''

'''MS graph permissions are required by these UMS modules (LiveAtEdu,OneNote, Sharepoint, Office 365 Timeblok and MS Teams)'''

 

==Creating App Registration==

Go to [http://portal.azure.com Azure Portal] and login with you admin account( '''the same UMS uses''').

'''!!! ATTENTION !!! use service account that UMS uses'''

When logged in go to Azure Active Directory:
[[File:Graph1.jpg|left|thumb|832x832px]]

Go to App registrations
[[File:Graph2.jpg|none|thumb|831x831px]]

Click on New application registration
[[File:Graph3.jpg|none|thumb|909x909px]]

Give the new App a name ex. "UMSGraph", Choose "Web app / API" in Application type, set "Sign-on URL" to "http://localhost". After setting Application Permission values click "Create"
[[File:Graph43.jpg|none|thumb|913x913px]]

You will return to previous screen, here click "your new app"
[[File:Grahp5.jpg|none|thumb|905x905px]]

Click "Certificates & secrets"

Click "New Client Secret"

Enter a "Description" and set "Expires" to the interval that suits your needs.

Click "Add"
[[File:Graph6.jpg|none|thumb|908x908px]]

Copy "Value ID" We will use this later

'''!!! ATTENTION !!! the key value will never be visible again so ensure to copy it.''' [[File:Graph7.png|none|thumb|790x790px]]

Copy the "VALUE Key into "UMS Configurator" field Client Secret

[[File:Tewxddf.png|frameless|566x566px]]

Copy the "Directory Tenant ID " into "UMS Configurator" Field Tenant ID

Copy the "Appplication Client ID " into "UMS Configurator" Field Client ID
[[File:Id.jpg|none|thumb|1120x1120px]]

Click "Api permissions"

Click "Add a permission"
[[File:Graph8.png|none|thumb|780x780px]]

==Setup UMS to use Application just Created==
In the UMS Configurator go to Modules->Office 365 and click "SharePoint organization settings"
[[File:UMSConfiguratorSharepointOrganizationSettings.png|none|thumb|600x600px]]
Choose your SharePoint organization setting and click "Edit..."
[[File:UMSConfiguratorSharepointOrganizationSettingsEdit.png|none|thumb|600x600px]]
Input your "Tenant Name" ex. "cortenso'''.onmicrosoft.com'''", paste the previously copied Application ID into "Client ID" field and paste previously copied KEY into "Client secret" and click "Ok"
[[File:UMSConfiguratorSharepointOrganizationSettingsEditWindow.png|none|thumb|600x600px]]
You are now all set to use the new MS Graph integration.

==Permissions overview==

===Microsoft Graph===
{| class="wikitable sortable"
|+Default permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Office 365
|Live_at_edu.exe
|-
|Group.ReadWrite.All
|Application
|Microsoft Graph
|Setting group attributes on Office 365 groups
|Live_at_edu.exe
|-
|GroupMember.ReadWrite.All
|Application
|Microsoft Graph
|Manage GroupMembers in Office 365
|Live_at_edu.exe
|-
|Directory.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Azure Active Directory
|Live_at_edu.exe
|-
|MailboxSettings.ReadWrite
|Application
|Microsoft Graph
|Used to set mailbox settings in Office 365.
Used to get/create categories
|Live_at_edu.exe
Skemabrikker.exe
|-
|Calendars.ReadWrite
|Application
|Microsoft Graph
|Used to allow UMS to sync calendar events to Office 365
|Skemabrikker.exe
|-
|Files.ReadWrite.All
|Application
|Microsoft Graph
|Used to provision OneDrive for users
|Live_at_edu.exe
|}
{| class="wikitable sortable"
|+Teams sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|EduRoster.ReadWrite.All
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|Member.Read.Hidden
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|TeamMember.ReadWrite.All
|Application
|Microsoft Graph
|Used to add or remove users from Team
|Live_at_edu.exe
|-
|TeamsTab.ReadWrite.All
|Application
|Microsoft Graph
|Used to create tabs in teams
|Live_at_edu.exe
|-
|TeamsAppInstallation.ReadForTeam.All
|Application
|Microsoft Graph
|Used to install app in teams
|Live_at_edu.exe
|-
|Team.Create
|Application
|Microsoft Graph
|Used to create Teams
|Live_at_edu.exe
|-
|Team.ReadBasic.All
|Application
|Microsoft Graph
|Used to read teams
|Live_at_edu.exe
|}

===SharePoint===
{| class="wikitable sortable"
|+SharePoint sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Sites.FullControl.All
|Application
|Microsoft Graph
|Have full control of all site collections
|Office365_SP_OneNote.exe
|-
|Sites.Manage.All
|Application
|Microsoft Graph
|Read and write items and lists in all site collections
|Office365_SP_OneNote.exe
|-
|Sites.ReadWrite.All
|Application
|Microsoft Graph
|Read and write items in all site collections
|Office365_SP_OneNote.exe
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Read and write user profiles
|Office365_SP_OneNote.exe
|}

===OneNote===
{| class="wikitable sortable"
|+OneNote sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Notes.ReadWrite.All
|Application
|Microsoft Graph
|
|Office365_SP_OneNote.exe
|} 
{| class="wikitable"
|+Password Sync
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Roles and Administrators
|Application
|Microsoft Graph
|Reset password for Users
|Password_Sync
|}

===Password Administrator===

To Add Password administrator roles. Click '''Roles and administrator'''
[[File:Passwordd.png|thumb|1167x1167px|none]]

* Click Add Assignments and Search for graph user Click Add.

[[File:Password1.png|1167x1167px|thumb|none]]
 

==FAQ :==
If you get this message when trying to reset password in Office365 using MS Graph Api. This is because user is global Admin and therefore MS graph can not Reset password
[[File:Passwordsync.png|none|thumb|1245x1245px]]

File:Passwordsync.png

2021-12-09T11:17:40Z

Tod:

ssds

MSGraphPermissions

2021-12-09T10:57:58Z

Tod:

'''MS graph permissions is a UMS backend requirement from version 8.5.203 which was released in June 2021"'''

'''MS graph permissions are required by these UMS modules (LiveAtEdu,OneNote, Sharepoint, Office 365 Timeblok and MS Teams)'''

 

==Creating App Registration==

Go to [http://portal.azure.com Azure Portal] and login with you admin account( '''the same UMS uses''').

'''!!! ATTENTION !!! use service account that UMS uses'''

When logged in go to Azure Active Directory:
[[File:Graph1.jpg|left|thumb|832x832px]]

Go to App registrations
[[File:Graph2.jpg|none|thumb|831x831px]]

Click on New application registration
[[File:Graph3.jpg|none|thumb|909x909px]]

Give the new App a name ex. "UMSGraph", Choose "Web app / API" in Application type, set "Sign-on URL" to "http://localhost". After setting Application Permission values click "Create"
[[File:Graph43.jpg|none|thumb|913x913px]]

You will return to previous screen, here click "your new app"
[[File:Grahp5.jpg|none|thumb|905x905px]]

Click "Certificates & secrets"

Click "New Client Secret"

Enter a "Description" and set "Expires" to the interval that suits your needs.

Click "Add"
[[File:Graph6.jpg|none|thumb|908x908px]]

Copy "Value ID" We will use this later

'''!!! ATTENTION !!! the key value will never be visible again so ensure to copy it.''' [[File:Graph7.png|none|thumb|790x790px]]

Copy the "VALUE Key into "UMS Configurator" field Client Secret

[[File:Tewxddf.png|frameless|566x566px]]

Copy the "Directory Tenant ID " into "UMS Configurator" Field Tenant ID

Copy the "Appplication Client ID " into "UMS Configurator" Field Client ID
[[File:Id.jpg|none|thumb|1120x1120px]]

Click "Api permissions"

Click "Add a permission"
[[File:Graph8.png|none|thumb|780x780px]]

==Setup UMS to use Application just Created==
In the UMS Configurator go to Modules->Office 365 and click "SharePoint organization settings"
[[File:UMSConfiguratorSharepointOrganizationSettings.png|none|thumb|600x600px]]
Choose your SharePoint organization setting and click "Edit..."
[[File:UMSConfiguratorSharepointOrganizationSettingsEdit.png|none|thumb|600x600px]]
Input your "Tenant Name" ex. "cortenso'''.onmicrosoft.com'''", paste the previously copied Application ID into "Client ID" field and paste previously copied KEY into "Client secret" and click "Ok"
[[File:UMSConfiguratorSharepointOrganizationSettingsEditWindow.png|none|thumb|600x600px]]
You are now all set to use the new MS Graph integration.

==Permissions overview==

===Microsoft Graph===
{| class="wikitable sortable"
|+Default permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Office 365
|Live_at_edu.exe
|-
|Group.ReadWrite.All
|Application
|Microsoft Graph
|Setting group attributes on Office 365 groups
|Live_at_edu.exe
|-
|GroupMember.ReadWrite.All
|Application
|Microsoft Graph
|Manage GroupMembers in Office 365
|Live_at_edu.exe
|-
|Directory.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Azure Active Directory
|Live_at_edu.exe
|-
|MailboxSettings.ReadWrite
|Application
|Microsoft Graph
|Used to set mailbox settings in Office 365.
Used to get/create categories
|Live_at_edu.exe
Skemabrikker.exe
|-
|Calendars.ReadWrite
|Application
|Microsoft Graph
|Used to allow UMS to sync calendar events to Office 365
|Skemabrikker.exe
|-
|Files.ReadWrite.All
|Application
|Microsoft Graph
|Used to provision OneDrive for users
|Live_at_edu.exe
|}
{| class="wikitable sortable"
|+Teams sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|EduRoster.ReadWrite.All
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|Member.Read.Hidden
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|TeamMember.ReadWrite.All
|Application
|Microsoft Graph
|Used to add or remove users from Team
|Live_at_edu.exe
|-
|TeamsTab.ReadWrite.All
|Application
|Microsoft Graph
|Used to create tabs in teams
|Live_at_edu.exe
|-
|TeamsAppInstallation.ReadForTeam.All
|Application
|Microsoft Graph
|Used to install app in teams
|Live_at_edu.exe
|-
|Team.Create
|Application
|Microsoft Graph
|Used to create Teams
|Live_at_edu.exe
|-
|Team.ReadBasic.All
|Application
|Microsoft Graph
|Used to read teams
|Live_at_edu.exe
|}

===SharePoint===
{| class="wikitable sortable"
|+SharePoint sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Sites.FullControl.All
|Application
|Microsoft Graph
|Have full control of all site collections
|Office365_SP_OneNote.exe
|-
|Sites.Manage.All
|Application
|Microsoft Graph
|Read and write items and lists in all site collections
|Office365_SP_OneNote.exe
|-
|Sites.ReadWrite.All
|Application
|Microsoft Graph
|Read and write items in all site collections
|Office365_SP_OneNote.exe
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Read and write user profiles
|Office365_SP_OneNote.exe
|}

===OneNote===
{| class="wikitable sortable"
|+OneNote sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Notes.ReadWrite.All
|Application
|Microsoft Graph
|
|Office365_SP_OneNote.exe
|} 
{| class="wikitable"
|+Password Sync
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Roles and Administrators
|Application
|Microsoft Graph
|Reset password for Users
|Password_Sync
|}

===Password Administrator===

To Add Password administrator roles. Click '''Roles and administrator'''
[[File:Passwordd.png|left|thumb|1167x1167px]]

Click Add Assignments and Search for graph user
Click Add.
[[File:Password1.png|left|1167x1167px|thumb]]
 

==FAQ :==
If you get this message when trying to connect it might be a matter of waiting for Client tenant distribution
[[File:SSO login error message.png|left|thumb]]

STIL Settings Roles

2021-11-01T15:20:36Z

Tod: STIL SETTINGS

The module allows you to set one or more roles for users in STIL. Roles as (Teacher, Pedagogue, Leader, Management, TAP, Consultant )

Provides the ability to associate a person with an institution that the person is not associated with in the normal data features of the administrative system

 

== Prerequisites ==

=== Module Requirements ===

* UMS
* UMS Frontend
* STIL SYNC

 

== Installation ==
This module is already installed with the standard [[UMS Web|UMS]] installation. The UMS license will give you access to STIL settings.
 

== Technical settings[edit | edit source] ==

* Update the UMS license on the frontend server and backend server that you received from inlogic with STIL Settings. ([[UMS License Install]])

* Create an Active Directory group. Add these users to the group that need access to add STIL roles

 

# Select a UMS template.
# Click on STIL.
# Click on Manage ( ''Account setting'' )

[[File:STIL SETTING 4.png|none|thumb|706x706px]]
 

# Add the new Active Directory group to (''Access group'')[[File:STIL SETTING 5,½.png|none|thumb|691x691px]] 
# Login to UMS portal.
# Click on control panel
# Click on STIL (BrugerAdmin)[[File:STIL SETTING 1d.png|none|thumb|1026x1026px]] 

 

* It is possible to choose different institution numbers.
* Search for user to be assigned roles[[File:STIL SETTING 3.png|none|thumb|895x895px]] 
* Assign different roles[[File:STIL SETTING.png|none|thumb|891x891px]]

File:STIL SETTING.png

2021-11-01T15:19:20Z

Tod:

File:STIL SETTING 3.png

2021-11-01T15:13:33Z

Tod:

File:STIL SETTING 1d.png

2021-11-01T15:07:34Z

Tod:

gfdcxd

File:STIL SETTING 1.png

2021-11-01T15:06:01Z

Tod:

saef

File:STIL SETTING 5,½.png

2021-11-01T15:00:49Z

Tod:

STil

File:STIL SETTING 5.png

2021-11-01T14:54:49Z

Tod:

STIL

File:STIL SETTING 4.png

2021-11-01T14:47:21Z

Tod:

STIL

STIL Settings

2021-10-29T12:00:05Z

Tod: Created page with "d"

MSGraphPermissions

2021-10-25T11:37:54Z

Tod: /* Permissions overview */

'''MS graph permissions is a UMS backend requirement from version 8.5.203 which was released in June 2021"'''

'''MS graph permissions are required by these UMS modules (LiveAtEdu,OneNote, Sharepoint, Office 365 Timeblok and MS Teams)'''

 

==Creating App Registration==

Go to [http://portal.azure.com Azure Portal] and login with you admin account( '''the same UMS uses''').

'''!!! ATTENTION !!! use service account that UMS uses'''

When logged in go to Azure Active Directory:

 
[[File:Graph1.jpg|left|thumb|832x832px]]

Go to App registrations
[[File:Graph2.jpg|none|thumb|831x831px]]

Click on New application registration
[[File:Graph3.jpg|none|thumb|909x909px]]

Give the new App a name ex. "UMSGraph", Choose "Web app / API" in Application type, set "Sign-on URL" to "http://localhost". After setting Application Permission values click "Create"
[[File:Graph43.jpg|none|thumb|913x913px]]
You will return to previous screen, here click "your new app"
[[File:Grahp5.jpg|none|thumb|905x905px]]

Click "Certificates & secrets"

Click "New Client Secret"

Enter a "Description" and set "Expires" to the interval that suits your needs.

Click "Add"
[[File:Graph6.jpg|none|thumb|908x908px]]

Copy "Value ID" We will use this later

'''!!! ATTENTION !!! the key value will never be visible again so ensure to copy it.''' [[File:Graph7.png|none|thumb|790x790px]]

Copy the "VALUE Key into "UMS Configurator" field Client Secret

[[File:Tewxddf.png|frameless|566x566px]]

Copy the "Directory Tenant ID " into "UMS Configurator" Field Tenant ID

Copy the "Appplication Client ID " into "UMS Configurator" Field Client ID
[[File:Id.jpg|none|thumb|1120x1120px]]

Click "Api permissions"

Click "Add a permission"
[[File:Graph8.png|none|thumb|780x780px]]

==Setup UMS to use Application just Created==
In the UMS Configurator go to Modules->Office 365 and click "SharePoint organization settings"
[[File:UMSConfiguratorSharepointOrganizationSettings.png|none|thumb|600x600px]]
Choose your SharePoint organization setting and click "Edit..."
[[File:UMSConfiguratorSharepointOrganizationSettingsEdit.png|none|thumb|600x600px]]
Input your "Tenant Name" ex. "cortenso'''.onmicrosoft.com'''", paste the previously copied Application ID into "Client ID" field and paste previously copied KEY into "Client secret" and click "Ok"
[[File:UMSConfiguratorSharepointOrganizationSettingsEditWindow.png|none|thumb|600x600px]]
You are now all set to use the new MS Graph integration.

==Permissions overview==

===Microsoft Graph===
{| class="wikitable sortable"
|+Default permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Office 365
|Live_at_edu.exe
|-
|Group.ReadWrite.All
|Application
|Microsoft Graph
|Setting group attributes on Office 365 groups
|Live_at_edu.exe
|-
|GroupMember.ReadWrite.All
|Application
|Microsoft Graph
|Manage GroupMembers in Office 365
|Live_at_edu.exe
|-
|Directory.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Azure Active Directory
|Live_at_edu.exe
|-
|MailboxSettings.ReadWrite
|Application
|Microsoft Graph
|Used to set mailbox settings in Office 365.
Used to get/create categories
|Live_at_edu.exe
Skemabrikker.exe
|-
|Calendars.ReadWrite
|Application
|Microsoft Graph
|Used to allow UMS to sync calendar events to Office 365
|Skemabrikker.exe
|-
|Files.ReadWrite.All
|Application
|Microsoft Graph
|Used to provision OneDrive for users
|Live_at_edu.exe
|}
{| class="wikitable sortable"
|+Teams sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|EduRoster.ReadWrite.All
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|Member.Read.Hidden
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|TeamMember.ReadWrite.All
|Application
|Microsoft Graph
|Used to add or remove users from Team
|Live_at_edu.exe
|-
|TeamsTab.ReadWrite.All
|Application
|Microsoft Graph
|Used to create tabs in teams
|Live_at_edu.exe
|-
|TeamsAppInstallation.ReadForTeam.All
|Application
|Microsoft Graph
|Used to install app in teams
|Live_at_edu.exe
|-
|Team.Create
|Application
|Microsoft Graph
|Used to create Teams
|Live_at_edu.exe
|-
|Team.ReadBasic.All
|Application
|Microsoft Graph
|Used to read teams
|Live_at_edu.exe
|}

===SharePoint===
{| class="wikitable sortable"
|+SharePoint sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Sites.FullControl.All
|Application
|Microsoft Graph
|Have full control of all site collections
|Office365_SP_OneNote.exe
|-
|Sites.Manage.All
|Application
|Microsoft Graph
|Read and write items and lists in all site collections
|Office365_SP_OneNote.exe
|-
|Sites.ReadWrite.All
|Application
|Microsoft Graph
|Read and write items in all site collections
|Office365_SP_OneNote.exe
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Read and write user profiles
|Office365_SP_OneNote.exe
|}

===OneNote===
{| class="wikitable sortable"
|+OneNote sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Notes.ReadWrite.All
|Application
|Microsoft Graph
|
|Office365_SP_OneNote.exe
|} 
{| class="wikitable"
|+Password Sync
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Roles and Administrators
|Application
|Microsoft Graph
|Reset password for Users
|Password_Sync
|}
To Add Password administrator roles. Click '''Roles and administrator'''[[File:Passwordd.png|left|thumb|1167x1167px]]

Click Add Assignments and Search for graph user

Click Add.
[[File:Password1.png|left|1167x1167px|thumb]]

MSGraphPermissions

2021-10-25T11:37:20Z

Tod: /* Permissions overview */

'''MS graph permissions is a UMS backend requirement from version 8.5.203 which was released in June 2021"'''

'''MS graph permissions are required by these UMS modules (LiveAtEdu,OneNote, Sharepoint, Office 365 Timeblok and MS Teams)'''

 

==Creating App Registration==

Go to [http://portal.azure.com Azure Portal] and login with you admin account( '''the same UMS uses''').

'''!!! ATTENTION !!! use service account that UMS uses'''

When logged in go to Azure Active Directory:

 
[[File:Graph1.jpg|left|thumb|832x832px]]

Go to App registrations
[[File:Graph2.jpg|none|thumb|831x831px]]

Click on New application registration
[[File:Graph3.jpg|none|thumb|909x909px]]

Give the new App a name ex. "UMSGraph", Choose "Web app / API" in Application type, set "Sign-on URL" to "http://localhost". After setting Application Permission values click "Create"
[[File:Graph43.jpg|none|thumb|913x913px]]
You will return to previous screen, here click "your new app"
[[File:Grahp5.jpg|none|thumb|905x905px]]

Click "Certificates & secrets"

Click "New Client Secret"

Enter a "Description" and set "Expires" to the interval that suits your needs.

Click "Add"
[[File:Graph6.jpg|none|thumb|908x908px]]

Copy "Value ID" We will use this later

'''!!! ATTENTION !!! the key value will never be visible again so ensure to copy it.''' [[File:Graph7.png|none|thumb|790x790px]]

Copy the "VALUE Key into "UMS Configurator" field Client Secret

[[File:Tewxddf.png|frameless|566x566px]]

Copy the "Directory Tenant ID " into "UMS Configurator" Field Tenant ID

Copy the "Appplication Client ID " into "UMS Configurator" Field Client ID
[[File:Id.jpg|none|thumb|1120x1120px]]

Click "Api permissions"

Click "Add a permission"
[[File:Graph8.png|none|thumb|780x780px]]

==Setup UMS to use Application just Created==
In the UMS Configurator go to Modules->Office 365 and click "SharePoint organization settings"
[[File:UMSConfiguratorSharepointOrganizationSettings.png|none|thumb|600x600px]]
Choose your SharePoint organization setting and click "Edit..."
[[File:UMSConfiguratorSharepointOrganizationSettingsEdit.png|none|thumb|600x600px]]
Input your "Tenant Name" ex. "cortenso'''.onmicrosoft.com'''", paste the previously copied Application ID into "Client ID" field and paste previously copied KEY into "Client secret" and click "Ok"
[[File:UMSConfiguratorSharepointOrganizationSettingsEditWindow.png|none|thumb|600x600px]]
You are now all set to use the new MS Graph integration.

==Permissions overview==

===Microsoft Graph===
{| class="wikitable sortable"
|+Default permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Office 365
|Live_at_edu.exe
|-
|Group.ReadWrite.All
|Application
|Microsoft Graph
|Setting group attributes on Office 365 groups
|Live_at_edu.exe
|-
|GroupMember.ReadWrite.All
|Application
|Microsoft Graph
|Manage GroupMembers in Office 365
|Live_at_edu.exe
|-
|Directory.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Azure Active Directory
|Live_at_edu.exe
|-
|MailboxSettings.ReadWrite
|Application
|Microsoft Graph
|Used to set mailbox settings in Office 365.
Used to get/create categories
|Live_at_edu.exe
Skemabrikker.exe
|-
|Calendars.ReadWrite
|Application
|Microsoft Graph
|Used to allow UMS to sync calendar events to Office 365
|Skemabrikker.exe
|-
|Files.ReadWrite.All
|Application
|Microsoft Graph
|Used to provision OneDrive for users
|Live_at_edu.exe
|}
{| class="wikitable sortable"
|+Teams sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|EduRoster.ReadWrite.All
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|Member.Read.Hidden
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|TeamMember.ReadWrite.All
|Application
|Microsoft Graph
|Used to add or remove users from Team
|Live_at_edu.exe
|-
|TeamsTab.ReadWrite.All
|Application
|Microsoft Graph
|Used to create tabs in teams
|Live_at_edu.exe
|-
|TeamsAppInstallation.ReadForTeam.All
|Application
|Microsoft Graph
|Used to install app in teams
|Live_at_edu.exe
|-
|Team.Create
|Application
|Microsoft Graph
|Used to create Teams
|Live_at_edu.exe
|-
|Team.ReadBasic.All
|Application
|Microsoft Graph
|Used to read teams
|Live_at_edu.exe
|}

===SharePoint===
{| class="wikitable sortable"
|+SharePoint sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Sites.FullControl.All
|Application
|Microsoft Graph
|Have full control of all site collections
|Office365_SP_OneNote.exe
|-
|Sites.Manage.All
|Application
|Microsoft Graph
|Read and write items and lists in all site collections
|Office365_SP_OneNote.exe
|-
|Sites.ReadWrite.All
|Application
|Microsoft Graph
|Read and write items in all site collections
|Office365_SP_OneNote.exe
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Read and write user profiles
|Office365_SP_OneNote.exe
|}

===OneNote===
{| class="wikitable sortable"
|+OneNote sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Notes.ReadWrite.All
|Application
|Microsoft Graph
|
|Office365_SP_OneNote.exe
|} 
{| class="wikitable"
|+Password Sync
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Roles and Administrators
|Application
|Microsoft Graph
|Reset password for Users
|Password_Sync
|}
To Add Password administrator roles. Click '''Roles and administrator'''[[File:Passwordd.png|left|thumb|1167x1167px]]

Click Add Assignments and Search for graph user

Click Add.
[[File:Password1.png|left|942x942px|frame]]

MSGraphPermissions

2021-10-25T11:36:27Z

Tod: /* Permissions overview */

'''MS graph permissions is a UMS backend requirement from version 8.5.203 which was released in June 2021"'''

'''MS graph permissions are required by these UMS modules (LiveAtEdu,OneNote, Sharepoint, Office 365 Timeblok and MS Teams)'''

 

==Creating App Registration==

Go to [http://portal.azure.com Azure Portal] and login with you admin account( '''the same UMS uses''').

'''!!! ATTENTION !!! use service account that UMS uses'''

When logged in go to Azure Active Directory:

 
[[File:Graph1.jpg|left|thumb|832x832px]]

Go to App registrations
[[File:Graph2.jpg|none|thumb|831x831px]]

Click on New application registration
[[File:Graph3.jpg|none|thumb|909x909px]]

Give the new App a name ex. "UMSGraph", Choose "Web app / API" in Application type, set "Sign-on URL" to "http://localhost". After setting Application Permission values click "Create"
[[File:Graph43.jpg|none|thumb|913x913px]]
You will return to previous screen, here click "your new app"
[[File:Grahp5.jpg|none|thumb|905x905px]]

Click "Certificates & secrets"

Click "New Client Secret"

Enter a "Description" and set "Expires" to the interval that suits your needs.

Click "Add"
[[File:Graph6.jpg|none|thumb|908x908px]]

Copy "Value ID" We will use this later

'''!!! ATTENTION !!! the key value will never be visible again so ensure to copy it.''' [[File:Graph7.png|none|thumb|790x790px]]

Copy the "VALUE Key into "UMS Configurator" field Client Secret

[[File:Tewxddf.png|frameless|566x566px]]

Copy the "Directory Tenant ID " into "UMS Configurator" Field Tenant ID

Copy the "Appplication Client ID " into "UMS Configurator" Field Client ID
[[File:Id.jpg|none|thumb|1120x1120px]]

Click "Api permissions"

Click "Add a permission"
[[File:Graph8.png|none|thumb|780x780px]]

==Setup UMS to use Application just Created==
In the UMS Configurator go to Modules->Office 365 and click "SharePoint organization settings"
[[File:UMSConfiguratorSharepointOrganizationSettings.png|none|thumb|600x600px]]
Choose your SharePoint organization setting and click "Edit..."
[[File:UMSConfiguratorSharepointOrganizationSettingsEdit.png|none|thumb|600x600px]]
Input your "Tenant Name" ex. "cortenso'''.onmicrosoft.com'''", paste the previously copied Application ID into "Client ID" field and paste previously copied KEY into "Client secret" and click "Ok"
[[File:UMSConfiguratorSharepointOrganizationSettingsEditWindow.png|none|thumb|600x600px]]
You are now all set to use the new MS Graph integration.

==Permissions overview==

===Microsoft Graph===
{| class="wikitable sortable"
|+Default permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Office 365
|Live_at_edu.exe
|-
|Group.ReadWrite.All
|Application
|Microsoft Graph
|Setting group attributes on Office 365 groups
|Live_at_edu.exe
|-
|GroupMember.ReadWrite.All
|Application
|Microsoft Graph
|Manage GroupMembers in Office 365
|Live_at_edu.exe
|-
|Directory.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Azure Active Directory
|Live_at_edu.exe
|-
|MailboxSettings.ReadWrite
|Application
|Microsoft Graph
|Used to set mailbox settings in Office 365.
Used to get/create categories
|Live_at_edu.exe
Skemabrikker.exe
|-
|Calendars.ReadWrite
|Application
|Microsoft Graph
|Used to allow UMS to sync calendar events to Office 365
|Skemabrikker.exe
|-
|Files.ReadWrite.All
|Application
|Microsoft Graph
|Used to provision OneDrive for users
|Live_at_edu.exe
|}
{| class="wikitable sortable"
|+Teams sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|EduRoster.ReadWrite.All
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|Member.Read.Hidden
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|TeamMember.ReadWrite.All
|Application
|Microsoft Graph
|Used to add or remove users from Team
|Live_at_edu.exe
|-
|TeamsTab.ReadWrite.All
|Application
|Microsoft Graph
|Used to create tabs in teams
|Live_at_edu.exe
|-
|TeamsAppInstallation.ReadForTeam.All
|Application
|Microsoft Graph
|Used to install app in teams
|Live_at_edu.exe
|-
|Team.Create
|Application
|Microsoft Graph
|Used to create Teams
|Live_at_edu.exe
|-
|Team.ReadBasic.All
|Application
|Microsoft Graph
|Used to read teams
|Live_at_edu.exe
|}

===SharePoint===
{| class="wikitable sortable"
|+SharePoint sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Sites.FullControl.All
|Application
|Microsoft Graph
|Have full control of all site collections
|Office365_SP_OneNote.exe
|-
|Sites.Manage.All
|Application
|Microsoft Graph
|Read and write items and lists in all site collections
|Office365_SP_OneNote.exe
|-
|Sites.ReadWrite.All
|Application
|Microsoft Graph
|Read and write items in all site collections
|Office365_SP_OneNote.exe
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Read and write user profiles
|Office365_SP_OneNote.exe
|}

===OneNote===
{| class="wikitable sortable"
|+OneNote sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Notes.ReadWrite.All
|Application
|Microsoft Graph
|
|Office365_SP_OneNote.exe
|} 
{| class="wikitable"
|+Password Sync
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Roles and Administrators
|Application
|Microsoft Graph
|Reset password for Users
|Password_Sync
|}
To Add Password administrator roles. Click '''Roles and administrator'''[[File:Passwordd.png|left|thumb|1167x1167px]]

Click Add Assignments and Search for graph user

Click Add.
[[File:Password1.png|left|thumb|1161x1161px]]

MSGraphPermissions

2021-10-25T11:35:18Z

Tod: /* Permissions overview */

'''MS graph permissions is a UMS backend requirement from version 8.5.203 which was released in June 2021"'''

'''MS graph permissions are required by these UMS modules (LiveAtEdu,OneNote, Sharepoint, Office 365 Timeblok and MS Teams)'''

 

==Creating App Registration==

Go to [http://portal.azure.com Azure Portal] and login with you admin account( '''the same UMS uses''').

'''!!! ATTENTION !!! use service account that UMS uses'''

When logged in go to Azure Active Directory:

 
[[File:Graph1.jpg|left|thumb|832x832px]]

Go to App registrations
[[File:Graph2.jpg|none|thumb|831x831px]]

Click on New application registration
[[File:Graph3.jpg|none|thumb|909x909px]]

Give the new App a name ex. "UMSGraph", Choose "Web app / API" in Application type, set "Sign-on URL" to "http://localhost". After setting Application Permission values click "Create"
[[File:Graph43.jpg|none|thumb|913x913px]]
You will return to previous screen, here click "your new app"
[[File:Grahp5.jpg|none|thumb|905x905px]]

Click "Certificates & secrets"

Click "New Client Secret"

Enter a "Description" and set "Expires" to the interval that suits your needs.

Click "Add"
[[File:Graph6.jpg|none|thumb|908x908px]]

Copy "Value ID" We will use this later

'''!!! ATTENTION !!! the key value will never be visible again so ensure to copy it.''' [[File:Graph7.png|none|thumb|790x790px]]

Copy the "VALUE Key into "UMS Configurator" field Client Secret

[[File:Tewxddf.png|frameless|566x566px]]

Copy the "Directory Tenant ID " into "UMS Configurator" Field Tenant ID

Copy the "Appplication Client ID " into "UMS Configurator" Field Client ID
[[File:Id.jpg|none|thumb|1120x1120px]]

Click "Api permissions"

Click "Add a permission"
[[File:Graph8.png|none|thumb|780x780px]]

==Setup UMS to use Application just Created==
In the UMS Configurator go to Modules->Office 365 and click "SharePoint organization settings"
[[File:UMSConfiguratorSharepointOrganizationSettings.png|none|thumb|600x600px]]
Choose your SharePoint organization setting and click "Edit..."
[[File:UMSConfiguratorSharepointOrganizationSettingsEdit.png|none|thumb|600x600px]]
Input your "Tenant Name" ex. "cortenso'''.onmicrosoft.com'''", paste the previously copied Application ID into "Client ID" field and paste previously copied KEY into "Client secret" and click "Ok"
[[File:UMSConfiguratorSharepointOrganizationSettingsEditWindow.png|none|thumb|600x600px]]
You are now all set to use the new MS Graph integration.

==Permissions overview==

===Microsoft Graph===
{| class="wikitable sortable"
|+Default permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Office 365
|Live_at_edu.exe
|-
|Group.ReadWrite.All
|Application
|Microsoft Graph
|Setting group attributes on Office 365 groups
|Live_at_edu.exe
|-
|GroupMember.ReadWrite.All
|Application
|Microsoft Graph
|Manage GroupMembers in Office 365
|Live_at_edu.exe
|-
|Directory.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Azure Active Directory
|Live_at_edu.exe
|-
|MailboxSettings.ReadWrite
|Application
|Microsoft Graph
|Used to set mailbox settings in Office 365.
Used to get/create categories
|Live_at_edu.exe
Skemabrikker.exe
|-
|Calendars.ReadWrite
|Application
|Microsoft Graph
|Used to allow UMS to sync calendar events to Office 365
|Skemabrikker.exe
|-
|Files.ReadWrite.All
|Application
|Microsoft Graph
|Used to provision OneDrive for users
|Live_at_edu.exe
|}
{| class="wikitable sortable"
|+Teams sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|EduRoster.ReadWrite.All
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|Member.Read.Hidden
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|TeamMember.ReadWrite.All
|Application
|Microsoft Graph
|Used to add or remove users from Team
|Live_at_edu.exe
|-
|TeamsTab.ReadWrite.All
|Application
|Microsoft Graph
|Used to create tabs in teams
|Live_at_edu.exe
|-
|TeamsAppInstallation.ReadForTeam.All
|Application
|Microsoft Graph
|Used to install app in teams
|Live_at_edu.exe
|-
|Team.Create
|Application
|Microsoft Graph
|Used to create Teams
|Live_at_edu.exe
|-
|Team.ReadBasic.All
|Application
|Microsoft Graph
|Used to read teams
|Live_at_edu.exe
|}

===SharePoint===
{| class="wikitable sortable"
|+SharePoint sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Sites.FullControl.All
|Application
|Microsoft Graph
|Have full control of all site collections
|Office365_SP_OneNote.exe
|-
|Sites.Manage.All
|Application
|Microsoft Graph
|Read and write items and lists in all site collections
|Office365_SP_OneNote.exe
|-
|Sites.ReadWrite.All
|Application
|Microsoft Graph
|Read and write items in all site collections
|Office365_SP_OneNote.exe
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Read and write user profiles
|Office365_SP_OneNote.exe
|}

===OneNote===
{| class="wikitable sortable"
|+OneNote sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Notes.ReadWrite.All
|Application
|Microsoft Graph
|
|Office365_SP_OneNote.exe
|} 
{| class="wikitable"
|+Password Sync
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Roles and Administrators
|Application
|Microsoft Graph
|Reset password for Users
|Password_Sync
|}
To Add Password administrator roles. Click '''Roles and administrator'''[[File:Passwordd.png|left|thumb|1167x1167px]]

Click Add Assignments and Search for graph user

Click Add.
[[File:Password1.png|left|thumb|1161x1161px]]

File:Password1.png

2021-10-25T11:30:24Z

Tod:

MSGraphPermissions

2021-10-25T11:27:19Z

Tod: /* Permissions overview */

'''MS graph permissions is a UMS backend requirement from version 8.5.203 which was released in June 2021"'''

'''MS graph permissions are required by these UMS modules (LiveAtEdu,OneNote, Sharepoint, Office 365 Timeblok and MS Teams)'''

 

==Creating App Registration==

Go to [http://portal.azure.com Azure Portal] and login with you admin account( '''the same UMS uses''').

'''!!! ATTENTION !!! use service account that UMS uses'''

When logged in go to Azure Active Directory:

 
[[File:Graph1.jpg|left|thumb|832x832px]]

Go to App registrations
[[File:Graph2.jpg|none|thumb|831x831px]]

Click on New application registration
[[File:Graph3.jpg|none|thumb|909x909px]]

Give the new App a name ex. "UMSGraph", Choose "Web app / API" in Application type, set "Sign-on URL" to "http://localhost". After setting Application Permission values click "Create"
[[File:Graph43.jpg|none|thumb|913x913px]]
You will return to previous screen, here click "your new app"
[[File:Grahp5.jpg|none|thumb|905x905px]]

Click "Certificates & secrets"

Click "New Client Secret"

Enter a "Description" and set "Expires" to the interval that suits your needs.

Click "Add"
[[File:Graph6.jpg|none|thumb|908x908px]]

Copy "Value ID" We will use this later

'''!!! ATTENTION !!! the key value will never be visible again so ensure to copy it.''' [[File:Graph7.png|none|thumb|790x790px]]

Copy the "VALUE Key into "UMS Configurator" field Client Secret

[[File:Tewxddf.png|frameless|566x566px]]

Copy the "Directory Tenant ID " into "UMS Configurator" Field Tenant ID

Copy the "Appplication Client ID " into "UMS Configurator" Field Client ID
[[File:Id.jpg|none|thumb|1120x1120px]]

Click "Api permissions"

Click "Add a permission"
[[File:Graph8.png|none|thumb|780x780px]]

==Setup UMS to use Application just Created==
In the UMS Configurator go to Modules->Office 365 and click "SharePoint organization settings"
[[File:UMSConfiguratorSharepointOrganizationSettings.png|none|thumb|600x600px]]
Choose your SharePoint organization setting and click "Edit..."
[[File:UMSConfiguratorSharepointOrganizationSettingsEdit.png|none|thumb|600x600px]]
Input your "Tenant Name" ex. "cortenso'''.onmicrosoft.com'''", paste the previously copied Application ID into "Client ID" field and paste previously copied KEY into "Client secret" and click "Ok"
[[File:UMSConfiguratorSharepointOrganizationSettingsEditWindow.png|none|thumb|600x600px]]
You are now all set to use the new MS Graph integration.

==Permissions overview==

===Microsoft Graph===
{| class="wikitable sortable"
|+Default permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Office 365
|Live_at_edu.exe
|-
|Group.ReadWrite.All
|Application
|Microsoft Graph
|Setting group attributes on Office 365 groups
|Live_at_edu.exe
|-
|GroupMember.ReadWrite.All
|Application
|Microsoft Graph
|Manage GroupMembers in Office 365
|Live_at_edu.exe
|-
|Directory.ReadWrite.All
|Application
|Microsoft Graph
|Setting attributes on the user in Azure Active Directory
|Live_at_edu.exe
|-
|MailboxSettings.ReadWrite
|Application
|Microsoft Graph
|Used to set mailbox settings in Office 365.
Used to get/create categories
|Live_at_edu.exe
Skemabrikker.exe
|-
|Calendars.ReadWrite
|Application
|Microsoft Graph
|Used to allow UMS to sync calendar events to Office 365
|Skemabrikker.exe
|-
|Files.ReadWrite.All
|Application
|Microsoft Graph
|Used to provision OneDrive for users
|Live_at_edu.exe
|}
{| class="wikitable sortable"
|+Teams sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|EduRoster.ReadWrite.All
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|Member.Read.Hidden
|Application
|Microsoft Graph
|Allows the UMS to handle users on roster
|Live_at_edu.exe
|-
|TeamMember.ReadWrite.All
|Application
|Microsoft Graph
|Used to add or remove users from Team
|Live_at_edu.exe
|-
|TeamsTab.ReadWrite.All
|Application
|Microsoft Graph
|Used to create tabs in teams
|Live_at_edu.exe
|-
|TeamsAppInstallation.ReadForTeam.All
|Application
|Microsoft Graph
|Used to install app in teams
|Live_at_edu.exe
|-
|Team.Create
|Application
|Microsoft Graph
|Used to create Teams
|Live_at_edu.exe
|-
|Team.ReadBasic.All
|Application
|Microsoft Graph
|Used to read teams
|Live_at_edu.exe
|}

===SharePoint===
{| class="wikitable sortable"
|+SharePoint sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Sites.FullControl.All
|Application
|Microsoft Graph
|Have full control of all site collections
|Office365_SP_OneNote.exe
|-
|Sites.Manage.All
|Application
|Microsoft Graph
|Read and write items and lists in all site collections
|Office365_SP_OneNote.exe
|-
|Sites.ReadWrite.All
|Application
|Microsoft Graph
|Read and write items in all site collections
|Office365_SP_OneNote.exe
|-
|User.ReadWrite.All
|Application
|Microsoft Graph
|Read and write user profiles
|Office365_SP_OneNote.exe
|}

===OneNote===
{| class="wikitable sortable"
|+OneNote sync permissions
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Notes.ReadWrite.All
|Application
|Microsoft Graph
|
|Office365_SP_OneNote.exe
|} 
{| class="wikitable"
|+Password Sync
!Permission name
!Permission type
!API
!Used for
!Used by
|-
|Roles and Administrators
|Application
|Microsoft Graph
|Reset password for Users
|Password_Sync
|}
To Add Password administrator roles. Click Roles and administrators
[[File:Passwordd.png|left|thumb|1167x1167px]]

File:Passwordd.png

2021-10-25T11:26:32Z

Tod:

sdf

File:Password.png

2021-10-25T11:24:51Z

Tod:

G Suite

2021-10-22T10:07:58Z

Tod: /* FAQ */

UMS integrates to G Suite with the module G Suite Sync which:

*Creates users and their e-mail accounts
*Maintains users in G Suite, i.e. data changes are synchronised to UMS
*Synchronises passwords
*Deletes users who no longer attend the school

Integration to G Suite quickly becomes profitable. With UMS, the school saves resources by automating many manual tasks

*Avoid having to program scripts to synchronise the data
*Users are automatically created with data from your student administration system
*It reduces the workload for the IT-department

==Prerequisites==

===Supported administrative systems===

===Module requirements===
[[UMS]]

===Additional functionality===

===Testing after setup===

===What to have ready===

===Is any physical item required===

===Should third party be contacted===

==Installation==
'''G Suite'''
[[File:Googleappsadminsettings.png|none|thumb|577x577px]]

Enter Admin credentials for a service account with administrator privileges to access Office 365.

''Users''

'''“Mail Alias”'''

Choose what to use as the users mail address (login).

'''“Disable users”'''

When marked the users will be disabled when they are no longer attending classes.

'''“Delete users”'''

Choose if users are to be deleted after grace period has ended.

'''“Forward mail to on premise mail server”'''

This will forward the users Office 365 mail to the primary mail address from AD (If user does not have a proxy address it will read it from the mail attribute)

'''“Keep inactive before deleting x days”'''

Specify a grace period where users are disabled.

''Distribution lists''

'''“Maintain lists”'''

Mark this to create distribution groups in Office 365. The groups will be created, updated and deleted if this is specified.

'''“Delete lists”'''

Mark this to delete distributions groups when they are no longer active in the administrative system. Check the data export manuals too when this happens

'''“Delete unused lists after x days”'''

Specify in days how long the distribution groups are to be kept alive in Office 365 before deletion.

'''“Only senders inside my organization”'''

With this marked only users in the domain will be able to send to distribution groups created by UMS.

''Template security groups''

'''“Maintain”'''

This will create the security group entered in the field “template security group” in the destination node in the template settings.

''Timetable''

'''“Maintain”'''

Mark this to create timetable blocks in Google Apps. They will be created, updated and deleted.

'''“Delete old”'''

Mark this to delete old timetable blocks from calendars.

===''Site''===
[[File:Googleappssite.png|none|thumb|720x720px]]

'''“Automation type”'''

Full: Means that site maintenance will be fully automated.

'''“Remove learner method”'''

“Deleted in AD”

Users will be removed from site when they are not active in UMS anymore

“Finished on activity/course”

Users will be removed when they have finished with the course.

'''“Delete sites”'''

“Auto delete”

Sites will be delete when the last student has left the site

“Manual Delete”

Sites will not be deleted by UMS. This has to be done by an administrator

'''“Send mail to teacher(s)”'''

Send mail notification to teachers when they are attached to a site.

'''“Create x days before”'''

Choose how many days before start that the sites are to be created.

'''“Delete x days after end”'''

Choose how many days after end that the sites are to be deleted.

'''“Teacher rights on sites”'''

Rights the teacher will have on the site when attached.

'''“Learner rights on sites”'''

Rights the student/learner will have on the site when attached.

==='''SQL Groups'''===
Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''“Activity Sites”'''

'''“Do not create”'''

It will not create any sites based on activities.

'''“LMS has to be checked”'''

The field Aktivitet_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all sites.

'''Title'''

Title of the site. Changing this after a site has been created will cause it to be updated.

'''Description'''

Description of the site. Changing this after a site has been created will cause it to be updated.

==='''Search filter and criteria'''===
This will enable you to concatenate sites that would have been created as to or more sites to be created as one site.
[[File:Googleappssearchfilters.png|none|thumb|401x401px]]

'''“Remarks”'''

This is just for description purposes.

'''“Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the site with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

 '''“Length”'''

How many characters will be removed from the string.

“'''Add activity short description to node ID'''“

This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

===='''Examples'''====
If you have three activities named English1, English2, English3 and you only want one SharePoint site.

Set the settings as shown below
[[File:Googleappsseachfilters2.png|none|thumb|413x413px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

'''“Course Sites”'''

Course URL’s will always be created as “activity_course”.

'''“Do not create”'''

It will not create any sites based on courses.

'''“LMS has to be checked”'''

The field Skolefag_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all sites.

'''Title'''

Title of the site. Changing this after a site has been created will cause it to be updated.

'''Description'''

Description of the site. Changing this after a site has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate sites that would have been created as two or more sites to be created as one site.
[[File:Googleappsseachfilters3.png|none|thumb|427x427px]]

'''“Remarks”'''

This is just for description purposes.

'''“Course Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the site with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

'''“Activity Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the site with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

==='''<big>Drive</big>'''===
[[File:Googleappsdrive.png|none|thumb|720x720px]]

'''“Automation type”'''

'''<big>Full</big>''': Means that drive maintenance will be fully automated.

'''<big>“Remove learner method”</big>'''

'''“Deleted in AD”'''

Users will be removed from drive when they are not active in UMS anymore

'''“Finished on activity/course”'''

Users will be removed when they have finished with the course.

'''<big>“Delete drives”</big>'''

'''“Auto delete”'''

Drives will be delete when the last student has left the drive

'''“Manual Delete”'''

Drives will not be deleted by UMS. This has to be done by an administrator

'''“Send mail to teacher(s)”'''

Send mail notification to teachers when they are attached to a drive.

'''“Create x days before”'''

Choose how many days before start that the drives are to be created.

'''“Delete x days after end”'''

Choose how many days after end that the drives are to be deleted.

'''“Teacher rights on drives”'''

Rights the teacher will have on the drive when attached.

'''“Learner rights on drives”'''

Rights the student/learner will have on the drive when attached.

'''“SQL Groups”'''

Members of these groups will be attached to all drives created with this setting as teachers
[[File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''“Activity Drives”'''

'''“Do not create”'''

It will not create any sites based on activities.

'''“LMS has to be checked”'''

The field Aktivitet_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all drives.

'''Description'''

Description of the drive. Changing this after a drive has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate drives that would have been created as to or more drives to be created as one drive.
[[File:Googleappssearchfilters.png|none|thumb|401x401px]]

'''“Remarks”'''

This is just for description purposes.

'''“Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the drive with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

 '''“Length”'''

How many characters will be removed from the string.

“'''Add activity short description to node ID'''“

This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

'''Examples'''

If you have three activities named English1, English2, English3 and you only want one SharePoint drive.

Set the settings as shown below
[[File:Googleappsseachfilters2.png|none|thumb|413x413px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

'''“Course Drives”'''

Course URL’s will always be created as “activity_course”.

'''“Do not create”'''

It will not create any drives based on courses.

'''“LMS has to be checked”'''

The field Skolefag_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create drives based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all drives.

'''Description'''

Description of the drive. Changing this after a drive has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate drives that would have been created as two or more drives to be created as one drive.

[[File:Googleappsseachfilters3.png|none|thumb|427x427px]]
'''“Remarks”'''

This is just for description purposes.

'''“Course Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the drive with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

'''“Activity Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the drive with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

=== ''Classroom'' ===
There can only be a maximum of 990 classrooms in total in one organization.

'''Google designed features (Not UMS)'''

If a teacher leaves the school, the material that he has put into classrooms will be deleted as well.

If a user has too many classrooms it will be very slow for this user.
[[File:Googleappsclassroomsettings.png|none|thumb|720x720px]]

'''“Automation type”'''

Full: Means that classroom maintenance will be fully automated.

'''“Remove learner method”'''

“Deleted in AD”

Users will be removed from classroom when they are not active in UMS anymore

“Finished on activity/course”

Users will be removed when they have finished with the course.

'''“Delete classrooms”'''

“Auto delete”

Classrooms will be delete when the last student has left the classroom

“Manual Delete”

Classrooms will not be deleted by UMS. This has to be done by an administrator

'''“Send mail to teacher(s)”'''

Send mail notification to teachers when they are attached to a classroom.

'''“Create x days before”'''

Choose how many days before start that the classroom s are to be created.

'''“Delete x days after end”'''

Choose how many days after end that the classroom s are to be deleted.

'''“SQL Groups”'''

Members of these groups will be attached to all classrooms created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''“Activity Classroomss”'''

'''“Do not create”'''

It will not create any sites based on activities.

'''“LMS has to be checked”'''

The field Aktivitet_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all classrooms.

'''Description'''

Description of the classroom. Changing this after a classroom has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate classrooms that would have been created as to or more classrooms to be created as one classroom.
[[File:Googleappssearchfilters.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssearchfilters.png|none|thumb|401x401px]]

'''“Remarks”'''

This is just for description purposes.

'''“Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the classroom with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

 '''“Length”'''

How many characters will be removed from the string.

“'''Add activity short description to node ID'''“

This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

'''Examples'''

If you have three activities named English1, English2, English3 and you only want one SharePoint classroom.

Set the settings as shown below
[[File:Googleappsseachfilters2.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsseachfilters2.png|none|thumb|413x413px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

'''“Course Classrooms”'''

Course URL’s will always be created as “activity course”.

'''“Do not create”'''

It will not create any classrooms based on courses.

'''“LMS has to be checked”'''

The field Skolefag_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create classrooms based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all classrooms.

'''Description'''

Description of the classroom. Changing this after a classroom has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate classrooms that would have been created as two or more classrooms to be created as one classroom.
[[File:Googleappsseachfilters3.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsseachfilters3.png|none|thumb|427x427px]]

'''“Remarks”'''

This is just for description purposes.

'''“Course Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the classroom with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

'''“Activity Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the classroom with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

=== '''Organization Settings''' ===
When creating Google API refer to this lInk

[[Google app API|http://wiki.inlogic.dk/index.php/Google_app_API]] [[File:Googleappsorganizationsettings.png|none|thumb|378x378px]]

'''“Description”'''

Add a description to be able to identify the account.

'''“Admin login”'''

Mail address of an administrative user

'''“Password”'''

Password for the admin login specified

'''“Domain”'''

The google domain that is used.

'''“Client ID”, “Client Secret”'''

This is obtained when following the instructions in the PDF document

'''“Refresh token”'''

This will be generated the first time google synchronization is started. If this is reset UMS will asked for it again when the next synchronization is run.

'''“Timetable Users”'''

This can be used when creating timetable blocks. Look in timetable documentation for this feature.

'''Template Settings'''

This is where you specify which templates are synchronized with Google and how.
[[File:Googleappstemplateeditor.png|none|thumb|687x687px]]

'''“Setting”'''

This is the setting described above

'''“Organization setting”'''

Specify where the users are created
[[File:Googleappsaosettings.png|none|thumb|422x422px]]

'''Path'''

This is where all users is placed

'''Use this path when below 13 years of age'''

This is where users that are under 13 years is placed. If this is not specified everyone will be placed under the path setting. (This is helpful when it comes to Google+)

'''OU Description'''

The description that is set on the OU when it is created.

'''Site settings'''

Settings used when creating sites from this template
[[File:Googleappssitesettings.png|none|thumb|422x422px]]

'''Site category'''

A list of categories added to the site when creating it separated with a ;

A category called UMS will be added aswell. (This cannot be change)

'''“SQL Groups”'''

Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''Drive settings'''

Settings used when creating drives from this template
[[File:Googleappsdrivesettings.png|none|thumb|429x429px]]

'''“Path”'''

The path where the drives are created

'''Create user specific subfolder'''

Create a folder for each student that is attached to each drive

'''Suffix'''

A text string that is appended to the folder name

'''Create subfolder (Teacher Read/Write - Student Read)'''

A folder where teachers can upload data that students can only read

'''Suffix'''

A text string that is appended to the folder name

'''Create subfolder (Teacher Read/Write - Student Read/Write)'''

A folder where teachers and students can share data both with read/write

'''Suffix'''

A text string that is appended to the folder name

'''Example'''
[[File:Googleappsstudents.png|none|thumb|279x279px]]

'''“SQL Groups”'''

Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''Classroom settings'''

Settings used when creating classrooms from this template
[[File:Googleappsclassroomsettings2.png|none|thumb]]

'''“SQL Groups”'''

Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

==Installation G Suite Sync==
Steps to make UMS sync work with G Suite.

Log on <nowiki>https://console.developers.google.com</nowiki> with your Google Admin account.

Create a project
[[File:Googlesyncproject2.png|none|thumb|594x594px]]

When created choose project and click the newly created project.

Choose “Enable and manage APIs”. Enable these APIs
[[File:Googlesyncenableapi.png|none|thumb|463x463px]]

Click credentials

And choose “OAuth client ID”

Choose settings as show on below image. Name can be changed.
[[File:Googlesyncoauth.png|none|thumb|499x499px]]

Then choose “Create”

Which creates an OAuth 2.0 client ID

Enter Client ID and Client Secret into UMS
[[File:Googlesyncoauth2.png|none|thumb|513x513px]]

Go back to “Overview” and choose “Enabled APIs”

Click on each API you added and choose Quota
[[File:Googlesyncenableapi2.png|none|thumb|517x517px]]

Set the number as high as you can without “apply for higher quota”
[[File:Googlesyncapplyhighquota.png|none|thumb|439x439px]]

And you are done with this site.

Now Log on https://admin.google.com with your Google Admin account

Find “Other Google Services” - can be located under “More Controls” or under APPS aplaced at page bottom.

Click “add services” upper right corner

Then click “Add it now” on “Groups for Business”
[[File:Googlesyncservices.png|none|thumb|495x495px]]

Back to start and choose “Security”

Choose “API reference” and check “Enable API access”
[[File:Googlesyncsecurity.png|none|thumb|439x439px]]

Go to the UMS “usermanagement folder” and run “GoogleApps_Sync.exe” manually.

Login to Google using credentials from Google Organization settings.

When logged in succesfully, “Accept” the following
[[File:Googlesyncaccept.png|none|thumb|578x578px]]
If you get a “This page can’t be displayed”
[[File:Googlesyncpagenotfound.png|none|thumb|315x315px]]

Do not be alarmed. The job has been activated and you can check your GoogleApps_Sync.log to confirm that the job has completed running.

==Technical settings==

==FAQ==
Why do I not get the drive/site created?

1. Activity

a. Is there a user on the activity with a primary template that has an office 365 setting attached

b. Is the flag Aktivitet_LMS = True

2. Course

a. Is there a user on the course with a primary template that has an office 365 setting attached

b. Is the flag Skolefag_LMS = True

=== CreateGroups Error ===
''Get root folders [Inlogic_Alle 1e-elever]''

''(CreateGroups) Error Google.Apis.Requests.RequestError''

''Not Authorized to access this resource/api [403] Errors [ Message[Not Authorized to access this resource/api] Location[ - ] Reason[forbidden] Domain[global]''

''Get root folders''

''(CreateGroups) Error Google.Apis.Requests.RequestError''

''Not Authorized to access this resource/api [403]''

''Errors [ Message[Not Authorized to access this resource/api] Location[ - ] Reason[forbidden] Domain[global]''

'''The reason why that error occurs is that the mail adr. is used by another group or user. Test by manually creating a group in google admin portal. The image below shows the error.'''
[[File:Fgd.png|left|thumb|935x935px]]

File:Fgd.png

2021-10-22T10:07:15Z

Tod:

fdf

STIL UNI Login

2021-10-01T08:36:39Z

Tod: /* FAQ */

UNI•Login er et digitalt ID for børn, unge og ansatte på institutioner, som giver adgang til nationale tjenester og en lang række pædagogiske services og online læremidler. UNI•Login kan bruges både til gratis webtjenester og til webtjenester, som institutionerne kan abonnere på. Institutionerne benytter ofte UNI•Login til adgangsstyring på lokalnet, intranet, trådløse net, skytjenester og andre webløsninger, hvor brugerne skal sikres nem adgang. UNI-Login leveres af STIL, Styrelsen for IT og Læring, der tidligere hed Uni-C.

==Prerequisites==

===Supported administrative systems===
Alle

===Module requirements===
[[UMS]]

===Should third party be contacted===
Kræver en adgang til WS17 ved STIL som skal bestilles.

https://viden.stil.dk/display/STILVIDENOFFENTLIG/Tilslutning#expand-Sdanopretterduentilslutningsaftale

OLD LINK (http://www.stil.dk/It-og-administration/Brugere-og-adgangsstyring/Udbyder-UNILogin/UNI-Login-Eksport)

==UNI-C Dataprovider==
Sender UNI-Login’s til STIL

For at sende disse data til STIL skal man aktiverer servicen '''UNILogin Upload'''. Se mere her [[Configurator/Services]]

Når det er indtastet vil servicen hvert 5 minut se efter om der er kommet en ny students tabel og sende nye data til STIL.

Når man har indtastet navnet og gemt skal man starte servicen "'''UMS UNILogin Upload'''" eller genstarte serveren.

Sættes op på den enkelte template under UNI-C noden
[[File:STIL Account setting.jpg|none|thumb|485x485px]]

===Account settings===
Her bestemmes hvor man vil sende brugerne fra den pågældende template hen.

===Institution number===
Det institutions nummer hvor data skal sendes hen.

===Upload UNI Logins to STIL===
Tells UMS that all templates using this setting will be uploaded to STIL. This will create/add users to the institution number.

===Create new UNI login when CPR changes===
When a CPR changes UMS will tell STIL that it has to create a new UNI login.

If this checkbox is not checked, then you must manually change the UNI Login at https://ba.emu.dk at the same time you change it in the administrative system.

===Access group===
Members of this Active Directory group will have access to this account in UMS Web.

The module is called STIL Settings and can be found under the Control Panel in UMS Web.

===Write back webservice pincode===
Bruges til kommunikation med elevplan hvis fraværs beskeder skal sendes til dem

===Elevplan Institution number===
Det elevplans institutions nummer hvor data skal sendes hen.

===Elevplan keyord===
SMS keyword som UMS reagerer på når det sendes ind til UMS gateway. Når det står først i Sms’en vil den blive sendt videre til elevplan. Man vil modtage en SMS fra elevplan om at den er modtaget hvis ikke man får den indenfor 30 minutter, skal man gensende Sms’en.

===Company mail address for employees===
Det bruges når der laves en upload af data til STIL til unilogin generering (UNILogin Upload). Man kan bestemme den adresse man har ved uddannelses institutionen. Bruges f.eks. til SDBF systemet.

===Company mail address for students===
Det bruges når der laves en upload af data til STIL til unilogin generering (UNILogin Upload). Man kan bestemme den adresse man har ved uddannelses institutionen.

===Mail===
Lister felterne fra students tabellen hvis man lader den stå i <Not Used> vil den automatisk bruge brugernavnet som man har i AD.

===Mail Domain===
Her indtaster man f.eks. inlogic.dk

Hvis ikke man vælger at indtaste noget i feltet mail domain men kun sætter mail feltet vil mail feltet skulle indeholde hele mail adressen.

==UNI-Login Settings==
[[File:Stiluniloginsettings.png|none|thumb|569x569px]]

===Use UNI-Login===
Her sættes der op om denne template skal bruge UNI-Login

===Force update UNI-Login===
Hvis man ændrer UNI-Login skal det så slå igennem i UMS. Dette vil betyde at brugeren bliver nedlagt og en ny oprettet.

==Upload af data==
For at kunne uploade data som sendes til STIL skal man have et Onlinetjeneste-abonnement. Informationer om dette kan findes her.

http://www.stil.dk/It-og-administration/Brugere-og-adgangsstyring/Udbyder-UNILogin/Onlinetjenester

For at bestille skal man sende en mail til [[Mailto:uniloginudbyder@STIL.dk| uniloginudbyder@STIL.dk]] med teksten og bestillingsformularen.

===Bestillingsformular===
Vi vil gerne have en konto som har adgang til WS10 upload og WS17 download af UNI-Logins. inLogic løsning.
Oplysninger
IP:
Institutions numre:
Dette findes under Modules -> UNI-Sync
[[File:STIL UNISync setup.jpg|none|thumb|368x368px]]

===Activate UNI-Sync===
Skal vi sende/hente data fra STIL

===Institution numbers===
Indtast hvilke institutions numre der skal hentes fra

===Data provider settings (Onlinetjeneste-abonnement)===
Indstillinger som skal bruges til WS10 (Sende data) og WS17 (hente data)

http://www.stil.dk/~/media/STIL/Filer/PDF13_14/140521%20UNI%20Login%20Import%20WS10%20v31.pdf

http://www.stil.dk/~/media/STIL/Filer/Publikationer/Tekniske%20vejledninger/UNI-ogin%20Eksport%20WS17%20v1.3.pdf

===Username===
Username need to access webservice.

===Password===
Password need to access webservice.

===Password synchronization (UNI-Sync abonnement)===
For at kunne password synkroniserer med STIL skal man have et UNI-Sync abonnement. Informationer findes her

http://www.stil.dk/It-og-administration/Brugere-og-adgangsstyring/Institutioner-og-kommuner/UNISync

(Det er kun nødvendigt at sætte kryds ved punkt A3 =” Automatisk via en webservice (kræver kendskab til SOAP)”.)

===Username===
Username need to access webservice.

===Password===
Password need to access webservice.

==Opsætning på brugeradministrationen==
For at kunne hente fra STIL og sende data til STIL skal man give lov til det. Det sætter man op i <nowiki>https://ba.emu.dk</nowiki>

En vejledning for opsætningen af WS17 kan findes her.

<nowiki>http://www.stil.dk/~/media/STIL/Filer/PDF15/150714%2017ws%20afsend%20og%20godkend%20Dataforspoergsel%20til%20skoler.pdf</nowiki>

UMS vil hente alle WS10

===Pakke===
Man skal som minimum have adgang til en fuld eller mellem pakke. Specifikationerne for de enkelte pakker kan ses nedenunder.

Dataaftale for UNI-Login Eksport

(UNI-Login webservice ws17)

Udbydere med ws17 dataadgang kan trække nedenstående information afhængigt af den valgte pakke.
{| class="wikitable"
| colspan="8" | - Den fulde pakke: Alle data i skemaet - markeret F

- Mellem pakken: Data i skemaet, som er markeret M

- Den lille pakke: Data i skemaet, som er markeret L

Data om ansatte, elever, værger og andre kontaktpersoner
|-
| colspan="3" | - CPR-nummer
| colspan="2" |F
| colspan="2" |M
|
|-
| colspan="3" | - Fornavn(e)
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Efternavn
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Privatadresse (Se adresseinformation)
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Hjemmetelefon (Se telefonnummer-information)
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Arbejdstelefon (Se telefonnummer-information)
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Mobiltelefon (Se telefonnummer-information)
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - E-mail
| colspan="2" |F
| colspan="2" |M
|
|-
| colspan="3" | - Fødselsdag
| colspan="2" |F
| colspan="2" |M
|
|-
| colspan="3" | - Køn
| colspan="2" |F
| colspan="2" |M
|
|-
| colspan="3" | - PhotoId
| colspan="2" |F
| colspan="2" |M
|
|-
| colspan="3" |
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" |Adresseinformation:
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" | - Om adressen er beskyttet
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Adressens vejnavn, nr. og etage
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Postnummer
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - By
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Landekode
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Land
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Kommunekode
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Kommunenavn
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" |
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" |Telefonnummer-information:
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" | - Om telefonnummeret er beskyttet
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Telefonnummer
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" |
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" |Supplerende data om elever
| colspan="2" |
| colspan="2" |
|
|-
| colspan="3" | - Studietype (elev eller stud)
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Studienummer
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Elevens niveau (for grundskoleelever)
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Elevens hovedgruppe (klasse)
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Yderligere grupper elever er tilknyttet
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - Kontaktlærer
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Kontaktperson(er)s relation (mor, far osv.)
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Om kontaktperson(er) har forældremyndighed
| colspan="2" |F
| colspan="2" |
|
|-
| colspan="3" | - Afdeling, bygning eller værelsesnummer på efterskoler
| colspan="2" |F
| colspan="2" |M
|L
|-
| colspan="3" | - ID i det lokale studieadministrative system
| colspan="2" |F
| colspan="2" |M
|L
|}
{| class="wikitable"
|Supplerende data om ansatte
|
|
|
|-
|<nowiki>- Ansættelsestype (lærer, tap, pæd eller gæst)</nowiki>
|F
|M
|L
|-
|<nowiki>- Initialer</nowiki>
|F
|M
|L
|-
|<nowiki>- Stilling</nowiki>
|F
|M
|L
|-
|<nowiki>- Afdeling, bygning eller værelsesnummer på efterskoler</nowiki>
|F
|M
|L
|-
|<nowiki>- Grupper medarbejderen er tilknyttet</nowiki>
|F
|M
|L
|-
|<nowiki>- ID i det lokale studieadministrative system</nowiki>
|F
|M
|
|-
|
|
|
|
|-
|Data om UNI-Login for ansatte og elever
|
|
|
|-
|<nowiki>- UNI-Login brugernavn (brugerID)</nowiki>
|F
|M
|L
|-
|<nowiki>- Initialpassword</nowiki>
|F
|M
|
|-
|<nowiki>- Om inititalpassword er gældende password</nowiki>
|F
|M
|
|-
|<nowiki>- Brugerens navn i UNI-Login</nowiki>
|F
|M
|
|-
|<nowiki>- SkoleKom-navn</nowiki>
|F
|M
|
|-
|<nowiki>- Brugerens selvvalgte email-adresse i UNI-Login</nowiki>
|F
|M
|
|-
|<nowiki>- Brugerens selvvalgte mobilnummer i UNI-Login</nowiki>
|F
|M
|
|-
|
|
|
|
|-
|Data om grupper på institutionen
|
|
|
|-
|<nowiki>- Gruppeid</nowiki>
|F
|M
|L
|-
|<nowiki>- Gruppenavn</nowiki>
|F
|M
|L
|-
|<nowiki>- Gruppetype</nowiki>
|F
|M
|L
|-
|<nowiki>- Niveau</nowiki>
|F
|M
|L
|-
|<nowiki>- Spor</nowiki>
|F
|M
|L
|-
|<nowiki>- Startdato</nowiki>
|F
|M
|L
|-
|<nowiki>- Slutdato</nowiki>
|F
|M
|L
|}

===Technical settings===

====17ws - forspørgsel til skoler====
Log ind på ba.emu.dk – tryk dataaftaler>tryk på webservice forespørgsler
[[File:Stil1.png|none|thumb|642x642px]]
[[File:Stil2.png|none|thumb|642x642px]]

Indtast en skoles institutionsnummer> tryk vis > Tryk opret
[[File:Stil3.png|none|thumb|642x642px]]
Set fra skolens side > klik på dataaftaler > godkend, dvs. tryk gem
[[File:Stil4.png|none|thumb|642x642px]]

==FAQ==

===Hvordan checker jeg om min IP er åbnet hos STIL?===
Man kan teste adgangen via denne url:

<nowiki>https://ws04.infotjeneste.uni-c.dk/infotjenesteunilogin-ws/ws?WSDL</nowiki>

Den skulle gerne returnere et xml. Dokument – hvis i får en Access denied, så er der ikke åbnet for jeres IP.

===Hvilke CPR numre sendes til STIL (Gammel ordning)===
Alle rigtige CPR numre

Alle Fiktive CPR numre begyndende med 6,7,8 eller 9 og som overholder modulus 11

===Hvilke CPR numre bliver ikke sendt til STIL (Gammel ordning)===
Alle CPR numre som ikke overholder modulus 11

Alle CPR numre som indeholder bogstaver

===Hvilke CPR numre sendes til STIL (Ny ordning)===
Numerisk værdi der overholder modulus 11

Hvis cpr numre indeholder bogstaver opretter UMS Uni-login på baggrund af SLI id.

===Hvis man skifter CPR nummer beholder man så sit UNI Login===
Ja

===Må der kører andre importer end den fra inLogic===
Nej, det vil ødelægge automatikken med at beholde sit unilogin hvis man skifter CPR.

===Kan man få generet UNI-Login’s med det samme===
Ikke helt, men næsten.

Det kræver 2 kørsler af GetStudents med en upload af data imellem (UNILogin Upload servicen skal have kørt). Inden man kører anden kørsel af GetStudents skal STIL have haft nok tid til at lægge data fra deres back end miljø ud til de webservice’s hvor man henter data. En tommel finger regel kunne være 20-30 minutter.

===Hvordan nulstiller jeg common secret (udregnes ved første synkronisering)===
Åbner den tabel der hedder PasswordSyncGeneralSettings og sletter indholdet af kollonen UniCCommonSecret

===Skal Easy-C jobs slåes fra (C001 og C002)===
Ja de må ikke køre sammen med vores

===Skal LUDUS jobs slåes fra===
Ja kun upload man kan stadig download til ludus

===Error fra stil på uni-sync/password sync===
11/5/2018 11:05:01 AM - (ChangeUNI_CPassword) Change password for user - XXX0016 Error = 'ClientIP=87.54.38.xxx', 'AdpCommkeyStatus=2', 'checkCryptParam: md5sumNotEqual', 'BadAuth', 'ul-front-db-prod1', 'ul-wls-db-prod6', '2 ms'

Error rettes ved at nulstille UniCCommonSecret i SQL database. (update PasswordSyncGeneralSettingsset UniCCommonSecret = <nowiki>''</nowiki>)

Efter nulstilling af UniCCommonSecret, skal passwordsync jobbet køre igen.

===InstitutionPerson ikke indlæst! Ikke forventet CPR til localPersonID - skal omidentificeres: LocalPersonId====
Read this [[STIL UNI Login#Create new UNI login when CPR changes]] 

===Errors = Fejl 8: Gruppen blev sat til en anden GroupType end Hovedgruppe===
Errors = Fejl 8: Gruppen blev sat til en anden GroupType end Hovedgruppe, men der findes 1 Student med gruppen som MainGroupId fra en anden importkilde! Fjern f.rst alle elever fra hovedgruppen i den anden kilde: GroupId=20amu006

Fejlen rettes ved at sikre at der ikke køres nogen andre imports end fra UMS. Derefter skal man rydde op i manuelt tilknyttede brugere som stadig har denne gruppe som stamklasse.

 

===Initial user password.===
It is not possible to change the initial password in the STIL/UNi-C Administrative website.

'''Find Unilogin på bruger i SQL UniSync.'''

select * from UniSync

where CivilRegistrationNumber =' '

Timetable

2021-09-03T12:09:05Z

Tod: /* Systems */

Skemabrikker.exe is a small sync job that needs to run when timetables are created, updated, or deleted.

Example of timetable in UMS and Outlook:
[[File:Timetable in UMS and Outlook.png|none|thumb|600x600px]]

The following systems are supported:

*Office 365
*Exchange
*GSuite 

==Parameters==

===Usage===
Skemabrikker.exe [<optional> System] [<optional> Action] [<optional> Mail] [<optional> StartDate] [<optional> EndDate] [<optional> Type [UMS | NonUMS | All]]

====Applyrights====
Only works for Exchange and Office365. Restores rights for a room if they have accidentally been deleted or changed. 

====Systems====
This parameter is used to define what system Skemabrikker.exe will populate the timetables to. We currently support timetable integration to these systems:

Exchange

Office 365

GoogleApps

[[Timetable/itslearning|Itslearning]] 

=====Teachersonly=====
This parameter is used if the [action] parameter needs to affect only teachers.

=====Studentsonly=====
This parameter is used if the [action] parameter needs to affect only students.

=====Roomsonly=====
This parameter is used if the [action] parameter needs to affect only a given physical Classroom (When this parameter is used you need to add the ID for the given room ie. [Action] [Mail] 'Room_ID').

=====Activitiesonly=====
This parameter is used if the [action] parameter needs to only affect a given activity (When this parameter is used you need to add the ID for the given activity ie. [Action] [Mail] 'Activity_ID').

=====Coursesonly=====
This parameter is used if the [action] parameter needs to only affect a given course (When this parameter is used you need to add the ID for the given course ie. [Action] [Mail] 'Activity_ID_Course_ID').

====Action====

=====find=====
Used to display the timetables associated with the given [mail] parameter.

=====delete=====
Used to delete the timetables associated with the given [mail] parameter.

=====update=====
Used to update the timetables that needs to be updated and are associated with the given [mail] parameter.

=====cleanup=====
Used to find UMS appointments in users calendars and delete them if they are not found in UMS database.

====Mail====

=====mail/UPN=====
This parameter is used if the [action] parameter needs to affect a specific user.

=====AllTimeTableStudents=====
This will delete timetable blocks from all known students

'''Works with'''

Office 365

Exchange

=====AllTimeTableEmployees=====
This will delete timetable blocks from all known employees

'''Works with'''

Office 365

Exchange

=====AllTimeTableRooms=====

This will delete timetable blocks from all known rooms.

'''Works with'''

Office 365

====StartDate====
This parameter is used to define the start date in which the find, delete, or update parameter will affect the timetables. The format for this parameter is dd-mm-yyyy.

====EndDate====
This parameter is used to define the end date in which the find, delete, or update parameter will affect the timetables The format for this parameter is dd-mm-yyyy. 

====Type====
UMS - This parameter is used to define that the timetables that have been generated by UMS, will be effected.

NonUMS - This parameter is used to define that the timetables that have not been generated by UMS, will be effected.

All - This parameter is used to define that timetables both from UMS and non UMS, will be effected. 

==External systems==

===[[Timetable/itslearning|itslearning]]===

===[[Timetable/Office365|Office 365]]===

===[[Timetable/GoogleGSuite|Google GSuite]]===

==FAQ==

====How do I find timetable blocks with skemabrikker.exe ?====
Example following the general parameters:
{| class="wikitable"
|skemabrikker.exe office365 find tea@umsacademic.onmicrosoft.com 12-05-2019 13-05-2019 All
|}
Inspect the skemabrikker.log. The long string value in the log file refers to the ID in the table '''SkemaBrikkerSavedEntries_Students, SkemaBrikkerSavedEntries_Teachers, SkemaBrikkerSavedEntries_Rooms, SkemaBrikkerSavedEntries_Activities'''.
[[File:Skemabrikkerlog.png|none|thumb|864x864px]]

====How do I find timetable blocks with SQL statements?====
{| class="wikitable"
|Select SkemaBrikkerNewEntries.*

From SkemaBrikkerNewEntries

Join SkemaBrikker_Students On SkemaBrikkerNewEntries.SkemaBegivenhed_ID = SkemaBrikker_Students.SkemaBegivenhed_ID And SkemaBrikkerNewEntries.SkemaBrikkerAdminServers_ID = SkemaBrikker_Students.SkemaBrikkerAdminServers_ID

And SkemaBrikkerNewEntries.Activity = SkemaBrikker_Students.Activity

Where

SkemaBrikker_Students.cpr In (Select Cpr from Students where studienr= 'xxxxxx')

and SkemaBrikkerNewEntries.Dato = '28-11-2018'

Order By RealStartDateTime
|}

====How do I change format and content of timetable blocks in Outlook?====
Open UMS Configurator, select Modules "TimeTable" and select your datasource, then edit Format And Content

Variables can be replaced as pictured below.
[[File:Timetable format and content.png|none|thumb|1152x1152px]]
 

===Run only for one user===

====Students====
Skemabrikker.exe studentsonly <username>

====Teachers====
Skemabrikker.exe teachersonly <username>

ExportedPicturesToAdminSystems

2021-09-03T08:18:32Z

Tod:

== FAQ ==
If UMS needs to reload images that are Import to AdminSystems. ( ''Delete ExportedPicturesToAdminSystems where Username = <nowiki>''</nowiki>'' )

ExportedPicturesToAdminSystems

2021-09-03T08:07:48Z

Tod: Created page with "== FAQ =="

== FAQ ==

Welcome to UMS Wiki

2021-09-03T08:06:13Z

Tod:

[[File:UMS-Web-og-app-400.png|thumb|340x340px]]
Welcome to UMS Wiki. This wiki contains technical information about UMS. UMS is developed to help the school’s IT-department avoid trivial and hour-long administration tasks. UMS is short for User Management System and it is a system
developed especially for the educational sector. UMS is a standard solution, which makes it easy to update and maintain, however, because UMS is built using optional modules, it can be tailored to your school’s individual needs. That way you get a simple and effective solution containing everything you need – nothing more, nothing less.

Are you seeking general information please visit our [http://www.inlogic.dk/en/ inLogic website www.inlogic.dk]

==What is UMS?==
Watch our [https://www.youtube.com/watch?v=MI2Wh8ic2hk video] and find out more. UMS is developed to help the school’s IT-department avoid trivial and hour-long administration tasks. However, the school’s teachers and students will benefit from it too, via web and app. Want to know how? Find out in the text below.

'''UMS reduces the IT-department’s workload'''

With UMS, manual user creation is a thing of the past. UMS automatically creates and maintains users in Active Directory, Google Apps, Office 365 and learning management systems, based on data from the student administration system. UMS also gives the school’s students and staff access to a self-service portal, where they can reset their own password, thus saving time for the IT-department.

'''UMS gives teachers more time to teach'''

Many teachers find themselves with a multitude of administrative tasks they need do to, in addition to their other tasks. This could ultimately reduce the amount time they have to teach. To avoid that, UMS makes it possible to complete the administrative tasks quickly and easily via the UMS self-service portal, app and SMS modules, thus giving teachers more time to teach.

'''UMS makes it easier to be a student'''

With UMS, it is easy to be a student, because a long list of relevant school information is easily accessible. E.g., students can see their timetable, homework, grades and attendance records via web and SMS. They can even get notifications on their phone, if there are changes to their timetable or other important information. This makes it easy to stay up-to-date and it strengthens the students’ affiliation to the school.

==Possibilities with UMS==
'''Identity management.''' UMS automatically creates, maintains and deletes users in Active Directory, Office 365, Google Apps and many other systems, based on data from the student administration system.

'''Cloud integration.''' UMS easily integrates with Office 365, SharePoint, Google Apps, Sites and Drives. Timetable data automatically synchronizes to Outlook / Google Calendar. We have also developed a learning portal to Office 365 SharePoint.

'''LMS integration.''' UMS automatically creates class and group rooms in Canvas, Fronter, Moodle, SharePoint etc. Additionally, we integrate to a long list of other systems, e.g. library systems, print payment systems and cafeteria systems.

'''Self-service portal.''' UMS gives you a single login portal, where users can register attendance, reset passwords, block internet access, create guest users, send SMS, see attendance records and much more.

'''SMS and communication.''' The best way to reach your students is through their phones. With UMS, the students can automatically receive an SMS when there are changes to their timetable, they can reset their own password, receive their timetable and grades and much more via SMS.

'''App.''' With UMS, your school can get its own smartphone app, designed with the school’s colours and logo. The app gives students access to their timetable, homework, student ID, attendance records, news from the school etc.

==Support==
If you need support, we are here to help you. Contact us on our support phone: '''+45 42408815''' Monday to Friday from 08.30 am to 03.30 pm. Outside of our opening hours you can send us an e-mail at [mailto:support@inlogic.dk support@inlogic.dk]

Get remote support with [http://downloads.inlogic.dk/TeamViewerQS_da-idcbvgwhct.exe TeamViewer]. With TeamViewer you can get remote support to solve issues, while you are watching. All it requires is that you give us access to your computer.

Download [http://downloads.inlogic.dk/Setup.zip UMS]

Download [http://downloads.inlogic.dk/UMSFrontendSetup.zip UMS Academic Web]

Read our [http://www.inlogic.dk/ums-changelog/ changelog] for the lastest changes.

For other useful tools go to [http://www.inlogic.dk/en/support/download-ums/ inLogic's download site]

==Manuals==
[[InLogic SMS Gateway|InLogic SMS Gateway]]

[[Foxbox|Foxbox SMS Modem]]

[[UMS License Install]]

[[UMS update guide|UMS Update Guide]]

===App===
[[App]]

[[App Store Connect|Apple Developer Account]]

[[Push Notifications]]

[[Attendance Registration]]

[[Custom Terms and Localization]]

[[App Login]]

[[Student / Employee ID]]

[[My Information]]

[[Parking]]

[[SMS Alert App]]

[[UMS Homework]]

[[UMS Links]]

[[Vouchers]]

[[Attendance Registration - QR]]

===Attendance===
[[Absence Registration for Employees]]

[[Attendance Registration]]

[[Attendance Registration Advanced]]

[[Attendance Registration Card System]]

===Backend===
[[AD Attributes]]

[[Configurator]]

[[CSV export]]

[[Exchange Reviewer]]

[[Exchange Timetable Blocks]]

[[File Server Move]]

[[GetStudents]]

[[Password agent]]

[[Password Expiration Alert]]

[[Powersave]]

[[SLI]]

[[STIL UNI Login]]

===Integrations===
[[Axpoint]]

[[BOSS]]

[[Custom SQL Commands]]

[[Reindex]]

[[Casepoint|Casepoint]]

[[DAM]]

[[edCom]]

[[Elbek & Vejrup Fagsystem]]

[[Integra]]

[[Intranote]]

[[Lectio Sync]]

[[Google Apps]]

[[Moodle]]

[[Papercut]]

[[Print Payment and Management]]

[[Pure]]

[[Safeticket]]

[[Google app API]]

[[SLS]]

[[Study Quiz]]

[[TimeEdit]]

[[UCFMD]]

[[UMS Webservice|UMS Web Service]]

[[SSO/AD FS]]

[[Tabulex]]

===LMS===
[[Canvas]]

[[ELEARNINGFORCE SharePoint LMS]]

[[Fronter Integration]]

[[Itslearning]]

[[Moodle]]

[[Wizdom integration]]

===Office 365===
[[Office 365]]

[[OneNote Class Notebook]]

[[MSGraphPermissions|Microsoft Graph Permissions]]

[[Sharepoint Portal]]

[[Teams]]

[[Microsoft_SDS]]

===Self Service===
[[Exam Handling]]

[[Grades]]

[[IT Rules]]

[[Merge Letters]]

[[Multiple Users]]

[[Password Self Service]]

[[Password Change]]

[[SSO]]

[[UMS Homework]]

[[UMS Links]]

[[UMS Photo]]

[[UMS Web]]

[[Logo on UMS Web ]]

[[UMS Welcome]]

[[User Lock]]

[[Web Timetable]]

[[SLI Change Username]]

[[ExportedPicturesToAdminSystems]]

===SMS===
[[SMS Alert]]

[[SMS Subscriptions]]

[[SMS Timetable]]

[[SMS Welcome]]

[[SMS Log]]

Welcome to UMS Wiki

2021-09-03T08:01:11Z

Tod:

[[File:UMS-Web-og-app-400.png|thumb|340x340px]]
Welcome to UMS Wiki. This wiki contains technical information about UMS. UMS is developed to help the school’s IT-department avoid trivial and hour-long administration tasks. UMS is short for User Management System and it is a system
developed especially for the educational sector. UMS is a standard solution, which makes it easy to update and maintain, however, because UMS is built using optional modules, it can be tailored to your school’s individual needs. That way you get a simple and effective solution containing everything you need – nothing more, nothing less.

Are you seeking general information please visit our [http://www.inlogic.dk/en/ inLogic website www.inlogic.dk]

==What is UMS?==
Watch our [https://www.youtube.com/watch?v=MI2Wh8ic2hk video] and find out more. UMS is developed to help the school’s IT-department avoid trivial and hour-long administration tasks. However, the school’s teachers and students will benefit from it too, via web and app. Want to know how? Find out in the text below.

'''UMS reduces the IT-department’s workload'''

With UMS, manual user creation is a thing of the past. UMS automatically creates and maintains users in Active Directory, Google Apps, Office 365 and learning management systems, based on data from the student administration system. UMS also gives the school’s students and staff access to a self-service portal, where they can reset their own password, thus saving time for the IT-department.

'''UMS gives teachers more time to teach'''

Many teachers find themselves with a multitude of administrative tasks they need do to, in addition to their other tasks. This could ultimately reduce the amount time they have to teach. To avoid that, UMS makes it possible to complete the administrative tasks quickly and easily via the UMS self-service portal, app and SMS modules, thus giving teachers more time to teach.

'''UMS makes it easier to be a student'''

With UMS, it is easy to be a student, because a long list of relevant school information is easily accessible. E.g., students can see their timetable, homework, grades and attendance records via web and SMS. They can even get notifications on their phone, if there are changes to their timetable or other important information. This makes it easy to stay up-to-date and it strengthens the students’ affiliation to the school.

==Possibilities with UMS==
'''Identity management.''' UMS automatically creates, maintains and deletes users in Active Directory, Office 365, Google Apps and many other systems, based on data from the student administration system.

'''Cloud integration.''' UMS easily integrates with Office 365, SharePoint, Google Apps, Sites and Drives. Timetable data automatically synchronizes to Outlook / Google Calendar. We have also developed a learning portal to Office 365 SharePoint.

'''LMS integration.''' UMS automatically creates class and group rooms in Canvas, Fronter, Moodle, SharePoint etc. Additionally, we integrate to a long list of other systems, e.g. library systems, print payment systems and cafeteria systems.

'''Self-service portal.''' UMS gives you a single login portal, where users can register attendance, reset passwords, block internet access, create guest users, send SMS, see attendance records and much more.

'''SMS and communication.''' The best way to reach your students is through their phones. With UMS, the students can automatically receive an SMS when there are changes to their timetable, they can reset their own password, receive their timetable and grades and much more via SMS.

'''App.''' With UMS, your school can get its own smartphone app, designed with the school’s colours and logo. The app gives students access to their timetable, homework, student ID, attendance records, news from the school etc.

==Support==
If you need support, we are here to help you. Contact us on our support phone: '''+45 42408815''' Monday to Friday from 08.30 am to 03.30 pm. Outside of our opening hours you can send us an e-mail at [mailto:support@inlogic.dk support@inlogic.dk]

Get remote support with [http://downloads.inlogic.dk/TeamViewerQS_da-idcbvgwhct.exe TeamViewer]. With TeamViewer you can get remote support to solve issues, while you are watching. All it requires is that you give us access to your computer.

Download [http://downloads.inlogic.dk/Setup.zip UMS]

Download [http://downloads.inlogic.dk/UMSFrontendSetup.zip UMS Academic Web]

Read our [http://www.inlogic.dk/ums-changelog/ changelog] for the lastest changes.

For other useful tools go to [http://www.inlogic.dk/en/support/download-ums/ inLogic's download site]

==Manuals==
[[InLogic SMS Gateway|InLogic SMS Gateway]]

[[Foxbox|Foxbox SMS Modem]]

[[UMS License Install]]

[[UMS update guide|UMS Update Guide]]

===App===
[[App]]

[[App Store Connect|Apple Developer Account]]

[[Push Notifications]]

[[Attendance Registration]]

[[Custom Terms and Localization]]

[[App Login]]

[[Student / Employee ID]]

[[My Information]]

[[Parking]]

[[SMS Alert App]]

[[UMS Homework]]

[[UMS Links]]

[[Vouchers]]

[[Attendance Registration - QR]]

===Attendance===
[[Absence Registration for Employees]]

[[Attendance Registration]]

[[Attendance Registration Advanced]]

[[Attendance Registration Card System]]

===Backend===
[[AD Attributes]]

[[Configurator]]

[[CSV export]]

[[Exchange Reviewer]]

[[Exchange Timetable Blocks]]

[[File Server Move]]

[[GetStudents]]

[[Password agent]]

[[Password Expiration Alert]]

[[Powersave]]

[[SLI]]

[[STIL UNI Login]]

===Integrations===
[[Axpoint]]

[[BOSS]]

[[Custom SQL Commands]]

[[Reindex]]

[[Casepoint|Casepoint]]

[[DAM]]

[[edCom]]

[[Elbek & Vejrup Fagsystem]]

[[Integra]]

[[Intranote]]

[[Lectio Sync]]

[[Google Apps]]

[[Moodle]]

[[Papercut]]

[[Print Payment and Management]]

[[Pure]]

[[Safeticket]]

[[Google app API]]

[[SLS]]

[[Study Quiz]]

[[TimeEdit]]

[[UCFMD]]

[[UMS Webservice|UMS Web Service]]

[[SSO/AD FS]]

[[Tabulex]]

===LMS===
[[Canvas]]

[[ELEARNINGFORCE SharePoint LMS]]

[[Fronter Integration]]

[[Itslearning]]

[[Moodle]]

[[Wizdom integration]]

===Office 365===
[[Office 365]]

[[OneNote Class Notebook]]

[[MSGraphPermissions|Microsoft Graph Permissions]]

[[Sharepoint Portal]]

[[Teams]]

[[Microsoft_SDS]]

===Self Service===
[[Exam Handling]]

[[Grades]]

[[IT Rules]]

[[Merge Letters]]

[[Multiple Users]]

[[Password Self Service]]

[[Password Change]]

[[SSO]]

[[UMS Homework]]

[[UMS Links]]

[[UMS Photo]]

[[UMS Web]]

[[Logo on UMS Web ]]

[[UMS Welcome]]

[[User Lock]]

[[Web Timetable]]

[[SLI Change Username]]

ExportedPicturesToAdminSystems

===SMS===
[[SMS Alert]]

[[SMS Subscriptions]]

[[SMS Timetable]]

[[SMS Welcome]]

[[SMS Log]]

Office365 SP OneNote

2021-08-27T10:04:46Z

Tod:

== Sharepoint ==

==Parameters==
{| class="wikitable"
|+SharePoint
!Parameter
!Description
|-
|SharepointOnly
|Runs all the parameters in this table
|-
|CreateSites
|Create sites
|-
|AddSites2DB
|Add sites in UMS DB
|-
|DeleteSites
|Delete sites
|-
|UpdateSites
|Update sites
|-
|AddLearners2SitesInDB
|Add learners to UMS DB
|-
|DeleteTeachers
|Delete teachers
|-
|AddTeachers2Sites
|Add teachers to sites
|-
|DeleteSiteGroups
|Delete site groups
|-
|AddTeachers2SitesInDB
|Add teachers to UMS DB
|-
|DeleteLearners
|Delete learners
|-
|AddLearners2Sites
|Add learners to sites
|-
|UpdateSiteURL
|Update sites with new URL
|-
|AddNoteBooks2Sites
|Add OneNote Class NoteBooks to sites
|-
|SharePointDeleteNoteBooks
|Delete OneNote Class NoteBooks from sites
|-
|UpdateNeedToBeUpdated
|Set the update on next run flag
|-
|UpdateSitesIsActive
|Update site active/inactive status
|-
|SharePoint_OneNoteClassNotebook_AddMissingTeachers
|Add missing Teachers to OneNote Class NoteBooks
|-
|SharePoint_OneNoteClassNotebook_AddMissingLearners
|Add missing Learners to OneNote Class NoteBooks
|-
|ReAddLearners2Sites
|Re-add learners to sites if ReAdd is true in DB
|-
|ReAddTeachers2Sites
|Re-add teachers to sites if ReAdd is true in DB
|}
{| class="wikitable"
|+OneNoteClassNoteBook
!Parameter
!Description
|-
|OneNoteClassNotebookOnly
|Runs all the parameters in this table
|-
|AddNotebooks2DB
|Add OneNote Class NoteBooks to UMS DB
|-
|CreateNotebooks
|Create OneNote Class NoteBooks
|-
|UpdateOneNotes
|Update OneNote Class NoteBooks
|-
|DeleteOneNotes
|Delete OneNote Class NoteBooks
|-
|AddTeachers2OneNotesInDB
|Add teachers to OneNote Class NoteBooks in UMS DB
|-
|AddTeachers2OneNotes
|Add teachers to OneNote Class NoteBooks
|-
|AddLearners2OneNotesInDB
|Add learners to OneNote Class NoteBooks in UMS DB
|-
|AddLearners2OneNotes
|Add learners to OneNote Class NoteBooks
|-
|OneNoteDeleteTeachers
|Delete teachers in OneNote Class NoteBooks
|-
|OneNoteDeleteLearners
|Delete learners in OneNote Class NoteBooks
|-
|OneNoteUpdateNeedToBeUpdated
|Set update on next run flag
|}

Office365 SP OneNote

2021-08-27T10:02:58Z

Tod: /* Parameters */

==Parameters==
{| class="wikitable"
|+SharePoint
!Parameter
!Description
|-
|SharepointOnly
|Runs all the parameters in this table
|-
|CreateSites
|Create sites
|-
|AddSites2DB
|Add sites in UMS DB
|-
|DeleteSites
|Delete sites
|-
|UpdateSites
|Update sites
|-
|AddLearners2SitesInDB
|Add learners to UMS DB
|-
|DeleteTeachers
|Delete teachers
|-
|AddTeachers2Sites
|Add teachers to sites
|-
|DeleteSiteGroups
|Delete site groups
|-
|AddTeachers2SitesInDB
|Add teachers to UMS DB
|-
|DeleteLearners
|Delete learners
|-
|AddLearners2Sites
|Add learners to sites
|-
|UpdateSiteURL
|Update sites with new URL
|-
|AddNoteBooks2Sites
|Add OneNote Class NoteBooks to sites
|-
|SharePointDeleteNoteBooks
|Delete OneNote Class NoteBooks from sites
|-
|UpdateNeedToBeUpdated
|Set the update on next run flag
|-
|UpdateSitesIsActive
|Update site active/inactive status
|-
|SharePoint_OneNoteClassNotebook_AddMissingTeachers
|Add missing Teachers to OneNote Class NoteBooks
|-
|SharePoint_OneNoteClassNotebook_AddMissingLearners
|Add missing Learners to OneNote Class NoteBooks
|-
|ReAddLearners2Sites
|Re-add learners to sites if ReAdd is true in DB
|-
|ReAddTeachers2Sites
|Re-add teachers to sites if ReAdd is true in DB
|}
{| class="wikitable"
|+OneNoteClassNoteBook
!Parameter
!Description
|-
|OneNoteClassNotebookOnly
|Runs all the parameters in this table
|-
|AddNotebooks2DB
|Add OneNote Class NoteBooks to UMS DB
|-
|CreateNotebooks
|Create OneNote Class NoteBooks
|-
|UpdateOneNotes
|Update OneNote Class NoteBooks
|-
|DeleteOneNotes
|Delete OneNote Class NoteBooks
|-
|AddTeachers2OneNotesInDB
|Add teachers to OneNote Class NoteBooks in UMS DB
|-
|AddTeachers2OneNotes
|Add teachers to OneNote Class NoteBooks
|-
|AddLearners2OneNotesInDB
|Add learners to OneNote Class NoteBooks in UMS DB
|-
|AddLearners2OneNotes
|Add learners to OneNote Class NoteBooks
|-
|OneNoteDeleteTeachers
|Delete teachers in OneNote Class NoteBooks
|-
|OneNoteDeleteLearners
|Delete learners in OneNote Class NoteBooks
|-
|OneNoteUpdateNeedToBeUpdated
|Set update on next run flag
|}

Office365 SP OneNote

2021-08-27T10:01:38Z

Tod:

==Parameters==
{| class="wikitable"
|+Users
!Parameter
!Description
|-
|UsersOnly
|Runs all the parameters in this table
|-
|UpdateUsers
|Update users
|-
|DisableUsers
|Disable users
|-
|EnableUsers
|Enable users
|-
|DeleteUsers
|Delete users
|-
|CreateUsers
|Create users
|-
|UpdateImmutableID
|Update Immutable ID on users
|-
|UpdateOffice365SettingsIDForUsers
|Update Office 365 settings for users if they have changed template
|-
|UpdateUsersObjectID
|Get the object ID from office 365 and save it in UMS DB
|}
{| class="wikitable"
|+User settings
!Parameter
!Description
|-
|RunUserSettings
|Runs all the parameters in this table
|-
|DisableStrongPassword
|Disable strong password for users
|-
|SetMailAddress
|Set mail address on users
|-
|Forward2OnPremiseMail
|Set forward to OnPremise mail on users
|-
|SetCalendarRights
|Set calendar rights on users
|-
|UpdateMailboxTimeZone
|Update timezone for mailbox users
|-
|UpdateMailboxLanguage
|Update language for mailbox users
|-
|EnablePasswordNeverExpires
|Enable password never expires for users
|-
|UpdatePictures
|Update pictures
|-
|Forward2PrivateMail
|Set forward to privatemail on users
|-
|UpdateReplyToAll
|Set Reply to all on users
|-
|ProvisionOneDrive
|Provision OneDrive to users
|-
|UpdateAddressBookPolicy
|Set address book policy on users
|}
{| class="wikitable"
|+Groups
!Parameter
!Description
|-
|GroupsOnly
|Runs all the parameters in this table
|-
|RemoveGroupMembers
|Remove group members from groups
|-
|AddGroupMembers
|Add members to groups
|-
|DeleteGroups
|Delete groups
|-
|CreateGroups
|Create groups
|-
|UpdateGroupsObjectID
|Get the object ID from office 365 and save it in UMS DB
|-
|GetUPNsForGroups
|Get the UPN of template groups from Office 365
|}
{| class="wikitable"
|+Template groups
!Parameter
!Description
|-
|TemplateGroupsOnly
|Runs all the parameters in this table
|-
|RemoveUsersFromTemplateGroups
|Remove users from template security groups
|-
|AddUsers2TemplateGroups
|Add users to template security groups
|-
|DeleteTemplateGroups
|Delete groups that are no longer template security groups
|-
|UpdateTemplateGroupsObjectID
|Get the object ID from office 365 and save it in UMS DB
|-
|GetUPNsForTemplateGroups
|Get the UPN of template security groups from Office 365
|}
{| class="wikitable"
|+Template extra groups
!Parameter
!Description
|-
|TemplateExtraGroupsOnly
|Runs all the parameters in this table
|-
|CreateTemplateExtraGroups
|Create groups from template extra group
|-
|DeleteTemplateExtraGroups
|Delete groups that are no longer in extra groups
|-
|AddTemplateExtraGroupMembers
|Add users to template extra groups
|-
|UpdateTemplateExtraGroupsObjectID
|Get the object ID from office 365 and save it in UMS DB
|}
{| class="wikitable"
|+Keep alive groups
!Parameter
!Description
|-
|KeepAliveGroupsOnly
|Runs all the parameters in this table
|-
|CreateKeepAliveGroups
|Create keep alive groups
|-
|DeleteKeepAliveGroups
|Delete keep alive groups if they are no longer in UMS
|-
|UpdateSetMailAddressOnKeepAliveGroups
|Update the mail address on keep alive groups
|-
|AddKeepAliveGroupMembers
|Add users to keep alive groups
|-
|RemoveKeepAliveGroupMembers
|Remove users from keep alive groups
|}
{| class="wikitable"
|+Disabled groups
!Parameter
!Description
|-
|DisabledGroupsOnly
|Runs all the parameters in this table
|-
|CreateDisabledGroups
|Create disabled groups
|-
|DeleteDisabledGroups
|Delete disabled groups if they are no longer in UMS
|-
|UpdateSetMailAddressOnDisabledGroups
|Update the mail address on disabled groups
|-
|AddDisabledGroupMembers
|Add users to disabled groups
|-
|RemoveDisabledGroupMembers
|Remove users from disabled groups
|}
{| class="wikitable"
|+Teams
!Parameter
!Description
|-
|TeamsOnly
|Runs all the parameters in this table
|-
|AddTeams2DB
|Add Teams to UMS DB
|-
|CreateTeams
|Create Teams
|-
|AddTeamToGroup
|Add teams to groups
|-
|ActivateTeams
|Activate teams
|-
|UpdateTeams
|Update Teams
|-
|DeleteTeams
|Delete Teams
|-
|AddTeachers2TeamsDBTable
|Add teachers to Office365Teams_Teachers table in UMS DB
|-
|AddTeachers2Teams
|Add teachers to Teams
|-
|AddLearners2TeamsDBTable
|Add learners to Office365Teams_Learners table in UMS DB
|-
|AddLearners2Teams
|Add learners to Teams
|-
|TeamsDeleteTeachers
|Delete teachers in Teams
|-
|TeamsDeleteLearners
|Delete learners in Teams
|-
|TeamsUpdateNeedToBeUpdated
|Set update on next run flag
|-
|UpdateLearnersExternalID
|Retrieve the learners object id from Office 365 and save it in UMS DB
|-
|UpdateTeachersExternalID
|Retrieve the teachers object id from Office 365 and save it in UMS DB
|-
|UpdateSchoolsExternalID
|Retrieve the schools object id from Office 365 and save it in UMS DB
|-
|UpdateTeamsExternalID
|Retrieve the teams object id from Office 365 and save it in UMS DB
|}
{| class="wikitable"
|+SharePoint
!Parameter
!Description
|-
|SharepointOnly
|Runs all the parameters in this table
|-
|CreateSites
|Create sites
|-
|AddSites2DB
|Add sites in UMS DB
|-
|DeleteSites
|Delete sites
|-
|UpdateSites
|Update sites
|-
|AddLearners2SitesInDB
|Add learners to UMS DB
|-
|DeleteTeachers
|Delete teachers
|-
|AddTeachers2Sites
|Add teachers to sites
|-
|DeleteSiteGroups
|Delete site groups
|-
|AddTeachers2SitesInDB
|Add teachers to UMS DB
|-
|DeleteLearners
|Delete learners
|-
|AddLearners2Sites
|Add learners to sites
|-
|UpdateSiteURL
|Update sites with new URL
|-
|AddNoteBooks2Sites
|Add OneNote Class NoteBooks to sites
|-
|SharePointDeleteNoteBooks
|Delete OneNote Class NoteBooks from sites
|-
|UpdateNeedToBeUpdated
|Set the update on next run flag
|-
|UpdateSitesIsActive
|Update site active/inactive status
|-
|SharePoint_OneNoteClassNotebook_AddMissingTeachers
|Add missing Teachers to OneNote Class NoteBooks
|-
|SharePoint_OneNoteClassNotebook_AddMissingLearners
|Add missing Learners to OneNote Class NoteBooks
|-
|ReAddLearners2Sites
|Re-add learners to sites if ReAdd is true in DB
|-
|ReAddTeachers2Sites
|Re-add teachers to sites if ReAdd is true in DB
|}
{| class="wikitable"
|+OneNoteClassNoteBook
!Parameter
!Description
|-
|OneNoteClassNotebookOnly
|Runs all the parameters in this table
|-
|AddNotebooks2DB
|Add OneNote Class NoteBooks to UMS DB
|-
|CreateNotebooks
|Create OneNote Class NoteBooks
|-
|UpdateOneNotes
|Update OneNote Class NoteBooks
|-
|DeleteOneNotes
|Delete OneNote Class NoteBooks
|-
|AddTeachers2OneNotesInDB
|Add teachers to OneNote Class NoteBooks in UMS DB
|-
|AddTeachers2OneNotes
|Add teachers to OneNote Class NoteBooks
|-
|AddLearners2OneNotesInDB
|Add learners to OneNote Class NoteBooks in UMS DB
|-
|AddLearners2OneNotes
|Add learners to OneNote Class NoteBooks
|-
|OneNoteDeleteTeachers
|Delete teachers in OneNote Class NoteBooks
|-
|OneNoteDeleteLearners
|Delete learners in OneNote Class NoteBooks
|-
|OneNoteUpdateNeedToBeUpdated
|Set update on next run flag
|}

G Suite

2021-07-14T12:50:10Z

Tod: /* Drive */

UMS integrates to G Suite with the module G Suite Sync which:

*Creates users and their e-mail accounts
*Maintains users in G Suite, i.e. data changes are synchronised to UMS
*Synchronises passwords
*Deletes users who no longer attend the school

Integration to G Suite quickly becomes profitable. With UMS, the school saves resources by automating many manual tasks

*Avoid having to program scripts to synchronise the data
*Users are automatically created with data from your student administration system
*It reduces the workload for the IT-department

==Prerequisites==

===Supported administrative systems===

===Module requirements===
[[UMS]]

===Additional functionality===

===Testing after setup===

===What to have ready===

===Is any physical item required===

===Should third party be contacted===

==Installation==
'''G Suite'''
[[File:Googleappsadminsettings.png|none|thumb|577x577px]]

Enter Admin credentials for a service account with administrator privileges to access Office 365.

''Users''

'''“Mail Alias”'''

Choose what to use as the users mail address (login).

'''“Disable users”'''

When marked the users will be disabled when they are no longer attending classes.

'''“Delete users”'''

Choose if users are to be deleted after grace period has ended.

'''“Forward mail to on premise mail server”'''

This will forward the users Office 365 mail to the primary mail address from AD (If user does not have a proxy address it will read it from the mail attribute)

'''“Keep inactive before deleting x days”'''

Specify a grace period where users are disabled.

''Distribution lists''

'''“Maintain lists”'''

Mark this to create distribution groups in Office 365. The groups will be created, updated and deleted if this is specified.

'''“Delete lists”'''

Mark this to delete distributions groups when they are no longer active in the administrative system. Check the data export manuals too when this happens

'''“Delete unused lists after x days”'''

Specify in days how long the distribution groups are to be kept alive in Office 365 before deletion.

'''“Only senders inside my organization”'''

With this marked only users in the domain will be able to send to distribution groups created by UMS.

''Template security groups''

'''“Maintain”'''

This will create the security group entered in the field “template security group” in the destination node in the template settings.

''Timetable''

'''“Maintain”'''

Mark this to create timetable blocks in Google Apps. They will be created, updated and deleted.

'''“Delete old”'''

Mark this to delete old timetable blocks from calendars.

===''Site''===
[[File:Googleappssite.png|none|thumb|720x720px]]

'''“Automation type”'''

Full: Means that site maintenance will be fully automated.

'''“Remove learner method”'''

“Deleted in AD”

Users will be removed from site when they are not active in UMS anymore

“Finished on activity/course”

Users will be removed when they have finished with the course.

'''“Delete sites”'''

“Auto delete”

Sites will be delete when the last student has left the site

“Manual Delete”

Sites will not be deleted by UMS. This has to be done by an administrator

'''“Send mail to teacher(s)”'''

Send mail notification to teachers when they are attached to a site.

'''“Create x days before”'''

Choose how many days before start that the sites are to be created.

'''“Delete x days after end”'''

Choose how many days after end that the sites are to be deleted.

'''“Teacher rights on sites”'''

Rights the teacher will have on the site when attached.

'''“Learner rights on sites”'''

Rights the student/learner will have on the site when attached.

==='''SQL Groups'''===
Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''“Activity Sites”'''

'''“Do not create”'''

It will not create any sites based on activities.

'''“LMS has to be checked”'''

The field Aktivitet_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all sites.

'''Title'''

Title of the site. Changing this after a site has been created will cause it to be updated.

'''Description'''

Description of the site. Changing this after a site has been created will cause it to be updated.

==='''Search filter and criteria'''===
This will enable you to concatenate sites that would have been created as to or more sites to be created as one site.
[[File:Googleappssearchfilters.png|none|thumb|401x401px]]

'''“Remarks”'''

This is just for description purposes.

'''“Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the site with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

 '''“Length”'''

How many characters will be removed from the string.

“'''Add activity short description to node ID'''“

This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

===='''Examples'''====
If you have three activities named English1, English2, English3 and you only want one SharePoint site.

Set the settings as shown below
[[File:Googleappsseachfilters2.png|none|thumb|413x413px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

'''“Course Sites”'''

Course URL’s will always be created as “activity_course”.

'''“Do not create”'''

It will not create any sites based on courses.

'''“LMS has to be checked”'''

The field Skolefag_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all sites.

'''Title'''

Title of the site. Changing this after a site has been created will cause it to be updated.

'''Description'''

Description of the site. Changing this after a site has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate sites that would have been created as two or more sites to be created as one site.
[[File:Googleappsseachfilters3.png|none|thumb|427x427px]]

'''“Remarks”'''

This is just for description purposes.

'''“Course Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the site with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

'''“Activity Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the site with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

==='''<big>Drive</big>'''===
[[File:Googleappsdrive.png|none|thumb|720x720px]]

'''“Automation type”'''

'''<big>Full</big>''': Means that drive maintenance will be fully automated.

'''<big>“Remove learner method”</big>'''

'''“Deleted in AD”'''

Users will be removed from drive when they are not active in UMS anymore

'''“Finished on activity/course”'''

Users will be removed when they have finished with the course.

'''<big>“Delete drives”</big>'''

'''“Auto delete”'''

Drives will be delete when the last student has left the drive

'''“Manual Delete”'''

Drives will not be deleted by UMS. This has to be done by an administrator

'''“Send mail to teacher(s)”'''

Send mail notification to teachers when they are attached to a drive.

'''“Create x days before”'''

Choose how many days before start that the drives are to be created.

'''“Delete x days after end”'''

Choose how many days after end that the drives are to be deleted.

'''“Teacher rights on drives”'''

Rights the teacher will have on the drive when attached.

'''“Learner rights on drives”'''

Rights the student/learner will have on the drive when attached.

'''“SQL Groups”'''

Members of these groups will be attached to all drives created with this setting as teachers
[[File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''“Activity Drives”'''

'''“Do not create”'''

It will not create any sites based on activities.

'''“LMS has to be checked”'''

The field Aktivitet_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all drives.

'''Description'''

Description of the drive. Changing this after a drive has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate drives that would have been created as to or more drives to be created as one drive.
[[File:Googleappssearchfilters.png|none|thumb|401x401px]]

'''“Remarks”'''

This is just for description purposes.

'''“Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the drive with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

 '''“Length”'''

How many characters will be removed from the string.

“'''Add activity short description to node ID'''“

This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

'''Examples'''

If you have three activities named English1, English2, English3 and you only want one SharePoint drive.

Set the settings as shown below
[[File:Googleappsseachfilters2.png|none|thumb|413x413px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

'''“Course Drives”'''

Course URL’s will always be created as “activity_course”.

'''“Do not create”'''

It will not create any drives based on courses.

'''“LMS has to be checked”'''

The field Skolefag_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create drives based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all drives.

'''Description'''

Description of the drive. Changing this after a drive has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate drives that would have been created as two or more drives to be created as one drive.

[[File:Googleappsseachfilters3.png|none|thumb|427x427px]]
'''“Remarks”'''

This is just for description purposes.

'''“Course Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the drive with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

'''“Activity Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the drive with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

=== ''Classroom'' ===
There can only be a maximum of 990 classrooms in total in one organization.

'''Google designed features (Not UMS)'''

If a teacher leaves the school, the material that he has put into classrooms will be deleted as well.

If a user has too many classrooms it will be very slow for this user.
[[File:Googleappsclassroomsettings.png|none|thumb|720x720px]]

'''“Automation type”'''

Full: Means that classroom maintenance will be fully automated.

'''“Remove learner method”'''

“Deleted in AD”

Users will be removed from classroom when they are not active in UMS anymore

“Finished on activity/course”

Users will be removed when they have finished with the course.

'''“Delete classrooms”'''

“Auto delete”

Classrooms will be delete when the last student has left the classroom

“Manual Delete”

Classrooms will not be deleted by UMS. This has to be done by an administrator

'''“Send mail to teacher(s)”'''

Send mail notification to teachers when they are attached to a classroom.

'''“Create x days before”'''

Choose how many days before start that the classroom s are to be created.

'''“Delete x days after end”'''

Choose how many days after end that the classroom s are to be deleted.

'''“SQL Groups”'''

Members of these groups will be attached to all classrooms created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''“Activity Classroomss”'''

'''“Do not create”'''

It will not create any sites based on activities.

'''“LMS has to be checked”'''

The field Aktivitet_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create sites based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all classrooms.

'''Description'''

Description of the classroom. Changing this after a classroom has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate classrooms that would have been created as to or more classrooms to be created as one classroom.
[[File:Googleappssearchfilters.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssearchfilters.png|none|thumb|401x401px]]

'''“Remarks”'''

This is just for description purposes.

'''“Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the classroom with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

 '''“Length”'''

How many characters will be removed from the string.

“'''Add activity short description to node ID'''“

This will add the field Kort_Betegnelse (Short Description) from the students table to the node id.

Node id is the URL.

'''Examples'''

If you have three activities named English1, English2, English3 and you only want one SharePoint classroom.

Set the settings as shown below
[[File:Googleappsseachfilters2.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsseachfilters2.png|none|thumb|413x413px]]

This filter ensures that it is only applied to activities that matches this SQL sentence.

'''“Course Classrooms”'''

Course URL’s will always be created as “activity course”.

'''“Do not create”'''

It will not create any classrooms based on courses.

'''“LMS has to be checked”'''

The field Skolefag_LMS in the students table has to be “True”. (Look in the documentation for the specific administrative system to see how this is set)

'''“Based on template filter”'''

Create classrooms based on a filter that is specified per template.
[[File:Googleappsactivitysites.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsactivitysites.png|none|thumb|493x493px]]

'''“All”'''

Create all classrooms.

'''Description'''

Description of the classroom. Changing this after a classroom has been created will cause it to be updated.

'''Search filter and criteria'''

This will enable you to concatenate classrooms that would have been created as two or more classrooms to be created as one classroom.
[[File:Googleappsseachfilters3.png|link=http://wiki.inlogic.dk/index.php/File:Googleappsseachfilters3.png|none|thumb|427x427px]]

'''“Remarks”'''

This is just for description purposes.

'''“Course Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll.

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the classroom with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

'''“Activity Filter”'''

The SQL like filter (regular expression). If an activity matches, it will be subject to the settings below in semester roll

'''“Semester roll”'''

'''“Use replace string with empty”'''

This will replace a section of the classroom with an empty string.

 '''“Start index”'''

Determine where to start in string to remove.

'''“Length”'''

How many characters will be removed from the string.

=== '''Organization Settings''' ===
When creating Google API refer to this lInk

[[Google app API|http://wiki.inlogic.dk/index.php/Google_app_API]] [[File:Googleappsorganizationsettings.png|none|thumb|378x378px]]

'''“Description”'''

Add a description to be able to identify the account.

'''“Admin login”'''

Mail address of an administrative user

'''“Password”'''

Password for the admin login specified

'''“Domain”'''

The google domain that is used.

'''“Client ID”, “Client Secret”'''

This is obtained when following the instructions in the PDF document

'''“Refresh token”'''

This will be generated the first time google synchronization is started. If this is reset UMS will asked for it again when the next synchronization is run.

'''“Timetable Users”'''

This can be used when creating timetable blocks. Look in timetable documentation for this feature.

'''Template Settings'''

This is where you specify which templates are synchronized with Google and how.
[[File:Googleappstemplateeditor.png|none|thumb|687x687px]]

'''“Setting”'''

This is the setting described above

'''“Organization setting”'''

Specify where the users are created
[[File:Googleappsaosettings.png|none|thumb|422x422px]]

'''Path'''

This is where all users is placed

'''Use this path when below 13 years of age'''

This is where users that are under 13 years is placed. If this is not specified everyone will be placed under the path setting. (This is helpful when it comes to Google+)

'''OU Description'''

The description that is set on the OU when it is created.

'''Site settings'''

Settings used when creating sites from this template
[[File:Googleappssitesettings.png|none|thumb|422x422px]]

'''Site category'''

A list of categories added to the site when creating it separated with a ;

A category called UMS will be added aswell. (This cannot be change)

'''“SQL Groups”'''

Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''Drive settings'''

Settings used when creating drives from this template
[[File:Googleappsdrivesettings.png|none|thumb|429x429px]]

'''“Path”'''

The path where the drives are created

'''Create user specific subfolder'''

Create a folder for each student that is attached to each drive

'''Suffix'''

A text string that is appended to the folder name

'''Create subfolder (Teacher Read/Write - Student Read)'''

A folder where teachers can upload data that students can only read

'''Suffix'''

A text string that is appended to the folder name

'''Create subfolder (Teacher Read/Write - Student Read/Write)'''

A folder where teachers and students can share data both with read/write

'''Suffix'''

A text string that is appended to the folder name

'''Example'''
[[File:Googleappsstudents.png|none|thumb|279x279px]]

'''“SQL Groups”'''

Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

'''Classroom settings'''

Settings used when creating classrooms from this template
[[File:Googleappsclassroomsettings2.png|none|thumb]]

'''“SQL Groups”'''

Members of these groups will be attached to all sites created with this setting as teachers
[[File:Googleappssqlgroups.png|link=http://wiki.inlogic.dk/index.php/File:Googleappssqlgroups.png|none|thumb|458x458px]]

'''“Group name”'''

This can only be a group that is found in UMS

You get a list of these groups by running this SQL command:

Select Distinct Aktivitet As Activity From Students Order By Activity

==Installation G Suite Sync==
Steps to make UMS sync work with G Suite.

Log on <nowiki>https://console.developers.google.com</nowiki> with your Google Admin account.

Create a project
[[File:Googlesyncproject2.png|none|thumb|594x594px]]

When created choose project and click the newly created project.

Choose “Enable and manage APIs”. Enable these APIs
[[File:Googlesyncenableapi.png|none|thumb|463x463px]]

Click credentials

And choose “OAuth client ID”

Choose settings as show on below image. Name can be changed.
[[File:Googlesyncoauth.png|none|thumb|499x499px]]

Then choose “Create”

Which creates an OAuth 2.0 client ID

Enter Client ID and Client Secret into UMS
[[File:Googlesyncoauth2.png|none|thumb|513x513px]]

Go back to “Overview” and choose “Enabled APIs”

Click on each API you added and choose Quota
[[File:Googlesyncenableapi2.png|none|thumb|517x517px]]

Set the number as high as you can without “apply for higher quota”
[[File:Googlesyncapplyhighquota.png|none|thumb|439x439px]]

And you are done with this site.

Now Log on https://admin.google.com with your Google Admin account

Find “Other Google Services” - can be located under “More Controls” or under APPS aplaced at page bottom.

Click “add services” upper right corner

Then click “Add it now” on “Groups for Business”
[[File:Googlesyncservices.png|none|thumb|495x495px]]

Back to start and choose “Security”

Choose “API reference” and check “Enable API access”
[[File:Googlesyncsecurity.png|none|thumb|439x439px]]

Go to the UMS “usermanagement folder” and run “GoogleApps_Sync.exe” manually.

Login to Google using credentials from Google Organization settings.

When logged in succesfully, “Accept” the following
[[File:Googlesyncaccept.png|none|thumb|578x578px]]
If you get a “This page can’t be displayed”
[[File:Googlesyncpagenotfound.png|none|thumb|315x315px]]

Do not be alarmed. The job has been activated and you can check your GoogleApps_Sync.log to confirm that the job has completed running.

==Technical settings==

==FAQ==
Why do I not get the drive/site created?

1. Activity

a. Is there a user on the activity with a primary template that has an office 365 setting attached

b. Is the flag Aktivitet_LMS = True

2. Course

a. Is there a user on the course with a primary template that has an office 365 setting attached

b. Is the flag Skolefag_LMS = True