Security Fixes

• 13578 — Resolved a cross-site request forgery (CSRF) vulnerability.
• 13581 — Fixed a potential Denial of Service vulnerability.
• 13580 — Improved tenant access controls.

Stability Fixes

• 13654 - Resource not found error during provisioning, resolved for:
• • Setting the group classification
  • Updating the group display name and description
  • Updating group privacy and other group settings
  • Applying sensitivity labels
  • Adding owners
  • Adding members
  • Adding group settings
  • Uploading the group logo
• 12319 — Planner & OneNote tab configuration update.
• • Planner: When using the {} option in contenturl and entityId now add values that will create a planner.
  • OneNote: Only creates the default notebook, this is now achieve by Microsoft. {} no longer add any values allowing additional OneNote tab that requires configuration.
• 13627 — Duplicate entries no longer appear in "Directory > Sites I Manage" after submitting a request where the default owner is also added as an owner on the request form.

References: 13580, 13578, 13581, 12319, 13627, 13654

This release focuses on stability improvements and resolving key issues identified during recent usage and testing cycles.

In this maintenance release, we have resolved the following issues:

• Resource Not Found error at multiple stages of provisioning
  • Due to Microsoft changes we have increased our retry logic to ensure that when adding members and setting permissions we are not longer showing this error
• Private Channel creation with Members defined in a form field, were failing with error: 'Role has a range of values which does not include '0''
  • This only impacted customer with Group operations for Service Account enabled
  • To ensure the permissions are applied as needed, ensure any Owner columns have the following permissions when associating to the Form:
    • Service Instance Owners = ProvisionPoint Owner
    • Associated Owner = Owner in Microsoft (for some this is not required if they are restricting permissions for Owners)
    • Associated Member = Grants member permissions, if not set the owners will not be added to the private/shared channels 
      
  • To ensure the permissions are applied as needed, ensure any Member columns have the following permissions
    • Associated Member = Grants member permissions
       

References: 13495, 13633

We are exited to announce new Actions that can be used on any workspace managed by ProvisionPoint and as part of Lifecycle Policies.

The new Actions should improve management of Data governance, retention and more archive options.

Change Default Retention Label Action

The 'Change Default Retention Label action' gives additional flexibility to change the default Retention label manually or automatically via a lifecycle policy stage.

As with all Actions you can define approval, notifications, permissions and post webhooks

Move to M365 Archive Action (Reconsent is Required!)

Additional permissions are required to use the M365 Archive Actions, please ask your Global Admin to complete the reconsent process found here The Additional Permissions are: Sites.Archive.All (application)

The Move to M365 Archive will allow the Archive of the Site

Archiving SharePoint Sites

• Storage Management: When a site is archived, it stops consuming active storage quota and instead counts towards Microsoft 365 Archive storage. This helps organizations manage their storage costs effectively.
• Compliance and Searchability: Archived sites retain compliance features such as eDiscovery and retention labels. Although users cannot access archived sites, administrators can still search through the archived data using Microsoft Purview-based search.
• Reactivation: Archived sites can be reactivated if needed. 

Send Notification Action (Lifecycle Policy Only)

A new lifecycle Action has been added allowing you to create a Custom Notification template and choose the day it is sent via a Lifecycle Stage.

Fixes

• 13592 - Webhook conversion causing failures on multiple requests resolved
• 13611 - Service Account token refresh is now automatic if the service account is used within the 90 day window
• 13616 - Resource not Found error on creation - Changes made in Microsoft are impacting the graph calls, we have increased the retries we do to prevent the failures

In this maintenance release, we have resolved the following issues:

• Compliance checks for tenants with large numbers of guest users were intermittently failing with "Data was not collected" errors during InactiveGuests rule execution. This has been resolved.
• Team creation in ProvisionPoint could occasionally fail on the first attempt, requiring users to manually retry. Improved handling has been added to automatically retry transient failures without requiring manual intervention.
• Users were intermittently failing to be added to private channels immediately after team provisioning, with a "User Not Found" error. This was most likely to affect the last user in a provisioning batch. This has been resolved with improved synchronization handling.

References: 13512, 13513, 13514.

In this maintenance release, we have resolved the following issues:

• Unable to register existing SharePoint Hub Sites in ProvisionPoint when importing into the application.
• Custom Service Type error appearing for users that are not assigned an App Manager role.
• Service Type field was reverting to a Site Collection after saving a Service Definition, although still provisioning the expected Service Type.
• Some users were experiencing errors when trying to delete a workspace - Error: NotFound: Failed to execute Templates backend request.

References: 13053, 13055, 13337, 13340.

Key Features

• Configurable response handling - choose how ProvisionPoint handles webhook responses by selecting either Wait for acknowledgement or Wait for response.
• Rich provisioning context - webhooks receive comprehensive provisioning data including custom service type configuration, service definition details, resolved request variables and transform tags, Owners and Members and request form data.
• Seamless Director integration - custom service type instances appear in your ProvisionPoint directory with custom icons for easy identification, instance URL's for direct access and full timeline tracking of provisioning activities.

How it works

App Managers in ProvisionPoint are able to configure Custom Service Types under Admin > Templates > Custom Service Types.

These can be configured with descriptive names and icons, as well as with the webhook URL for your endpoint, and set your response handling unit.

Once configured, this will appear on the Service Type dropdown on the Service Definition form.

When a Custom Service Type is select, the M365 related settings and actions are not displayed within the Service Definition. However, request forms and approval workflows can be configured as normal.

Fixes

• 12492 - Null owners displayed in Directory view12131
• 12170 - Request Tile 'File system' upload for icons restored
• 12131 - Compliance Check export no longer limited to first 20 results