Building Applications and Solutions with Microsoft 365 Core Services (MS-600)

The Microsoft Identity platform enables developers to build many applications to satisfy diverse business requirements and scenarios. By supporting multiple OAuth 2.0 standard authentication protocols, developers can create applications that meet business needs, including single-page applications, web apps, mobile or native apps, and services or daemon apps. In this module, you'll learn how to implement different OAuth 2.0 protocol grant types (flows) in popular application types.

At the end of this module, you should be able to:

• Compare and contrast different grant types (flows) in the OAuth 2.0 protocol
• Evaluate which authentication protocol to use based on the app scenario
• Implement different authentication protocols in different application types

The Microsoft identity platform implements the OAuth 2.0 authorization protocol. This protocol is a method by which a third-party app can access web-hosted resources on behalf of a user. The web-hosted resources can define a set of permissions that you can use to implement functionality in smaller chunks. Depending on the app scenario, developers can leverage one of two permissions supported by the Microsoft identity platform; in this module, you'll learn the different types of permissions and consent framework models for obtaining permissions from users to use them in apps.

At the end of this module, you should be able to:

• Compare and contrast different permission types supported by the Microsoft identity platform
• Compare and contrast the difference between static and dynamic consent in user permissions
• Create an app that implements dynamic consent for incrementally obtaining permissions as needed from users

Many solutions involve creating web APIs to expose functionality to different clients and consumers. Developers can secure these APIs using Microsoft identity to ensure only approved apps can access the web APIs provided they've been granted the necessary permissions. In this module, you'll learn how to secure a web API with Microsoft identity and how to call it from another application.

By the end of this module, you'll be able to:

• Create a custom web API that is secured with Microsoft identity
• Create a custom web app that calls a custom web API secured with Microsoft identity
• Create a custom daemon app that calls a custom web API secured with Microsoft identity

Role-based access control (RBAC) is a widespread mechanism to enforce authorization in applications. The administrator assigns roles to different users and groups to control who can access what content and functionality. Using RBAC with Application Roles and Role Claims, developers can securely enforce authorization in their apps with little effort. Another approach is to use Azure AD Groups and Group Claims. In this module, you'll learn how to use Azure AD Groups and Application Roles to provide fine-grained access control to an application.

By the end of this module, you'll be able to:

• Create a custom ASP.NET web app that is secured with Microsoft identity
• Demonstrate how to obtain security groups as a claim in the token and use them in the app
• Demonstrate how to use app roles to grant users access to an app

Microsoft Graph provides a unified programmability model that you can use to build apps for organizations and consumers that interact with the data of millions of users. The Microsoft Graph REST APIs implement many of the OData protocol's query parameters. This module teaches you how to manipulate queries using query parameters.

By the end of this module, you'll be able to:

• Demonstrate how to manipulate REST queries with query parameters
• Create queries that expand complex entities
• Demonstrate how to search for content with Microsoft Graph
• Optimize Microsoft Graph queries with batching

Microsoft Graph provides a unified programmability model that you can use to build apps for organizations and consumers that interact with the data of millions of users. In this module, students will learn how Microsoft has implemented throttling to Microsoft Graph to limit the overuse of Microsoft Graph resources. Students will learn how to prevent requests from being throttled and properly handle scenarios when Microsoft Graph gracefully throttles high user traffic.

By the end of this module, you'll be able to:

• Explain how Microsoft Graph maintains resource health
• Identify when Microsoft Graph throttles requests
• Decide the appropriate pattern to address throttled requests
• Create queries that mitigate throttling scenarios

Users are the core of most operations in Microsoft 365. Microsoft Graph enables developers complete control over the users' lifecycle in Microsoft 365, including creating, updating, and deleting users and listing users in the organization. In this module, you'll learn how to use Microsoft Graph to work with users in Microsoft 365, including the required permissions.

At the end of this module, you should be able to:

• Demonstrate how to get a list of users
• Demonstrate how to get details, including a profile picture, of a user
• Demonstrate how to manage the lifecycle of a user from creation to deletion

Groups are collections of users sharing access to resources in Microsoft services or your apps. Developers can use Microsoft Graphs to create and manage different types of groups. In this module, you'll learn how to manage the lifecycle of groups the different types of groups and obtain information about the users associated with a group using Microsoft Graph.

At the end of this module, you should be able to:

• Demonstrate how to get information about a group
• Demonstrate how to get information about a user's groups
• Demonstrate how to manage the lifecycle of a group

OneDrive is the file hub for Office 365. OneDrive enables users to access and collaborate on files wherever they're stored. Microsoft Graph enables developers to use a single API to work with the files in OneDrive. Files in Office 365 are stored in drives. Users can store files in a personal drive, OneDrive, or a shared drive powered by a SharePoint document library. In this module, you'll learn how to access OneDrive files, read and write files, and traverse relationships between files and users.

At the end of this module, you should be able to:

• Demonstrate how to retrieve a list of files from OneDrive
• Demonstrate to download a file from OneDrive using a unique ID
• Get a list of files trending around the signed-in user
• Demonstrate how to upload a large file to OneDrive

Microsoft Graph enables developers to consume user information stored in Microsoft 365 in custom applications. Data is retrieved from Microsoft Graph through a REST API or using one of the various native SDKs provided by Microsoft. In this module, you'll learn to work with change notifications (webhooks) and track changes (delta query) in the Microsoft Graph.

At the end of this module, you should be able to:

• Demonstrate how to use the Microsoft Graph .NET SDK
• Demonstrate how to subscribe and receive notifications when entities change with Microsoft Graph
• Demonstrate how to retrieve a list of all entities that have changed using the delta query

Microsoft Teams is an extensible platform you can build custom apps on. Understand what is possible with a Microsoft Teams custom app and determine if it's right for you.

At the end of this module, you should be able to:

• Describe the components of a Microsoft Teams app
• List the options for distributing a Microsoft Teams app
• List the extensibility points available in Microsoft Teams
• Choose the correct extensibility point(s) based on your scenario

In this module, you'll learn how to create different types of messaging extensions in a custom Microsoft Teams app.

At the end of this module, you should be able to:

• Demonstrate how to create an action-based messaging extension for Microsoft Teams
• Demonstrate how to create a search-based messaging extension for Microsoft Teams
• Demonstrate how to unfurl a URL with a messaging extension for Microsoft Teams

Tabs are Microsoft Teams-aware webpages embedded in Microsoft Teams. They can be added as part of a channel or a group chat inside a team or as a personal app for an individual user. As part of your app, you can add custom tabs to embed your web content in Teams. Two types of tabs are available: Teams, Channel/Group and Personal. In this module, you'll learn how to create and add tabs to your Microsoft Teams app.

At the end of this module, you should be able to:

• Evaluate the differences between personal and channel/group tabs.
• Create a channel/group tab with a configuration experience.
• Create a tab that uses authentication to call a protected REST API

Conversational bots allow users to interact with your web service through text, interactive cards, and task modules. Conversational bots can handle a few simple commands or complex, artificial intelligence-powered and natural language processing virtual assistants. They can be one aspect of a more extensive application or completely stand-alone. In this module, you'll learn how to create and add bots to custom Microsoft Teams apps.

At the end of this module, you should be able to:

• Demonstrate how to create a conversation bot for Microsoft Teams
• Demonstrate how to subscribe to and respond to events in a conversation bot in Microsoft Teams
• Demonstrate how to incorporate authentication in a conversation bot in Microsoft Teams

Task modules are modals you can populate with either an Adaptive Card or an embedded web/content page for use in your custom Microsoft Teams app's user experience for workflows requiring data input. Task modules allow you to gather information in a Teams-aware popup. This module teaches you how to create and add task modules to your Microsoft Teams app.

At the end of this module, you should be able to:

• Create a task module for a tab
• Demonstrate how to create a task module that includes an adaptive card
• Create a task module for a bot

Webhooks and connectors are a simple way to connect your web services to channels and teams inside Microsoft Teams. Outgoing webhooks allow users to send text messages to your web services from a channel. Connectors allow users to subscribe to receive notifications and messages from your web services. Two types of connectors are available in Microsoft Teams: incoming webhooks and Office 365 connectors. In this module, you'll learn about webhooks and connectors and how to implement them in Microsoft Teams channels.

By the end of this module, you'll be able to:

• Demonstrate how to create and use an outgoing webhook for a Microsoft Teams channel
• Demonstrate how to create and use an incoming webhook for a Microsoft Teams channel
• Demonstrate how to create, register, and use an Office 365 Connector for Microsoft Teams

Microsoft Teams is the ultimate hub for teamwork and intelligent communications. Microsoft Teams delivers chat-based collaboration, meetings, calling, and enterprise voice features. Developers can tap into the power of Microsoft Teams with Microsoft Graph to integrate your custom applications. In this module, you'll learn how to use Microsoft Graph to interact with Microsoft Teams.

At the end of this module, you should be able to:

• Understand how to use Microsoft Graph to communicate with Microsoft Teams
• Demonstrate how to get a list of all teams and a specific team with Microsoft Graph
• Demonstrate how to configure build-in tabs within a Microsoft Teams team with Microsoft Graph
• Demonstrate how to notify a user or a channel using the Microsoft Teams activity feed with Microsoft Graph.

Developers can create Microsoft Teams apps to create new user experiences and integrate them with existing business solutions. When custom applications must access user information protected by Azure AD and data from other services, apps must establish a trusted connection with these providers. In this module, you'll learn about the different authentication flows supported by Microsoft Teams that you can use in your custom apps.

At the end of this module, you should be able to:

• Understand the authentication options available to developers creating custom Microsoft Teams tabs and bots
• Create a Microsoft Teams tab that uses SSO authentication
• Create a bot for Microsoft Teams that uses SSO authentication

Meetings enable collaboration, partnership, informed communication, and shared feedback. The meeting app can deliver a user experience for each stage of the meeting lifecycle. Depending on the attendee's status, the meeting lifecycle includes pre-meeting, in-meeting, and post-meeting app experience. This module teaches you how to create custom apps for Microsoft Teams meetings.

At the end of this module, you should be able to:

• Understand the capabilities of Microsoft Teams meetings extensibility feature
• Create a Microsoft Teams meetings app that meeting attendees can use before and during a meeting
• Implement a summary view of the meeting after the meeting has concluded

Use the Developer Portal to modify app definitions and manage app packages. Leverage the Microsoft Teams Framework (TeamsFx) to set up CI/CD pipelines and automate deployment.

By the end of this module, you'll be able to:

• Manage app definitions and packages in the Developer Portal for Teams
• Upload a custom app to a single user or team
• Upload an app to the App Catalog for your organization
• Automate deployment of Microsoft Teams apps