May 22, 2026

Secure, Scalable, Governed: Power Platform Best Practices with Craig White [MVP]

Secure, Scalable, Governed: Power Platform Best Practices with Craig White [MVP]
Secure, Scalable, Governed: Power Platform Best Practices with Craig White [MVP]
M365 FM Podcast
Secure, Scalable, Governed: Power Platform Best Practices with Craig White [MVP]

Secure, scalable, and governed Power Platform adoption requires more than just enabling low-code tools — it demands a structured governance strategy that balances innovation, security, and operational control. In this episode of the M365.fm podcast, Mirko Peters speaks with Microsoft MVP Craig White about the real-world challenges organizations face when scaling Microsoft Power Platform across the enterprise.

Craig explains why governance should never block innovation. Instead, organizations should create guardrails that allow citizen developers to build solutions safely while maintaining compliance, security, and architectural consistency. The discussion covers environment strategies, Data Loss Prevention (DLP) policies, connector governance, lifecycle management, identity security, and API control.

The episode highlights how many businesses still misunderstand Power Platform governance, often relying on restrictive policies that create shadow IT instead of reducing risk. Craig shares practical guidance on designing scalable governance models that remain almost invisible to end users while still protecting business-critical data and systems.

Additional topics include Copilot Studio, AI readiness, Power Apps governance, automation architecture, and the future of low-code development inside Microsoft 365 environments. The conversation emphasizes that successful Power Platform adoption depends on clear ownership, automation, monitoring, and security-first operational models rather than manual approvals and outdated IT gatekeeping.

This episode is especially valuable for Microsoft 365 architects, Power Platform administrators, governance teams, security professionals, and IT leaders looking to scale Power Platform securely while enabling innovation and business agility.

Apple Podcasts podcast player iconSpotify podcast player iconYoutube Music podcast player iconSpreaker podcast player iconPodchaser podcast player iconAmazon Music podcast player icon

You can empower citizen developers with the power platform and unlock new opportunities for your organization. Over 70% of organizations now run active citizen developer programs, showing a strong shift toward innovation. You face common challenges like security risks, compliance issues, and operational inefficiencies when you balance innovation with governance. Visibility into apps and workflows, proactive governance, and AI integration help you address these challenges. Governance acts as an enabler, not a barrier, when you follow power platform best practices. You will find actionable best practices that guide you step by step.

Key Takeaways

  • Empower citizen developers to drive innovation in your organization by implementing a strong governance framework.
  • Assign dedicated admin roles to manage security and compliance effectively within the Power Platform.
  • Create dedicated environments for development, testing, and production to ensure organized and secure app management.
  • Implement Data Loss Prevention (DLP) policies to protect sensitive data and maintain compliance across your applications.
  • Establish a Center of Excellence to support citizen developers with resources, training, and best practices.
  • Encourage peer learning and mentorship to build skills and confidence among citizen developers.
  • Regularly review and update your Power Platform solutions to stay current with new features and security measures.
  • Measure the impact of your initiatives by tracking app usage, user satisfaction, and operational efficiencies.

Governance and Security in Power Platform

Governance and Security in Power Platform

Power Platform Admin Role

Assigning Admins

You need to assign dedicated admin roles to secure your tenant and support governance. Start by establishing a team structure for your environments. Assign administrators the Power Platform service admin role. This role gives you control over access to critical functionalities. Define clear policies around data access and application lifecycle management. These steps help you build a strong data governance strategy and maintain security.

Tip: Assign admins based on their experience with power platform and power apps. This ensures proper management and reduces risks.

Admin Responsibilities

Admins play a key role in governance and security. You must understand their responsibilities to support alm and application lifecycle management. The table below shows the main tasks for Power Platform admins:

ResponsibilityDescription
GovernanceDefine clear policies around data access, app lifecycle management, and security compliance. This includes data loss prevention policies and environment strategy.
SecurityUse tools for DLP policies, environment controls, and audit logs to ensure enterprise-grade security.
ScalingManage at scale and ensure consistency across your organization using Managed Environments and the Center of Excellence starter kit.
MonitoringRegularly check database activity, system jobs, and API calls to maintain platform health and compliance.

You should use the power platform admin center to monitor and manage these responsibilities. This helps you secure your tenant and maintain visibility.

Environment Strategy Best Practices

Dedicated Environments

You must create dedicated environments to support alm and governance. Each environment should have a specific purpose. Use the following best practices:

  1. Define clear environment purposes. Set up environments for development, testing, production, and sandbox.
  2. Implement version control. Use tools like Git to track changes and collaborate.
  3. Automate deployments. Reduce human error and ensure consistency.
  4. Regularly back up environments. Prevent data loss and maintain security.
  5. Monitor and govern environments. Use monitoring tools and establish governance policies.

You can use the power platform admin center to manage environments. Set up development environments for building and testing new features. Use test or user acceptance testing environments to validate changes before production. Create production environments for live users. Sandbox environments allow safe experimentation.

Note: Manage shared test and production environments with limited permissions. Automate cleanup of temporary development environments. Establish consistent naming conventions for environments and groups.

Dataverse Provisioning

Dataverse provisioning supports your data governance strategy and security. You should provision Dataverse in dedicated environments. This helps you control data access and maintain compliance. Use the power platform admin center to set up Dataverse and manage permissions. Dataverse gives you advanced data management features for power apps and power platform solutions.

Data Loss Prevention Policies

Creating DLP Policies

Data loss prevention policies protect your tenant and support governance. You must categorize connectors to control data flow. Establish broad policies for most environments and flexible ones for production. Centralize DLP management at the tenant level. Regularly review and update DLP policies to adapt to new threats.

You can access the power platform admin center to define and enforce rules in the Data Policies section. Differentiate environments for tailored policies. Categorize connectors into groups: business data only, no business data allowed, and blocked. Set DLP policies as the highest priority. Reserve environment-specific policies for exceptions.

User Education

User education is essential for maintaining security and governance. You should train users on data loss prevention policies and power platform best practices. Teach them how to use power apps safely and follow your data governance strategy. Encourage users to report security risks and follow guidelines for application lifecycle management. Provide resources and support alm through onboarding and continuous learning.

Tip: Regularly update training materials and communicate changes in DLP policies. This keeps users informed and helps secure your tenant.

API and Compliance Controls

APIs connect your Power Platform solutions to other systems and services. You must manage these connections carefully to protect your data and meet compliance requirements. Strong API governance and compliance controls help you avoid risks and support innovation.

API Governance

You should treat API governance as a foundation for secure and compliant development. Start by assigning clear ownership for each API. Owners take responsibility for monitoring usage and ensuring security. Use Role-Based Access Control (RBAC) to manage who can access and modify APIs. This limits exposure and keeps sensitive data safe.

Monitor API activity with built-in auditing features. These tools track who accesses APIs and what actions they perform. Regular audits help you spot unusual behavior and prevent unauthorized use. You can also use telemetry and logging to track API performance and compliance in real time. This visibility lets you respond quickly to policy drift or security threats.

Automated security scanning and vulnerability detection add another layer of protection. These tools check APIs for weaknesses and alert you to potential risks. Data classification helps you organize information based on sensitivity. This step ensures you handle personal or regulated data according to industry standards.

Tip: Review your API inventory regularly. Remove unused or unauthorized APIs to reduce your attack surface.

Regulatory Alignment

You must align your API usage with industry regulations such as GDPR, HIPAA, and FDA rules. These laws set strict standards for data handling. Failure to comply can lead to heavy fines and damage your reputation.

The Power Platform supports compliance with features like regional data controls, administrative tools, and built-in auditing. You can encrypt data both in transit and at rest. This protects information from unauthorized access. Data Loss Prevention (DLP) policies help you control data flow and prevent leaks.

Here is a summary of key compliance controls you should use:

Compliance ControlDescription
AuditingBuilt-in auditing features help track and log API usage for compliance purposes.
EncryptionData is encrypted both in transit and at rest, ensuring protection against unauthorized access.
Data Loss Prevention (DLP)DLP policies help prevent data leaks and ensure compliance with privacy laws.
Administrative ToolsTools for administrators to manage compliance and security settings effectively.

You should also implement data classification to meet privacy laws. Assign roles and permissions based on job needs. This approach limits access to sensitive data and supports regulatory compliance.

Note: Continuously monitor your APIs for compliance. Use logs and reports to prove you meet regulatory requirements during audits.

By following these best practices, you create a secure and compliant environment for your Power Platform solutions. You empower your citizen developers to innovate while protecting your organization from risk.

Center of Excellence and Supportive Structures

A center of excellence gives you a strong foundation for empowering citizen developers. You can use this structure to nurture innovation and maintain control. The center of excellence acts as a strategic hub that connects governance, training, and community building. You align your efforts with organizational goals and ensure that every solution supports your vision. This approach helps you deliver value quickly while protecting your data and assets.

Building a Center of Excellence

Roles and Responsibilities

You need to define clear roles and responsibilities in your center of excellence. This team should include leaders from IT, business units, and citizen developers. Each member brings unique skills to the table. You can use the following roles to build a balanced team:

  • Program Lead: Sets the vision and manages the center of excellence.
  • Governance Lead: Develops and enforces best practices for security and compliance.
  • Training Coordinator: Organizes learning sessions and resources for citizen developers.
  • Community Manager: Builds engagement and supports user adoption.
  • Solution Architect: Guides technical decisions and helps others create an app.

Tip: Assign roles based on experience and interest. Rotate responsibilities to keep the team motivated.

The center of excellence bridges the gap between IT governance and business innovation. You can deliver rapid results and maintain high standards of security.

Templates and Resources

Templates and resources help you scale your center of excellence. You should provide reusable templates for common tasks, such as app design, documentation, and testing. These resources make it easier for citizen developers to create an app that meets your standards.

Resource TypePurpose
App TemplatesSpeed up the process to create an app
Governance ChecklistsEnsure compliance with best practices
Training GuidesSupport learning and skill development
FAQ DocumentsAnswer common questions about power apps
Community ForumsEncourage collaboration and peer support

You can update these resources as your needs change. This keeps your center of excellence relevant and effective.

Team Structures for Citizen Developers

Identifying Champions

Champions play a key role in your power platform journey. You should identify employees who show passion for technology and a willingness to help others create an app. Champions inspire their peers and drive user adoption.

To build a strong champions network, you can:

Champions often become leaders in your center of excellence. They help others follow best practices and encourage a culture of excellence.

Peer Learning

Peer learning boosts skill development and confidence. You can set up mentorship programs that connect new citizen developers with experienced champions. This approach helps everyone learn how to create an app and solve real business problems.

You can also:

Note: Peer learning builds trust and helps you scale your power platform initiatives faster.

Onboarding and Training

Onboarding Programs

A structured onboarding program helps new users get started with power apps and the power platform. You should offer step-by-step guides, hands-on labs, and sandbox environments. These tools let users experiment and learn how to create an app safely.

Your onboarding program should cover:

  • Platform basics and navigation
  • Governance framework and compliance
  • Security protocols and licensing awareness
  • How to access templates and resources

This approach ensures that every new citizen developer understands your standards and can contribute to your center of excellence.

Continuous Learning

Continuous learning keeps your team up to date with the latest power platform best practices. You should provide regular training sessions, webinars, and in-context learning opportunities. Encourage your team to share knowledge and ask questions.

You can support continuous learning by:

  • Offering advanced courses and certifications
  • Promoting fusion teams that blend IT and business skills
  • Providing real-time guidance and feedback channels

Tip: Continuous learning helps you adapt to new challenges and maintain a culture of excellence.

By building a center of excellence, you create a supportive environment where citizen developers can thrive. You empower your team to create an app, follow best practices, and drive innovation across your organization.

Monitoring, Auditing, and Analytics

You need strong monitoring, auditing, and analytics to keep your power platform tenant secure and efficient. These practices help you understand how users interact with power apps and flows, spot risks, and support governance.

Power Platform Usage Analytics

Activity Logs

You can use several tools to track activity across your tenant. The power platform admin center gives you analytics at both the tenant and environment levels. You see solution health, security scores, and recommendations. Activity logging lets you track every app and flow event. You can access these logs through APIs, which makes it easy to create a flow that automates reporting. Dataverse audit logging tracks create, update, and delete operations. Application Insights provides detailed logs and custom metrics for each app. Custom dashboards help you visualize trends and monitor key metrics.

Tip: Set up automated alerts to notify you of performance issues or security breaches. This keeps you informed and ready to act.

Adoption Trends

You should monitor adoption to measure the success of your power platform strategy. Track the number of active users daily, weekly, and monthly. This helps you spot trends and see which power apps and flows get the most use. Analyze usage patterns to understand which features users like and which tools they ignore. Gather feedback to identify barriers to adoption and improve your onboarding process.

  • Track active users to see growth.
  • Monitor usage frequency to find popular apps.
  • Collect feedback to address pain points.

Auditing Apps and Flows

Solution Quality

You must audit every app and flow to maintain quality. Start by establishing an auditing process using Microsoft Dataverse. Create a flow that checks compliance and notifies owners if their app or flow does not meet standards. Ask owners to submit business justifications for compliance. Admins review these details before adding the app to the catalog.

  • Enable auditing in Dataverse to track user activity.
  • Use the power platform admin center for activity logging.
  • Require business justifications for each app.

Security Risks

Security is critical for every app and flow. Use Azure Active Directory to restrict access to authorized users. Manage data access with Dataverse roles or SharePoint permissions. Apply the principle of least privilege. Regularly check connectors and permissions to ensure compliance. Enable audit logs to track user actions and security events. Combine audit logs with Microsoft Sentinel or Azure Monitor for better monitoring. Set up security alerts for unauthorized access or unusual data changes.

Automating Governance

Alerts and Notifications

Power automate helps you create a flow that automates audit and alert processes. You can create a flow that sends real-time notifications for performance issues or policy violations. Automated alerts reduce manual oversight and keep you informed about your tenant. This proactive approach improves operational efficiency and helps you prevent disruptions.

  • Use power automate to create a flow for alerts.
  • Set up notifications for critical events.
  • Respond quickly to maintain trust in your apps.

Routine Audits

You can use power automate to create a flow that schedules routine audits. These flows check compliance, review permissions, and enforce DLP policies. Free audit workflow templates help you streamline governance. Automation ensures consistency and accountability across your tenant.

Note: Automating governance with power automate saves time and supports a secure, well-managed power platform environment.

Fostering Innovation and Collaboration

Fostering Innovation and Collaboration

Safe Experimentation

Sandbox Environments

You can drive innovation by using sandbox environments in your power platform tenant. Sandbox environments give you a safe space to test new ideas and features. You isolate data and users, so you protect sensitive information. You can experiment without affecting production systems. Sandbox environments let you rigorously test changes before deployment, which reduces errors and risks.

  • Sandbox environments provide isolated spaces for experimentation.
  • You test new features without impacting production.
  • Sensitive data stays protected.
  • You develop skills and collaborate with your team.

Tip: Use tiered access and role-based controls in sandbox environments to ensure security and efficiency.

Recognizing Innovation

You should recognize and reward innovation to motivate your citizen developers. Celebrate successful projects and creative solutions. Highlight achievements in team meetings or newsletters. Recognition builds a positive culture and encourages others to experiment. You can collect feedback from users to improve future projects. Stay updated with new power platform features and industry trends to inspire ongoing innovation.

Cross-Team Collaboration

Hackathons

Hackathons spark creativity and teamwork in your tenant. Champions lead these events and mentor participants. You solve real business challenges and propose innovative solutions using power platform. Hackathons help you build influence and excitement. You can share tutorials and case studies to support learning.

  • Champions organize hackathons and community events.
  • Teams collaborate to solve business problems.
  • Hackathons drive adoption and engagement.

Sharing Success

Sharing success stories strengthens collaboration. You can showcase achievements through presentations or internal forums. Celebrate milestones to maintain morale and motivation. Teams learn from each other and build trust. Clear communication channels help you share project updates and best practices.

Collaboration StrategyBenefit
Shared PurposeFocuses work and goals
CommunicationEnables effective teamwork
Celebrating SuccessBoosts morale and unity

Note: Use collaboration tools like Slack to manage projects and facilitate communication.

Sustaining Engagement

Community Building

You build a strong community by connecting citizen developers across your tenant. A central hub guides and standardizes practices. Champions act as bridges between the community and your organization. They provide mentorship and support. Community forums encourage collaboration and peer learning.

Feedback Loops

Feedback loops foster trust and transparency. You collect input from stakeholders and integrate it into your projects. Agile feedback helps you optimize solutions and sustain engagement. You track adoption measures to monitor program success. A structured feedback system ensures continuous improvement and innovation in your power platform tenant.

Tip: Develop a communication plan and training program to keep your community engaged and informed.

Power Platform Best Practices for Sustainable Success

Regular Reviews and Updates

Staying Current

You need to keep your tenant up to date with the latest features and security updates. Microsoft regularly releases new tools and improvements for the power platform. Review release notes and update your apps and flows often. This habit helps you avoid security risks and ensures your solutions stay effective. Set a schedule to check for updates every month. Encourage your team to share new discoveries and best practices. Staying current keeps your tenant secure and your users productive.

Stakeholder Involvement

Involve key stakeholders in your review process. Invite business leaders, IT staff, and citizen developers to regular meetings. Ask them to share feedback on power apps and other solutions in your tenant. This approach helps you spot issues early and align your efforts with business goals. Stakeholders can also help you prioritize updates and improvements. Their input ensures your power platform best practices support everyone’s needs.

Scaling and Solutions Management

Using Solutions

As your tenant grows, you need to manage many apps and automations. Use solutions to group related components together. Solutions make it easier to move apps, flows, and tables between environments. This method supports better organization and helps you maintain control as your power platform expands. Solutions also simplify updates and reduce errors during deployments.

Supporting Advanced Makers

Support advanced makers in your tenant by giving them access to more complex tools and resources. Offer training on advanced features and encourage them to mentor others. Advanced makers can help you solve tough problems and build high-quality solutions. Recognize their achievements and invite them to share their knowledge with the community. This support helps your tenant grow stronger and more innovative.

Measuring Impact

Success Metrics

You should measure the impact of your power platform initiatives using clear metrics. Track app usage, automation adoption rates, and user satisfaction. Monitor the number of active users daily, weekly, and monthly. Look for trends in user activity and identify which features get the most use. Collect feedback through surveys and focus groups to find barriers and improve adoption. These steps help you understand the value your tenant brings to the organization.

  • App usage and automation rates
  • Time saved by users
  • User satisfaction scores
  • Active user counts
  • Feedback from surveys

Reporting Outcomes

Share the results of your power platform projects with your team and leadership. Use reports to highlight time savings, cost reductions, and improved customer engagement. For example, organizations have seen up to 25% time savings per employee and millions in operational cost savings. Regular reporting helps you prove the value of your tenant and guides future investments. Celebrate your successes and use the data to plan new projects.

Tip: Continuous monitoring and reporting keep your power platform best practices effective and your tenant on track for long-term success.


You unlock the full potential of the power platform when you combine governance, support, and innovation. Use best practices to guide your teams and create a secure environment. Build a Center of Excellence to support ongoing learning and collaboration. Stay engaged with new features and encourage your team to explore the power platform. Take the next step by reviewing your current approach and planning for sustainable growth.

FAQ

What is a citizen developer?

You are a citizen developer when you build apps or automate workflows using Power Platform tools without formal IT training. You solve business problems and drive innovation in your organization.

How do you start with Power Platform?

You begin by exploring Power Apps, Power Automate, and Power BI. Use templates and guides from your Center of Excellence. Experiment in sandbox environments to learn safely.

Why is governance important for citizen developers?

You need governance to protect data, ensure compliance, and maintain security. Governance gives you clear guidelines and helps you innovate without risking your organization’s assets.

How can you keep your apps secure?

You follow best practices like using Data Loss Prevention policies, assigning proper roles, and enabling audit logs. Regular training and reviews help you stay updated and prevent security issues.

What is a Center of Excellence?

A Center of Excellence is a team that supports you with resources, training, and governance. It helps you build quality apps, share knowledge, and maintain standards across your organization.

How do you measure success in Power Platform projects?

You track metrics such as app usage, time saved, and user satisfaction. Use feedback surveys and adoption reports to understand the impact of your solutions.

Can you use AI in Power Platform?

You can use AI features like Copilot Studio to automate tasks and enhance your apps. AI helps you work faster and solve complex problems with simple tools.

What should you do if you need help?

You reach out to your Center of Excellence, champions, or community forums. Use training guides and FAQs to find answers. Collaboration and peer learning support your growth.

🚀 Want to be part of m365.fm?

Then stop just listening… and start showing up.

👉 Connect with me on LinkedIn and let’s make something happen:

  • 🎙️ Be a podcast guest and share your story
  • 🎧 Host your own episode (yes, seriously)
  • 💡 Pitch topics the community actually wants to hear
  • 🌍 Build your personal brand in the Microsoft 365 space

This isn’t just a podcast — it’s a platform for people who take action.

🔥 Most people wait. The best ones don’t.

👉 Connect with me on LinkedIn and send me a message:
"I want in"

Let’s build something awesome 👊

1
00:00:00,000 --> 00:00:03,040
Welcome to another edition of the M65 podcast.

2
00:00:03,040 --> 00:00:05,640
My today is guest is Craig Marge,

3
00:00:05,640 --> 00:00:08,760
to double MVP,

4
00:00:08,760 --> 00:00:10,800
AI platform lead governance specialist

5
00:00:10,800 --> 00:00:13,760
and co-host of the Power Platform Panicroom podcast,

6
00:00:13,760 --> 00:00:17,160
with over 20 years across Microsoft technologies

7
00:00:17,160 --> 00:00:20,520
from FOBA to SharePoint, to Microsoft 365,

8
00:00:20,520 --> 00:00:22,680
Power Platform and co-pilot studio,

9
00:00:22,680 --> 00:00:25,800
Craig helps organizations scale innovation safely

10
00:00:25,800 --> 00:00:29,120
with an ability makers to thrive.

11
00:00:29,120 --> 00:00:32,720
So, Craig, you are a massive legal fan.

12
00:00:32,720 --> 00:00:35,720
If you, if Power Platform was a legal theme,

13
00:00:35,720 --> 00:00:37,360
what would it be, legal technique,

14
00:00:37,360 --> 00:00:40,360
because it's structured and engineered, legal city,

15
00:00:40,360 --> 00:00:43,440
because everything is connected

16
00:00:43,440 --> 00:00:45,480
and people build it on top,

17
00:00:45,480 --> 00:00:47,640
that's legal creator because of flexibility

18
00:00:47,640 --> 00:00:50,800
or maybe something completely different.

19
00:00:50,800 --> 00:00:54,520
- I think it's a, it's sitting on the fence a little bit.

20
00:00:54,520 --> 00:00:55,880
I think it's all three.

21
00:00:57,120 --> 00:00:59,320
Because depending on where you are,

22
00:00:59,320 --> 00:01:02,400
and depending on what roles you come from

23
00:01:02,400 --> 00:01:05,600
or depend on what type of Lego you might wanna build with.

24
00:01:05,600 --> 00:01:06,600
Right?

25
00:01:06,600 --> 00:01:10,400
So, I would say if you're working in finance

26
00:01:10,400 --> 00:01:14,360
or marketing or sales and you're not used to the Power Platform,

27
00:01:14,360 --> 00:01:17,440
you might wanna start with something as basic as duplo.

28
00:01:17,440 --> 00:01:20,240
Just to build your first, very simple app

29
00:01:20,240 --> 00:01:22,360
or workflow using a template,

30
00:01:22,360 --> 00:01:26,040
just to understand how the bricks kind of formulate together.

31
00:01:26,040 --> 00:01:28,680
If I wanna a bit more experience with all the NIT,

32
00:01:28,680 --> 00:01:29,720
I've done a bit of code,

33
00:01:29,720 --> 00:01:32,520
I know my Excel, RAN Excel function,

34
00:01:32,520 --> 00:01:34,680
maybe I wanna go for that Lego city thing, all right?

35
00:01:34,680 --> 00:01:35,520
Cool.

36
00:01:35,520 --> 00:01:38,600
I can build something a little bit more advanced

37
00:01:38,600 --> 00:01:42,040
and I can understand how all these bricks fit together

38
00:01:42,040 --> 00:01:43,720
as part of a wider solution.

39
00:01:43,720 --> 00:01:45,760
So, I might have an app and some flows

40
00:01:45,760 --> 00:01:47,320
and some security roles,

41
00:01:47,320 --> 00:01:49,360
so that could be my Lego city.

42
00:01:49,360 --> 00:01:52,160
But actually now we're starting to look at, okay,

43
00:01:52,160 --> 00:01:54,600
what does the new landscape look like?

44
00:01:54,600 --> 00:01:56,680
Code apps, being on a something example

45
00:01:56,680 --> 00:01:59,280
where actually we're taking it up a level again.

46
00:01:59,280 --> 00:02:01,120
Maybe we're if we're into that territory,

47
00:02:01,120 --> 00:02:04,280
I would say we're into the technique scene, right?

48
00:02:04,280 --> 00:02:09,280
Technique is a lot more complex, challenging

49
00:02:09,280 --> 00:02:11,960
and what are the good things that come with it

50
00:02:11,960 --> 00:02:12,920
and also the bad things.

51
00:02:12,920 --> 00:02:15,600
So, yeah, maybe I think depending on where you are

52
00:02:15,600 --> 00:02:16,760
and who you are,

53
00:02:16,760 --> 00:02:19,240
might depend on what type of Lego set you would buy.

54
00:02:19,240 --> 00:02:20,720
Does that make sense?

55
00:02:20,720 --> 00:02:21,560
Yeah.

56
00:02:21,560 --> 00:02:23,040
Yeah.

57
00:02:23,040 --> 00:02:23,880
It's good.

58
00:02:24,840 --> 00:02:28,880
So, you have work across Faubea,

59
00:02:28,880 --> 00:02:32,680
SQL Server, SharePoint, Microsoft 65 and Power Platform.

60
00:02:32,680 --> 00:02:36,640
What's been the biggest shift in how

61
00:02:36,640 --> 00:02:39,840
organization approach technology over those years?

62
00:02:39,840 --> 00:02:45,200
Bigger shifts, good question.

63
00:02:45,200 --> 00:02:47,880
I think, I don't even know if it's a shift in some senses,

64
00:02:47,880 --> 00:02:49,240
I think people are still,

65
00:02:49,240 --> 00:02:51,040
the more technology becomes available,

66
00:02:51,040 --> 00:02:52,520
the more scared a lot of people get.

67
00:02:52,520 --> 00:02:55,440
So, maybe there is less shifts for some companies

68
00:02:55,440 --> 00:02:58,960
because they still got a foot in the previous technology

69
00:02:58,960 --> 00:03:00,760
and want to keep hold of it.

70
00:03:00,760 --> 00:03:03,840
I think the return can about mindset shifts,

71
00:03:03,840 --> 00:03:07,240
I think it's probably been most recently

72
00:03:07,240 --> 00:03:09,200
with artificial intelligence,

73
00:03:09,200 --> 00:03:12,480
especially if it's not on effect to the Power Platform.

74
00:03:12,480 --> 00:03:13,920
Because I've seen a lot of companies now

75
00:03:13,920 --> 00:03:16,920
that have never embraced the Power Platform.

76
00:03:16,920 --> 00:03:18,240
It's been around for 10 years,

77
00:03:18,240 --> 00:03:20,880
they're just not interested, not interested,

78
00:03:20,880 --> 00:03:21,800
but there's this thing.

79
00:03:21,800 --> 00:03:22,640
I don't know if you've heard of it,

80
00:03:22,640 --> 00:03:24,680
Mercodist, they called agents.

81
00:03:24,680 --> 00:03:27,600
Some people might have heard these things called agents.

82
00:03:27,600 --> 00:03:30,000
Well, that's perched up a lot of people's interests, isn't it?

83
00:03:30,000 --> 00:03:33,960
So, I was starting to see that mind-sector shift now

84
00:03:33,960 --> 00:03:37,600
of people really needing to embrace AI

85
00:03:37,600 --> 00:03:41,520
because they want to maintain a competitive advantage,

86
00:03:41,520 --> 00:03:43,120
they want to wall to mate,

87
00:03:43,120 --> 00:03:45,800
and actually that's now starting to lead them into territories

88
00:03:45,800 --> 00:03:47,840
of, well, not everything has to be an agent,

89
00:03:47,840 --> 00:03:49,400
it could be an app, it could be a flow,

90
00:03:49,400 --> 00:03:51,280
it could be a this, it could be that.

91
00:03:51,280 --> 00:03:54,520
So, I'm starting to see a huge mind-shit shift now.

92
00:03:54,520 --> 00:03:57,640
I think previously maybe akin to that

93
00:03:57,640 --> 00:04:00,200
would be the shift from on-premise into cloud.

94
00:04:00,200 --> 00:04:01,720
There was a lot of resistance,

95
00:04:01,720 --> 00:04:04,680
I don't want to go into the cloud, it's not secure.

96
00:04:04,680 --> 00:04:07,520
And over time, people's mind-sector shifts changed,

97
00:04:07,520 --> 00:04:08,560
didn't they, they say, well, actually,

98
00:04:08,560 --> 00:04:09,800
we need to embrace the cloud

99
00:04:09,800 --> 00:04:12,840
because we can't get away of it, it's the future.

100
00:04:12,840 --> 00:04:15,120
And so people had to change the way they worked,

101
00:04:15,120 --> 00:04:17,560
the way they thought about technology.

102
00:04:17,560 --> 00:04:19,240
Essentially, it's just someone else's

103
00:04:19,240 --> 00:04:21,520
bit, a kit somewhere else, right?

104
00:04:21,520 --> 00:04:23,240
But I maybe see those two kind of,

105
00:04:23,240 --> 00:04:25,240
those two are probably the biggest shifts I've seen

106
00:04:25,240 --> 00:04:27,680
in the last 20, so years,

107
00:04:27,680 --> 00:04:28,920
I may say we sound old, isn't it?

108
00:04:28,920 --> 00:04:32,160
But yeah, obviously, those two, that's fair in it.

109
00:04:32,160 --> 00:04:38,200
- Yeah, before I ever started,

110
00:04:38,200 --> 00:04:41,920
I've been in podcast episode.

111
00:04:41,920 --> 00:04:46,640
I scraped all profile data from LinkedIn and so on.

112
00:04:46,640 --> 00:04:50,000
And I analyze it, who is AI?

113
00:04:50,000 --> 00:04:52,280
And I see on your profile,

114
00:04:52,280 --> 00:04:55,680
you heavily focused on governance and enablement.

115
00:04:55,680 --> 00:05:00,760
Why do you think so many organizations struggle

116
00:05:00,760 --> 00:05:02,840
to balance these two things?

117
00:05:02,840 --> 00:05:06,000
- Well, I think in the low-code world,

118
00:05:06,000 --> 00:05:09,160
it's a bit different across the rest of the step.

119
00:05:09,160 --> 00:05:11,120
Can I have said this 20 or so before,

120
00:05:11,120 --> 00:05:15,040
if we're gonna go to somewhere like Sherpoon

121
00:05:15,040 --> 00:05:18,880
on Premiere SQL Server, even into the new world,

122
00:05:18,880 --> 00:05:20,960
getting an exchange mailbox,

123
00:05:20,960 --> 00:05:24,960
Microsoft Teams, things are turned on by IT.

124
00:05:24,960 --> 00:05:28,880
And you are given access to that technology

125
00:05:28,880 --> 00:05:33,880
when the company wants you to have access to that technology.

126
00:05:33,880 --> 00:05:36,120
So it's a nice, beautiful way.

127
00:05:36,120 --> 00:05:38,000
The difference of the Power Platform is,

128
00:05:38,000 --> 00:05:40,800
it's all been on by default and you can't control it.

129
00:05:40,800 --> 00:05:44,000
I think that's where the struggle has been

130
00:05:44,000 --> 00:05:49,000
and the lack of awareness of people not realizing

131
00:05:49,000 --> 00:05:52,200
they need to govern this piece of software

132
00:05:52,200 --> 00:05:55,640
or binocate or service that's on by default

133
00:05:55,640 --> 00:05:57,680
because companies think it's gonna be the same as Teams

134
00:05:57,680 --> 00:05:59,360
and I need to go and turn this on

135
00:05:59,360 --> 00:06:00,960
and then send an email to everyone again.

136
00:06:00,960 --> 00:06:03,040
Hello, the Power Platform is now enabled.

137
00:06:03,040 --> 00:06:05,240
No, Microsoft did that for you.

138
00:06:05,240 --> 00:06:08,080
And I think that's where the huge governance

139
00:06:08,080 --> 00:06:08,920
bit comes in, right?

140
00:06:08,920 --> 00:06:11,160
Because companies aren't aware that

141
00:06:11,160 --> 00:06:13,560
the Power Platform has been around for 10 years now.

142
00:06:13,560 --> 00:06:16,000
Can you believe that? 10 years, that's a long time.

143
00:06:16,000 --> 00:06:19,160
And actually not to people who have been using it

144
00:06:19,160 --> 00:06:22,320
in your company for 10 years, you just might not realize.

145
00:06:22,320 --> 00:06:24,240
And that's why that yes, we want companies

146
00:06:24,240 --> 00:06:26,960
to do all the fun stuff, build apps, build agents

147
00:06:26,960 --> 00:06:29,920
and build flows, but we need to make sure it's done safely.

148
00:06:29,920 --> 00:06:31,800
They're not leaking a date around everywhere

149
00:06:31,800 --> 00:06:34,480
or being exposed to things they shouldn't.

150
00:06:34,480 --> 00:06:35,640
I've been a governance agent,

151
00:06:35,640 --> 00:06:38,560
well, really takes on a really interesting pivot now,

152
00:06:38,560 --> 00:06:40,840
doesn't it, with AI and the fact that it's even more important

153
00:06:40,840 --> 00:06:41,680
than ever?

154
00:06:42,520 --> 00:06:48,000
When, when companies first at that Power Platform,

155
00:06:48,000 --> 00:06:50,040
what are the warning signs that tell you,

156
00:06:50,040 --> 00:06:55,040
oh, this could be become very chaos quickly.

157
00:06:55,040 --> 00:06:58,840
Normally looking at default environment.

158
00:06:58,840 --> 00:07:01,720
Is that the one environment in a tenant

159
00:07:01,720 --> 00:07:03,360
where everyone's got access to, isn't it?

160
00:07:03,360 --> 00:07:05,960
So you can normally have a quick look in there

161
00:07:05,960 --> 00:07:09,720
and sort of see if there's loads of apps and loads of flows.

162
00:07:09,720 --> 00:07:12,600
You can kind of get a good read very quickly off.

163
00:07:12,600 --> 00:07:16,640
Okay, there's lots of activity here that's gone unchecked.

164
00:07:16,640 --> 00:07:18,320
I want to, we need to do about it, right?

165
00:07:18,320 --> 00:07:20,560
That's not really the first place I look.

166
00:07:20,560 --> 00:07:22,520
Power Platform, default environment,

167
00:07:22,520 --> 00:07:24,520
all their tenant settings and power platform

168
00:07:24,520 --> 00:07:25,560
app and sensor.

169
00:07:25,560 --> 00:07:27,560
You can get a quick read of someone's maturity,

170
00:07:27,560 --> 00:07:30,160
I think just looking at those two places, I reckon.

171
00:07:30,160 --> 00:07:36,240
So, that was, I think you, you got a new job tomorrow

172
00:07:36,240 --> 00:07:39,400
in the company and they give you,

173
00:07:39,400 --> 00:07:42,800
a wonderful, completely un-gave on tenant.

174
00:07:42,800 --> 00:07:45,760
What's the first, you will look at.

175
00:07:45,760 --> 00:07:48,120
What's the first thing I do?

176
00:07:48,120 --> 00:07:54,160
I've taught the tenant settings out to make sure people

177
00:07:54,160 --> 00:07:55,280
should only do what they want to do

178
00:07:55,280 --> 00:07:58,440
from a tenant perspective who can create environments.

179
00:07:58,440 --> 00:08:03,320
Should we allow our tenant to talk to another tenant

180
00:08:03,320 --> 00:08:04,920
using the Power Platform tools?

181
00:08:04,920 --> 00:08:07,880
So those high level settings, I get done first.

182
00:08:07,880 --> 00:08:09,920
And then I probably look to put some fake loss prevention

183
00:08:09,920 --> 00:08:10,760
in place.

184
00:08:10,760 --> 00:08:13,360
One of my favorite subjects with Power Platform governance

185
00:08:13,360 --> 00:08:16,640
is how we enable what APIs can be called in an app

186
00:08:16,640 --> 00:08:18,760
or a flow or an agent.

187
00:08:18,760 --> 00:08:20,560
And I'm fortunate, I have lots of companies

188
00:08:20,560 --> 00:08:22,320
that have had so much activity.

189
00:08:22,320 --> 00:08:24,480
You've got to spend a lot of time on picking that

190
00:08:24,480 --> 00:08:27,400
and what ones are we going to allow and not aware

191
00:08:27,400 --> 00:08:29,080
or we're going to upset people.

192
00:08:29,080 --> 00:08:32,000
So if I had a completely green filled tenant,

193
00:08:32,000 --> 00:08:34,560
you could put some policies in place straightaway,

194
00:08:34,560 --> 00:08:36,600
zero impact on the users because nobody

195
00:08:36,600 --> 00:08:37,840
will be using it yet.

196
00:08:37,840 --> 00:08:41,120
And you put that control in place straightaway to say,

197
00:08:41,120 --> 00:08:43,880
which APIs people can't use on a daily basis

198
00:08:43,880 --> 00:08:45,400
in their Power Platform solutions.

199
00:08:45,400 --> 00:08:47,280
And those are just two things.

200
00:08:47,280 --> 00:08:49,240
Unfortunately, I don't cover across that scenario

201
00:08:49,240 --> 00:08:51,600
about these days of a green filled tenant.

202
00:08:51,600 --> 00:08:52,680
And that would be lovely, wouldn't it?

203
00:08:52,680 --> 00:08:55,240
But I think the reality is that most of us work

204
00:08:55,240 --> 00:08:56,720
in the governance space.

205
00:08:56,720 --> 00:08:58,200
I'll probably work in the customers that

206
00:08:58,200 --> 00:09:01,200
have had a lot of years of activity each on pick

207
00:09:01,200 --> 00:09:02,040
and upper-cut.

208
00:09:02,040 --> 00:09:06,600
[END PLAYBACK]

209
00:09:06,600 --> 00:09:09,080
A governance pick or they are thinking,

210
00:09:09,080 --> 00:09:13,960
it's slowing down innovation.

211
00:09:13,960 --> 00:09:19,680
Why they have these mindset, why is this dangerous,

212
00:09:19,680 --> 00:09:24,720
and how can we change this mindset?

213
00:09:24,720 --> 00:09:25,680
It's a good question.

214
00:09:25,680 --> 00:09:31,240
I think seeing the art of possible, I think that can kind of help

215
00:09:31,240 --> 00:09:33,400
sort of switch it around a little bit to say,

216
00:09:33,400 --> 00:09:36,040
well look, these tools can be really positive.

217
00:09:36,040 --> 00:09:37,520
And we want people to start using them,

218
00:09:37,520 --> 00:09:40,360
racing, just making sure they do it safely, right?

219
00:09:40,360 --> 00:09:42,640
I think they can be very quick to kind of switch off and go,

220
00:09:42,640 --> 00:09:45,080
no, we're not going to touch any of that stuff.

221
00:09:45,080 --> 00:09:48,800
And I think also some people might have a bit more comfort

222
00:09:48,800 --> 00:09:53,600
in going to spend more money on it and out of the box,

223
00:09:53,600 --> 00:09:55,880
ready-made solution that might solve one or two

224
00:09:55,880 --> 00:09:59,040
business problems because maybe that's an old school way

225
00:09:59,040 --> 00:10:01,280
of doing things where we're going to get a support contract

226
00:10:01,280 --> 00:10:03,560
if things go wrong and it's not the other--

227
00:10:03,560 --> 00:10:06,040
maybe that ethos are letting your business people

228
00:10:06,040 --> 00:10:07,680
actually go out of the solutions.

229
00:10:07,680 --> 00:10:10,520
But I want the other people who are trying to use to make

230
00:10:10,520 --> 00:10:15,680
change that mentality is the people closest to the processes

231
00:10:15,680 --> 00:10:20,280
that need automating are the ones already in your business.

232
00:10:20,280 --> 00:10:22,360
They're not ones that are third-party company

233
00:10:22,360 --> 00:10:23,960
that are going to be sprayed a lot of money to come

234
00:10:23,960 --> 00:10:25,000
and help you.

235
00:10:25,000 --> 00:10:26,640
It's your money that you issue, you people

236
00:10:26,640 --> 00:10:28,480
on the ground doing the work.

237
00:10:28,480 --> 00:10:31,720
So if they can identify a process in rubbish

238
00:10:31,720 --> 00:10:35,680
and you give them the tools to go and help them automate it,

239
00:10:35,680 --> 00:10:39,440
that I have seen a few times before help shift that mind

240
00:10:39,440 --> 00:10:41,680
to actually, if we innovate.

241
00:10:41,680 --> 00:10:44,480
And if we start small, we do a couple of little use cases

242
00:10:44,480 --> 00:10:47,360
and see how we get on dipitose in the water,

243
00:10:47,360 --> 00:10:49,280
I think that can be really positive to start

244
00:10:49,280 --> 00:10:51,560
on locking the bigger opportunities

245
00:10:51,560 --> 00:10:55,040
that low-conastered welfare in the power platform.

246
00:10:55,040 --> 00:10:59,160
And when we think about an environment strategy,

247
00:10:59,160 --> 00:11:02,080
how important is this topic?

248
00:11:02,080 --> 00:11:04,280
Huge, I think.

249
00:11:04,280 --> 00:11:08,520
And this is where someone that's more developer-focused

250
00:11:08,520 --> 00:11:12,160
experience comes into play again with that.

251
00:11:12,160 --> 00:11:15,720
I may co-ignore in your organisation as a new to power platform.

252
00:11:15,720 --> 00:11:18,560
They won't understand the concepts of development,

253
00:11:18,560 --> 00:11:20,040
test, and production.

254
00:11:20,040 --> 00:11:22,600
People working on IT are quite familiar with those concepts,

255
00:11:22,600 --> 00:11:24,400
because we've been in there for years.

256
00:11:24,400 --> 00:11:27,160
But understanding the different roles in those environments

257
00:11:27,160 --> 00:11:30,400
is where we build, this is where we test,

258
00:11:30,400 --> 00:11:32,520
this is our separate production version.

259
00:11:32,520 --> 00:11:35,360
We do this, so we maintain the integrity,

260
00:11:35,360 --> 00:11:37,200
we manage change properly.

261
00:11:37,200 --> 00:11:41,000
So I understand what an environment strategy should look like.

262
00:11:41,000 --> 00:11:42,480
It's really important.

263
00:11:42,480 --> 00:11:43,840
It's one of the key things that I do

264
00:11:43,840 --> 00:11:46,120
in my customers at the moment is how I understand,

265
00:11:46,120 --> 00:11:48,280
okay, well, here's a play space

266
00:11:48,280 --> 00:11:50,280
where you can go and just try things out.

267
00:11:50,280 --> 00:11:51,960
You need to have a different area

268
00:11:51,960 --> 00:11:53,360
for your production solutions.

269
00:11:53,360 --> 00:11:55,400
They're going to be licensed and supported

270
00:11:55,400 --> 00:11:57,600
and sunsetted or whatever else.

271
00:11:57,600 --> 00:12:00,400
So that's always one of the first things to kind of,

272
00:12:00,400 --> 00:12:04,520
I think, get quite right to help people understand

273
00:12:04,520 --> 00:12:07,800
how big the solution is and what kind of best practices

274
00:12:07,800 --> 00:12:08,440
they need to follow.

275
00:12:08,440 --> 00:12:12,440
And usually that starts with a good environment strategy, isn't it?

276
00:12:12,440 --> 00:12:13,960
Yeah.

277
00:12:13,960 --> 00:12:20,280
When I think, yeah, there it is.

278
00:12:20,280 --> 00:12:23,280
Yeah.

279
00:12:23,280 --> 00:12:25,640
The key policies, what we say,

280
00:12:25,640 --> 00:12:28,480
are one of those things people ignore,

281
00:12:28,480 --> 00:12:30,880
until there's the problem.

282
00:12:30,880 --> 00:12:35,680
And I think often it's, it's no, yeah, the leadership

283
00:12:35,680 --> 00:12:38,520
will not invest, will spend time there.

284
00:12:38,520 --> 00:12:43,240
How do you explain this value to the leadership team

285
00:12:43,240 --> 00:12:45,800
that they invest, what time?

286
00:12:45,800 --> 00:12:50,240
Normally when it comes to trying to rectify a tenant picture,

287
00:12:50,240 --> 00:12:53,880
if we're looking to try and implement the LP.

288
00:12:53,880 --> 00:12:57,640
I've learned over the years to try and change my language a little bit.

289
00:12:57,640 --> 00:13:00,880
If we're talking to more senior stakeholders,

290
00:13:00,880 --> 00:13:02,600
talking in words they might understand.

291
00:13:02,600 --> 00:13:05,920
So risk, might be one of them.

292
00:13:05,920 --> 00:13:11,080
What is the risk of not putting a power platform policy in place?

293
00:13:11,080 --> 00:13:14,480
And I've seen lots of horrendous examples over the years

294
00:13:14,480 --> 00:13:19,240
of what can happen if the power platform is left uncontrolled

295
00:13:19,240 --> 00:13:22,920
with no policies, people will do stupid stuff.

296
00:13:22,920 --> 00:13:25,120
Now is everyone in your organization

297
00:13:25,120 --> 00:13:26,160
going to do stupid stuff?

298
00:13:26,160 --> 00:13:29,840
No, because most people are going to be quite sensible with the tools.

299
00:13:29,840 --> 00:13:32,760
So the opportunity isn't going to be, it's there,

300
00:13:32,760 --> 00:13:35,480
but not many people are going to be silly.

301
00:13:35,480 --> 00:13:39,480
But what is the impact, if that one person's size to be silly?

302
00:13:39,480 --> 00:13:43,520
Well, we could have a big data find if we've leaked data

303
00:13:43,520 --> 00:13:47,080
or we could be exposing information to people we should be exposing to.

304
00:13:47,080 --> 00:13:52,240
And what is the risk of not mitigating some of these things?

305
00:13:52,240 --> 00:13:54,440
I think that's kind of, sends me a good thing of,

306
00:13:54,440 --> 00:13:58,440
well, actually, yes, that helps to get the buy-in of,

307
00:13:58,440 --> 00:14:00,240
let's make sure the platform is secure,

308
00:14:00,240 --> 00:14:02,280
because we can't control it really,

309
00:14:02,280 --> 00:14:06,120
because Microsoft have given our employees the keys to the Kingdom.

310
00:14:06,120 --> 00:14:08,080
We can kind of put some guardrails in places

311
00:14:08,080 --> 00:14:10,280
to kind of limit the stupid stuff they can do.

312
00:14:10,280 --> 00:14:13,160
So talking to a language, I think, can kind of help.

313
00:14:13,160 --> 00:14:14,320
If any of them are lower level,

314
00:14:14,320 --> 00:14:19,640
you can talk a bit more about APIs and payloads and JSON or whatever else.

315
00:14:19,640 --> 00:14:22,920
And what a connector actually doesn't do and how to work with it

316
00:14:22,920 --> 00:14:25,560
and not work with it and output policy in place.

317
00:14:25,560 --> 00:14:28,840
But for more senior stakeholders, I think risk is always a pretty,

318
00:14:28,840 --> 00:14:31,360
pretty important one to focus on first.

319
00:14:31,360 --> 00:14:33,080
That great key.

320
00:14:33,080 --> 00:14:38,560
You are often talk about enabling people rather than restrict them.

321
00:14:38,560 --> 00:14:44,280
What do a successful enablement actually looks like?

322
00:14:44,280 --> 00:14:46,280
Art loads.

323
00:14:46,280 --> 00:14:49,280
I mean, even I don't get it if right all the time,

324
00:14:49,280 --> 00:14:52,280
because I'm still not quite technical.

325
00:14:52,280 --> 00:14:56,280
But I think trying to take the tech away from it sometimes can be really helpful.

326
00:14:56,280 --> 00:15:01,280
And just helping people lead them to understand the technology themselves

327
00:15:01,280 --> 00:15:03,280
and the benefit it can have for them,

328
00:15:03,280 --> 00:15:06,280
rather than almost doing that sort of enforcement of,

329
00:15:06,280 --> 00:15:08,280
here is a tool you must go and use to,

330
00:15:08,280 --> 00:15:10,280
try to bring the people to the technology

331
00:15:10,280 --> 00:15:12,280
and helping them understand the benefits of it.

332
00:15:12,280 --> 00:15:15,280
This trying to create those internal communities really as well.

333
00:15:15,280 --> 00:15:17,280
And people can share, honestly,

334
00:15:17,280 --> 00:15:19,280
see, share the cool things they're doing.

335
00:15:19,280 --> 00:15:22,280
I've worked with organisations where we try to kind of say,

336
00:15:22,280 --> 00:15:25,280
you guys and girls are building some apps and flows.

337
00:15:25,280 --> 00:15:28,280
Let's bring you all together, let's share that experience.

338
00:15:28,280 --> 00:15:31,280
Let's kind of go on this sort of journey, if you like, together.

339
00:15:31,280 --> 00:15:33,280
And actually enable each other,

340
00:15:33,280 --> 00:15:36,280
because I think sometimes word of mouth can be really, really useful.

341
00:15:36,280 --> 00:15:37,280
As a tool internally,

342
00:15:37,280 --> 00:15:39,280
it's not always about IT,

343
00:15:39,280 --> 00:15:42,280
it's always about IT, I've told me to go and use the power platform.

344
00:15:42,280 --> 00:15:43,280
It might be, you know,

345
00:15:43,280 --> 00:15:45,280
your colleagues sitting next to you going, hey,

346
00:15:45,280 --> 00:15:46,280
I just built this awesome thing,

347
00:15:46,280 --> 00:15:48,280
I've built this app on a rather precious spot

348
00:15:48,280 --> 00:15:49,280
and it goes and does this.

349
00:15:49,280 --> 00:15:50,280
And then the person next to me,

350
00:15:50,280 --> 00:15:52,280
"Wow, how did you do that?"

351
00:15:52,280 --> 00:15:55,280
So just trying to focus it in around the people, really.

352
00:15:55,280 --> 00:15:59,280
If you can make them understand the benefits,

353
00:15:59,280 --> 00:16:04,280
if you can get them some efficient with using the tools as well,

354
00:16:04,280 --> 00:16:06,280
that's, I think, where you can really start seeing it enabled, right?

355
00:16:06,280 --> 00:16:09,280
That's something I love doing is working with customers that

356
00:16:09,280 --> 00:16:11,280
I don't build anything for them.

357
00:16:11,280 --> 00:16:13,280
I help them to build,

358
00:16:13,280 --> 00:16:17,280
even if it's a really simple use case that I've done a thousand times.

359
00:16:17,280 --> 00:16:20,280
It might be a bit boring and not really challenging for me,

360
00:16:20,280 --> 00:16:22,280
but it's brand new to someone else.

361
00:16:22,280 --> 00:16:24,280
And hearing their,

362
00:16:24,280 --> 00:16:27,280
"Wow, that amazement when you show them a power to make flow,

363
00:16:27,280 --> 00:16:30,280
or a gallery and a canvas app,

364
00:16:30,280 --> 00:16:34,280
and understanding how something so small like that can change

365
00:16:34,280 --> 00:16:36,280
the way they work and improve stuff,

366
00:16:36,280 --> 00:16:39,280
and you're giving them skills to get and build these things themselves

367
00:16:39,280 --> 00:16:42,280
the next time, I think that kind of stuff is also my love for hearing them,

368
00:16:42,280 --> 00:16:44,280
so that stuff is good.

369
00:16:44,280 --> 00:16:48,280
And what separates our company's organization

370
00:16:48,280 --> 00:16:52,280
that's succeed with citizen development from the,

371
00:16:52,280 --> 00:16:56,280
yeah, from the old one who fails from your perspective?

372
00:16:56,280 --> 00:16:57,280
Good question.

373
00:16:57,280 --> 00:17:01,280
I think one of the most important parts of me having a sponsor

374
00:17:01,280 --> 00:17:03,280
at a more senior level,

375
00:17:03,280 --> 00:17:06,280
someone is really brought into the platform,

376
00:17:06,280 --> 00:17:08,280
what it can do, its capabilities.

377
00:17:08,280 --> 00:17:11,280
I think if you don't have that support from up top,

378
00:17:11,280 --> 00:17:14,280
and you're trying to drive it from a lower level,

379
00:17:14,280 --> 00:17:16,280
I think it'd be quite difficult.

380
00:17:16,280 --> 00:17:20,280
So it'd say that would be one of the key things is good in.

381
00:17:20,280 --> 00:17:23,280
Your senior management involved getting a business sponsor is

382
00:17:23,280 --> 00:17:27,280
going to kind of back the program of work to try and improve the way you work.

383
00:17:27,280 --> 00:17:30,280
I think that's probably one of the most important things to kind of help succeed.

384
00:17:30,280 --> 00:17:32,280
And again, just bringing people with you,

385
00:17:32,280 --> 00:17:35,280
don't enforce it, you have to sort of try and encourage it

386
00:17:35,280 --> 00:17:37,280
and help people understand what the benefits are.

387
00:17:37,280 --> 00:17:39,280
And you know, these things here are,

388
00:17:39,280 --> 00:17:43,280
I hear to take the jobs, it's there here to kind of help you do your jobs quicker

389
00:17:43,280 --> 00:17:45,280
and faster, seeking new focus and some other stuff.

390
00:17:45,280 --> 00:17:49,280
But yeah, I think it all starts with that leadership buy-in

391
00:17:49,280 --> 00:17:51,280
to say, yeah, we're going to go and do this,

392
00:17:51,280 --> 00:17:54,280
because that's probably really going to help filter downwards then.

393
00:17:54,280 --> 00:17:57,280
Yeah, I often talk with companies,

394
00:17:57,280 --> 00:18:01,280
and here in Germany, especially they say,

395
00:18:01,280 --> 00:18:08,280
oh, the best thing to have no shadow IT is we don't allow to use power plot

396
00:18:08,280 --> 00:18:10,280
from power pages and so on.

397
00:18:10,280 --> 00:18:15,280
And then I say, okay, then you have a shadow IT zero,

398
00:18:15,280 --> 00:18:20,280
but oh, because then it's out of your environment.

399
00:18:20,280 --> 00:18:29,280
How can companies, when they enable power platform for their users,

400
00:18:29,280 --> 00:18:32,280
prevent shadow IT?

401
00:18:32,280 --> 00:18:37,280
But it's quite difficult to prevent shadow IT in the power platform,

402
00:18:37,280 --> 00:18:39,280
because everything is on by default.

403
00:18:39,280 --> 00:18:42,280
So whether you like it or not,

404
00:18:42,280 --> 00:18:44,280
people will have a dad one, use it,

405
00:18:44,280 --> 00:18:46,280
because they haven't had to go and log a ticket to say,

406
00:18:46,280 --> 00:18:48,280
please, can I have access to the power platform?

407
00:18:48,280 --> 00:18:50,280
It's there from day one.

408
00:18:50,280 --> 00:18:54,280
So I think we have actually on the panic re- and podcast,

409
00:18:54,280 --> 00:18:58,280
I do have Emma Claire sure, we have a little thing at the end about,

410
00:18:58,280 --> 00:19:01,280
you know, a shadow IT, a good or a bad thing.

411
00:19:01,280 --> 00:19:03,280
I think in the instance of the power platform,

412
00:19:03,280 --> 00:19:05,280
I think it can be a good thing,

413
00:19:05,280 --> 00:19:10,280
because it's identifying people that have been told about the power platform

414
00:19:10,280 --> 00:19:12,280
by anyone in the company,

415
00:19:12,280 --> 00:19:16,280
have just sort of found it in their own day jobs,

416
00:19:16,280 --> 00:19:19,280
and they might have come across an article or YouTube video,

417
00:19:19,280 --> 00:19:24,280
and they've started to try and mock up a process or an app or flow to improve how they work.

418
00:19:24,280 --> 00:19:29,280
I wouldn't have known about that person's interest in the power platform,

419
00:19:29,280 --> 00:19:33,280
had that sort of element of shadow IT not been there in the first place.

420
00:19:33,280 --> 00:19:35,280
So I think in terms of purpose in the power platform,

421
00:19:35,280 --> 00:19:38,280
because we can't control it fully,

422
00:19:38,280 --> 00:19:41,280
actually having that pocket to shadow IT can be quite a good thing,

423
00:19:41,280 --> 00:19:44,280
because it could be a new champion in my community

424
00:19:44,280 --> 00:19:47,280
that can help other people build an app or flow.

425
00:19:47,280 --> 00:19:51,280
It can help me identify areas of the business that might have some challenges

426
00:19:51,280 --> 00:19:53,280
that I would have previously aware of,

427
00:19:53,280 --> 00:19:56,280
and what can we do to help, and how can we bring them along?

428
00:19:56,280 --> 00:19:59,280
So I don't think we could stop it in terms of the power platform.

429
00:19:59,280 --> 00:20:04,280
It's how do we sort of harness it to kind of make sure we're meeting those,

430
00:20:04,280 --> 00:20:08,280
those objectives that we need to for the company, right?

431
00:20:08,280 --> 00:20:14,280
And what changes one's power platform moves from, I say,

432
00:20:14,280 --> 00:20:20,280
a small team experiment into enterprise by that gene?

433
00:20:20,280 --> 00:20:22,280
Good question.

434
00:20:22,280 --> 00:20:26,280
I think it's not something you do overnight, first and foremost.

435
00:20:26,280 --> 00:20:31,280
I think you've got to, if you planted those seeds, you've got to water them, right?

436
00:20:31,280 --> 00:20:35,280
So if there's a pocket of people in your organization that are using them,

437
00:20:35,280 --> 00:20:39,280
okay, Al-Kanay on board one person each,

438
00:20:39,280 --> 00:20:43,280
and how can those people on board one person each so they can start?

439
00:20:43,280 --> 00:20:46,280
Again, that word amount, I think, can be quite powerful to help it grow.

440
00:20:46,280 --> 00:20:49,280
In terms of the actual technology stack of the seed, you know,

441
00:20:49,280 --> 00:20:52,280
there's an awful lot you could do at an enterprise level,

442
00:20:52,280 --> 00:20:56,280
building a solution that lots of people will end up using,

443
00:20:56,280 --> 00:20:58,280
being involved in that whole life cycle of,

444
00:20:58,280 --> 00:21:00,280
that could also help with that wider adoption,

445
00:21:00,280 --> 00:21:05,280
if most of your organization are using those tools on a day-to-day basis.

446
00:21:05,280 --> 00:21:08,280
But then you've also got out again, that commitment for up top,

447
00:21:08,280 --> 00:21:12,280
to say, well, if you're going to use the power platform across your whole enterprise,

448
00:21:12,280 --> 00:21:16,280
you can't just have one person behind the scene supporting it.

449
00:21:16,280 --> 00:21:18,280
Who's going to look after the governance?

450
00:21:18,280 --> 00:21:21,280
Who's going to do your solution deployments from deaf to test the broad?

451
00:21:21,280 --> 00:21:24,280
Who's going to be around to fix things, if things break?

452
00:21:24,280 --> 00:21:27,280
What if someone logs a ticket about one of your solutions?

453
00:21:27,280 --> 00:21:29,280
Who does he go to?

454
00:21:29,280 --> 00:21:32,280
So if you're going to focus on the enterprise adoption,

455
00:21:32,280 --> 00:21:35,280
you also need enterprise level support, I'm with the hood,

456
00:21:35,280 --> 00:21:37,280
to make sure that the wheels keep turning, right?

457
00:21:37,280 --> 00:21:40,280
If things go wrong, more things need changing and that's,

458
00:21:40,280 --> 00:21:42,280
I think, somewhere, sometimes, some people missed.

459
00:21:42,280 --> 00:21:44,280
I wanted to do the huge adoption,

460
00:21:44,280 --> 00:21:48,280
but haven't perhaps invested in the underlying support to kind of,

461
00:21:48,280 --> 00:21:51,280
you know, be the springboard for adoption as well.

462
00:21:51,280 --> 00:21:55,280
Yeah, I like the Microsoft champion.

463
00:21:55,280 --> 00:22:00,280
Yeah, I like this from the user perspective.

464
00:22:00,280 --> 00:22:05,280
On the leadership side, there it's all, I call it also,

465
00:22:05,280 --> 00:22:09,280
Barsword, it's send off excellence.

466
00:22:09,280 --> 00:22:16,280
Our organization using C.V. Toolkit Effect,

467
00:22:16,280 --> 00:22:22,280
Effective or relying on it too much from the perspective.

468
00:22:22,280 --> 00:22:26,280
I want to ask a very good question, very topical one,

469
00:22:26,280 --> 00:22:28,280
given Microsoft's recent announced from there,

470
00:22:28,280 --> 00:22:33,280
they're not going to actively add any new updates to the C.V. Toolkit, right?

471
00:22:33,280 --> 00:22:35,280
I see a mixture of both, actually, okay.

472
00:22:35,280 --> 00:22:38,280
I see companies that are heavily invested in the C.V. Toolkit.

473
00:22:38,280 --> 00:22:40,280
They use a lot of the functionality,

474
00:22:40,280 --> 00:22:44,280
not just to kind of understand the activity of their estate,

475
00:22:44,280 --> 00:22:48,280
but also to help all to make requests when someone has built an app

476
00:22:48,280 --> 00:22:51,280
and they want you to register it with your business use case

477
00:22:51,280 --> 00:22:55,280
and then it gets approved or rejected and quarantined,

478
00:22:55,280 --> 00:22:59,280
automated ability to request the environment to the OP changes.

479
00:22:59,280 --> 00:23:04,280
I see a lot of customers using quite a lot of the Toolkit quite extensively.

480
00:23:04,280 --> 00:23:09,280
Others, I think, are kind of very limited to just wanting to receive the information

481
00:23:09,280 --> 00:23:11,280
and to understand the activity.

482
00:23:11,280 --> 00:23:14,280
They don't want people to be using parts of the kit,

483
00:23:14,280 --> 00:23:18,280
because they have to license them, that's usually the kind of key constraint.

484
00:23:18,280 --> 00:23:21,280
So, do you see a varied mixture?

485
00:23:21,280 --> 00:23:23,280
I do think that actually is a very good point you make

486
00:23:23,280 --> 00:23:25,280
that people do rely on it quite a lot.

487
00:23:25,280 --> 00:23:29,280
And I think we sort of have to rely on it quite a lot since...

488
00:23:29,280 --> 00:23:32,280
I can't remember exactly when the C.V. Toolkit became a thing.

489
00:23:32,280 --> 00:23:37,280
Let's say 2018/19, or let's say somewhere around there.

490
00:23:37,280 --> 00:23:41,280
And because it's become part of everyone's day-to-day life, if you like,

491
00:23:41,280 --> 00:23:45,280
updating it every month, checking all the flows

492
00:23:45,280 --> 00:23:50,280
that run in, processing the data, you know, we've had that for seven years at least.

493
00:23:50,280 --> 00:23:54,280
So, I think people have naturally relied on it, is that source of truth,

494
00:23:54,280 --> 00:23:58,280
because it's built by Microsoft, and therefore it's the all-seeing eye,

495
00:23:58,280 --> 00:24:00,280
it's going to be perfect.

496
00:24:00,280 --> 00:24:02,280
I think people rely on that an awful lot,

497
00:24:02,280 --> 00:24:05,280
so the news that it's not only going to be updated,

498
00:24:05,280 --> 00:24:09,280
I think maybe hasn't been met very well, because people do rely on it.

499
00:24:09,280 --> 00:24:13,280
And I try to remind people that actually whilst the C.V. Toolkit itself

500
00:24:13,280 --> 00:24:17,280
isn't going to be updated by the power kept even more,

501
00:24:17,280 --> 00:24:21,280
it's still only using stuff that is fully supported by Microsoft.

502
00:24:21,280 --> 00:24:25,280
It's still just using Morrowjiven apps, PowerSmart flows,

503
00:24:25,280 --> 00:24:29,280
ready available APIs that call the Power Apps,

504
00:24:29,280 --> 00:24:31,280
powerSmart and the Power Platform app in APIs.

505
00:24:31,280 --> 00:24:36,280
There's no kind of voodoo going on in custom code or thing like that.

506
00:24:36,280 --> 00:24:40,280
It's all still supported stuff that we can build and extend.

507
00:24:40,280 --> 00:24:45,280
So, actually, we should be relying on the platform, not relying on the Toolkit,

508
00:24:45,280 --> 00:24:49,280
because the platform underpins the Toolkit anyway, right?

509
00:24:49,280 --> 00:24:52,280
Look, all that.

510
00:24:52,280 --> 00:24:55,280
I did that on, Toolkit.

511
00:24:55,280 --> 00:25:03,280
What does the major power platform environment look like for you in 2006?

512
00:25:03,280 --> 00:25:05,280
What is the what, sorry?

513
00:25:05,280 --> 00:25:10,280
A major power platform environment, who looks at for you?

514
00:25:10,280 --> 00:25:13,280
What is a major environment like?

515
00:25:13,280 --> 00:25:17,280
Maturity model.

516
00:25:17,280 --> 00:25:20,280
Oh, what is a mature, good question.

517
00:25:20,280 --> 00:25:23,280
That's a great question.

518
00:25:23,280 --> 00:25:27,280
I think lots of healthy solutions being used.

519
00:25:27,280 --> 00:25:31,280
The buy-net I mean, this is just one metric, by the way.

520
00:25:31,280 --> 00:25:36,280
I walk into a company and I can see they've got 10,000 flows.

521
00:25:36,280 --> 00:25:41,280
But if only 500 of them are providing value to the business is what,

522
00:25:41,280 --> 00:25:44,280
what are the other 9,500 doing?

523
00:25:44,280 --> 00:25:46,280
So, it's a good level of maturity.

524
00:25:46,280 --> 00:25:50,280
You might not necessarily be the volume of assets in the tenant.

525
00:25:50,280 --> 00:25:53,280
It will be how many of them are providing value to the business.

526
00:25:53,280 --> 00:25:55,280
And that could just be a value to you and me.

527
00:25:55,280 --> 00:25:58,280
They built a very simple solution just to you and I.

528
00:25:58,280 --> 00:26:01,280
So, I know track is going to get put the kettle on a t-brake.

529
00:26:01,280 --> 00:26:04,280
I know it's not really simple, but it adds value to what we do.

530
00:26:04,280 --> 00:26:08,280
Right up to solutions that are being used across the organization.

531
00:26:08,280 --> 00:26:14,280
So, I'd say like a good level of maturity will be how active are these solutions being used.

532
00:26:14,280 --> 00:26:23,280
And is the power platform that go to tall to fix a business problem makes me better?

533
00:26:23,280 --> 00:26:27,280
Like we've always just kind of, I need to do some numbers, I'll open Excel.

534
00:26:27,280 --> 00:26:31,280
The level of maturity might be, I need to automate something or eat a provider form.

535
00:26:31,280 --> 00:26:33,280
I'll go build a power.

536
00:26:33,280 --> 00:26:36,280
If that is become that strategic or point from up top,

537
00:26:36,280 --> 00:26:39,280
then this is the tool set we're going to go and use.

538
00:26:39,280 --> 00:26:41,280
People's natural reaction is to,

539
00:26:41,280 --> 00:26:45,280
go to use the power platform to sell that specific problem.

540
00:26:45,280 --> 00:26:48,280
Maybe that could be a good sign of maturity as well.

541
00:26:48,280 --> 00:26:51,280
And people actively involved in the community talking about the products,

542
00:26:51,280 --> 00:26:54,280
helping each other to kind of build cool stuff.

543
00:26:54,280 --> 00:26:56,280
I think that might potentially be another good sign as well, right?

544
00:26:56,280 --> 00:27:02,280
Yeah, I like deep dive more in mid metrics and indicators.

545
00:27:02,280 --> 00:27:10,280
What, yeah, Matrix and Dedicators tell you the power platform adaption strategy strategy.

546
00:27:10,280 --> 00:27:14,280
Oh, damn, it's actually working.

547
00:27:14,280 --> 00:27:17,280
Yeah, again, there's always a bit to talk to you,

548
00:27:17,280 --> 00:27:19,280
something like stuff as well.

549
00:27:19,280 --> 00:27:25,280
I think it might be, let's say for argument, say tracking the number of times an app has been opened in the past.

550
00:27:25,280 --> 00:27:33,280
And that has been opened and used tracking the number of conversion rates between an open and the record being created or something like that.

551
00:27:33,280 --> 00:27:41,280
License consumption might be another metric, which might become more and more important as more and more of the platform moves into pretty capacity.

552
00:27:41,280 --> 00:27:46,280
Maybe tracking your license, not just license spend over time,

553
00:27:46,280 --> 00:27:49,280
but are people actively using those licenses?

554
00:27:49,280 --> 00:27:51,280
Maybe that could be another metric as well.

555
00:27:51,280 --> 00:27:54,280
I've worked with companies to build a custom thing in the past of.

556
00:27:54,280 --> 00:28:04,280
Let's get a list of other people with a license and let's match that against security compliance or purview reports to say how many people are actually opening these apps.

557
00:28:04,280 --> 00:28:12,280
The need of license and go, well, we've got a hundred people with a license, 50 people using an app, therefore 50% difference, another look.

558
00:28:12,280 --> 00:28:14,280
Yeah, sometimes it'd be good.

559
00:28:14,280 --> 00:28:18,280
This is good measurable stuff that's tangible that's easy to see, isn't it?

560
00:28:18,280 --> 00:28:27,280
Numbers going up or down that people can kind of have a quick eye on and go, yeah, things are being well used or not used or whatever else, right?

561
00:28:27,280 --> 00:28:35,280
When we look a little bit, yeah, actually, you're in the future, which rule will I play in the power platform?

562
00:28:35,280 --> 00:28:41,280
I'm hoping it will take away some of the administrative burden. That would be quite nice.

563
00:28:41,280 --> 00:29:04,280
In terms of, I mean, there's some things that people are doing in the community now with, using the new power platform, eventually API and sort of loading into different interfaces where people can quickly see, you know, the different settings they've got, app activity, what environments belong to who, how many apps and frozen in those environments.

564
00:29:04,280 --> 00:29:15,280
We already started to see some AI infused solutions that are probably going to be the next level of the toolkit. It's not going to be flows and data into tables is going to be the right windows in.

565
00:29:15,280 --> 00:29:20,280
And how can we use MCP service to go and query these things and make changes.

566
00:29:20,280 --> 00:29:24,280
So we haven't got to go and use that the power platform admin interface.

567
00:29:24,280 --> 00:29:33,280
Maybe we can start with a chatbot to say, on agent, sorry, to say, can you change this setting from A to B and using an MCP server in the back end?

568
00:29:33,280 --> 00:29:50,280
And then we can make that change and do that kind of stuff. So I'm hoping that infusing, if you look across all the stuff on YouTube and stuff in the neighborhood, it's always about AI to improve building an app or building a flow, building an agent would do those things quicker.

569
00:29:50,280 --> 00:30:04,280
Now as we just as important to admins, because we work to do loads of stuff manually, it will be, they'll still be human in the loop and in administrative checking the settings of work, but using AI interfaces and tools to speed up the process.

570
00:30:04,280 --> 00:30:08,280
I think to me really, really vital is a couple years.

571
00:30:08,280 --> 00:30:25,280
And you're also involved in co pilot studio and AI see what excited you most about where Microsoft is, yeah, adding with the AI.

572
00:30:25,280 --> 00:30:38,280
I'm most excited about this good question. I just think, like, the general capabilities of what's possible now versus what wasn't. And I come from working with co pilot studio now.

573
00:30:38,280 --> 00:30:49,280
Some of you might know that it was used to be called power virtual agents, wasn't it, many years ago? Well, when did that come out 2019, 20, kind of time, I think it's before COVID, I remember now.

574
00:30:49,280 --> 00:30:59,280
So to see what it was then, it's basically just a chat interface with essentially hard code and stuff in the background, back to it, just topics.

575
00:30:59,280 --> 00:31:06,280
Seeing all the things that can now do a generative AI, created documents from natural language.

576
00:31:06,280 --> 00:31:12,280
And I think the new thing was really an ask the other day about business skills is a preview feature.

577
00:31:12,280 --> 00:31:20,280
I've been able to save skills in the date of a table that agents can then find using the date of a 70 piece over there.

578
00:31:20,280 --> 00:31:31,280
That's what really excited. I love skills skills are awesome. But now to write that kind of custom markdown, father say go and do something in this format in this particular way.

579
00:31:31,280 --> 00:31:43,280
So we're designing a process in house at the moment, it will take a requirement for a solution, and we've got different skills at the different roles. So run it through the presale skill, give me a high level overview of what questions I need to ask.

580
00:31:43,280 --> 00:31:53,280
They run it for an architect skill that will go and present me a lend stipulation, ship, and diagram and understand when I'm moving parts, you might be on the solution.

581
00:31:53,280 --> 00:32:03,280
Then there might be a documentation skill that I'll go and build with some solution documentation wants to finish. So that kind of stuff really excites me about how can we.

582
00:32:03,280 --> 00:32:16,280
We don't necessarily want to be 100% generative all the time when he answers it with different skills might be that sort of thing of right it generates things but within a framework of insumid consistency within some sort of standards and templates.

583
00:32:16,280 --> 00:32:34,280
I really excited to see a where skills go, both with copilot co work and how we can then use those and copilot studio agent. So yeah, I do like a couple of good skills. So that's what I'm really excited to see what more evolves into there. So I think that could be to really excited stuff.

584
00:32:34,280 --> 00:32:52,280
Yeah, I found a little bit governance or GSC was a little bit. Yeah, it's it was somewhere in the darkest room and companies close, close it in the dark room.

585
00:32:52,280 --> 00:33:06,280
They put a deck on on the stage. So I find that's really interesting. Did you think in the age of AI governance changed?

586
00:33:06,280 --> 00:33:22,280
I think so from a takeaway in a tech, I think there needs to be more awareness around data security.

587
00:33:22,280 --> 00:33:27,280
I think we perhaps got into a lot of I take back to an early conversation we had.

588
00:33:27,280 --> 00:33:33,280
There was used to be a resistance of moving from one premise to the cloud when the cloud was first the thing.

589
00:33:33,280 --> 00:33:39,280
Now everyone's adopted the cloud. I think we've now adopted some complacency with the cloud.

590
00:33:39,280 --> 00:33:50,280
So we've got into bad habits of light. Wow, I'm just going to share this document with everyone. I'll just give you full control out of my SharePoint site because I don't really know what the other questions do.

591
00:33:50,280 --> 00:33:54,280
So actually with AI I've taken a step back and go.

592
00:33:54,280 --> 00:34:01,280
We've got all this data in our tenant across SharePoint, one drive team, SQL server, whatever else.

593
00:34:01,280 --> 00:34:08,280
And we might have overshared it over the last 10 years and just not really known because we had nothing to expose the risk.

594
00:34:08,280 --> 00:34:15,280
AI is now amplifying massively all this potential security for laws.

595
00:34:15,280 --> 00:34:34,280
And I think that's the important shift for abmins is especially is one understanding that wider breadth and two, there's lots of different systems and then go and minister if you look at a lower level agent governance is done in power platform, happen sensor agents might look at SharePoint.

596
00:34:34,280 --> 00:34:41,280
We might be to apply sensitivity enables to our SharePoint information so we can allow our agents or anything she wants needed.

597
00:34:41,280 --> 00:34:45,280
Okay, but we're now looking to get looking for a view and start looking at sensitivity labels.

598
00:34:45,280 --> 00:34:49,280
Oh, we want to ingest some new models across K pilot.

599
00:34:49,280 --> 00:34:52,280
Okay, well that's the Microsoft 365 happen center.

600
00:34:52,280 --> 00:34:58,280
If you in UK you might have been able to save one for a pick or XAI or whatever else.

601
00:34:58,280 --> 00:35:09,280
So I think it's broader strokes in terms of that governance piece way I know and almost having to re learn or reestablish some of the underlying principles such as zero trust.

602
00:35:09,280 --> 00:35:15,280
And you know that eFoss have pretending everyone thinking everyone's a hacker now to get later out of your tenant.

603
00:35:15,280 --> 00:35:27,280
I think maybe we sort of lapsed a little bit on some of those underlying IT principles of security that I think we need to go and re learn or just reassess a week round ourselves in.

604
00:35:27,280 --> 00:35:34,280
So we were looking at that wider security data architecture piece to support AI.

605
00:35:34,280 --> 00:35:41,280
We're doing it for the right mindsets of security and principle at least privilege and so on and so forth.

606
00:35:41,280 --> 00:35:43,280
So I think AI is wicked.

607
00:35:43,280 --> 00:35:46,280
I think it's given admins more to do.

608
00:35:46,280 --> 00:35:49,280
And that's the end that's the challenge and then comes from most come with a moment of thing, right?

609
00:35:49,280 --> 00:35:53,280
We all want to do the fun stuff, but are we doing it safely?

610
00:35:53,280 --> 00:36:03,280
Something we see quite a lot people on a work laptop and they got access to chat to TTP are they taking work data from their teams environment and sticking into chat to TTP?

611
00:36:03,280 --> 00:36:10,280
Are they leaking company data sensitive? Can we lock that down? Are they then going to go into the first or laptop to process?

612
00:36:10,280 --> 00:36:15,280
That's where you need to start thinking about that enablement of people are always find a way.

613
00:36:15,280 --> 00:36:26,280
Let's make sure we give companies that right way, make sure it's government will happen, but we still need to kind of make sure these texts will be the text will be what a doctor in our walls as well, right?

614
00:36:26,280 --> 00:36:27,280
Yeah.

615
00:36:27,280 --> 00:36:38,280
You are very active in the Microsoft community and a lot of my previous guests say, oh, Craig might you need to invite.

616
00:36:38,280 --> 00:36:46,280
So why you must go in the panic room to record your podcast?

617
00:36:46,280 --> 00:36:56,280
I think well, the name came up from the panic room in terms of power platform and especially know if they are, it could be quite scary.

618
00:36:56,280 --> 00:37:00,280
There's a lot going on. Let me just talk about the landscape is massive.

619
00:37:00,280 --> 00:37:12,280
You used to be as a power platform administrator, you could get away with creating some environments as your environment strategy looking after the see we talk it and that was your job.

620
00:37:12,280 --> 00:37:18,280
And that's not under play and the value and the importance and the way people were doing nowadays you got to go across different systems.

621
00:37:18,280 --> 00:37:21,280
You've got to manage AI in different places.

622
00:37:21,280 --> 00:37:34,280
And I'm not going to lie, scary. I think most people I talk to are quite overwhelmed by the rate of change, all the admin, the governance, the capabilities that you now have to do.

623
00:37:34,280 --> 00:37:42,280
I find it quite overwhelming on a daily basis, so I can want to imagine what people not in IT must be feeling right now.

624
00:37:42,280 --> 00:37:52,280
So my idea in a panic room was almost just like a safe space away from the noise shut everything out just to kind of talk digest share experiences.

625
00:37:52,280 --> 00:38:02,280
So that's why we kind of name it the panic room because I think now more than ever people need that sort of safe space to then share ideas, learn from each other.

626
00:38:02,280 --> 00:38:05,280
Because they all want to figure this out together, right?

627
00:38:05,280 --> 00:38:14,280
Okay, that's good. You feel safe here live.

628
00:38:14,280 --> 00:38:25,280
Yeah, what advice would you give someone trying to build a career around power platform today?

629
00:38:25,280 --> 00:38:28,280
Stay inquisitive.

630
00:38:28,280 --> 00:38:40,280
And what I mean by that is, don't shut yourself off, just think you know it all, just keep learning, just keep playing around with things, keep clicking buttons, keep working out what things do.

631
00:38:40,280 --> 00:38:45,280
I think that's a really important part when things change so rapidly.

632
00:38:45,280 --> 00:38:56,280
You've got to try and keep base pace of basically kind of ask for difficult and some other bit advice that you to people in this space will be find content creators that you really vibed with.

633
00:38:56,280 --> 00:39:15,280
Now for some people that might be a blogger if you prefer reading content others that might be a podcast because you prefer listening others might be YouTube because you prefer watching whatever it is find that medium that medium sorry that supports what you're trying to learn.

634
00:39:15,280 --> 00:39:25,280
If you really like power automate your current the first time going find the power went specially to Joe on with or a day in your bird or whatever on YouTube alone from their content.

635
00:39:25,280 --> 00:39:29,280
We got to stay inquisitive because these things keep changing so.

636
00:39:29,280 --> 00:39:39,280
Keep trying to learn I think that's the best way in it because I think if you stand still right now you might get left behind a little bit and it's difficult to play catch up.

637
00:39:39,280 --> 00:39:51,280
So I have a look for for some quotes on the internet and I read them and you say what what you think about this code okay.

638
00:39:51,280 --> 00:40:00,280
So governance is about this isn't about stopping people it's about helping them to build safe safely at scale.

639
00:40:00,280 --> 00:40:10,280
Agree 100% I've always the opinion like governance should be able to stop people is should be there to enable people to do it safely so yeah 100%

640
00:40:10,280 --> 00:40:15,280
Citizens in the office are no longer optional inside modern organizations.

641
00:40:15,280 --> 00:40:18,280
I was sorry a citizen.

642
00:40:18,280 --> 00:40:21,280
Citizens in the developer.

643
00:40:21,280 --> 00:40:24,280
No longer optional.

644
00:40:24,280 --> 00:40:37,280
Ask a question I probably say yeah they are another optional we can't keep funneling requests into a central team all the time we've got to and we've got to give people the skills to go and do this stuff themselves.

645
00:40:37,280 --> 00:40:49,280
So yeah I don't think there are actually any more we need to more people need to understand how to use the second and help build their own answers to business problems so yeah I agree.

646
00:40:49,280 --> 00:41:00,280
And the last is one is the best governance framework feel invisible for makers.

647
00:41:00,280 --> 00:41:17,280
Yeah because the least amount of friction people have to do what they want to do the better so if they're yeah I can put you agree with that obviously it's always going to be some and they might always be touch points and you're not going to please everyone.

648
00:41:17,280 --> 00:41:29,280
You want to make these things as easy to get to as possible if people understand the boundaries and they know the direct route to when I want to get to we've released about a friction yes 100%

649
00:41:29,280 --> 00:41:39,280
Okay, they're okay then we jump the rapid fire on I think we have some minutes left nice power apps or power to need.

650
00:41:39,280 --> 00:41:50,280
Power apps that's where I started that's why I haven't built a power app for quite a ton of paper yeah I always enjoy power apps.

651
00:41:50,280 --> 00:41:54,280
Most underrated most underrated part of the future.

652
00:41:54,280 --> 00:41:57,280
Most underrated.

653
00:41:57,280 --> 00:42:02,280
Oh that's a good question.

654
00:42:02,280 --> 00:42:08,280
I don't know what is the most underrated feature.

655
00:42:08,280 --> 00:42:13,280
Wow I don't know I'm asking about sure that one.

656
00:42:13,280 --> 00:42:28,280
I don't know because depending on where you look there's always specialists in each individual thing isn't it like I know where to give a power pages or power all I think everything has its own place and stature I don't necessarily anything's underrated.

657
00:42:28,280 --> 00:42:32,280
Maybe some functionalities within them are underrated right.

658
00:42:32,280 --> 00:42:42,280
And then you subgrids in the model driven up as much as they should do maybe people don't use certain functions in power effects that it should do like the width function.

659
00:42:42,280 --> 00:42:59,280
If I'm looking at a lower level in the canvas that is an underrated feature that saves memory increases performance and not a lot of people implement so if I was to go down a lower level I probably say something like that by the underlying functions or capabilities that are slept on a little bit maybe.

660
00:42:59,280 --> 00:43:14,280
The best legal set you ever buy the best leg oh that is a real that's the toughest question you've asked me just after the because I have quite a lot of Lego sets the best Lego set I bought.

661
00:43:14,280 --> 00:43:25,280
I've got the black pearl behind me that was one of them Peter Creel's house was stranger things that was a really fun because it moves apart and changes dynamic which is pretty cool.

662
00:43:25,280 --> 00:43:32,280
And I'm probably going to shout out to the Riverdale Lego set for all of the rings that is that was.

663
00:43:32,280 --> 00:43:40,280
Oh it was a bit annoying but now I was one of my most favorite builds of all time that is a superb piece of Lego architecture that was fun to put the OS.

664
00:43:40,280 --> 00:43:43,280
Yeah, what we say one of them three record.

665
00:43:43,280 --> 00:43:45,280
And the worst one.

666
00:43:45,280 --> 00:43:55,280
The worst one is behind me is the Avengers tower because I love the Avengers films especially the first phase of films.

667
00:43:55,280 --> 00:44:09,280
Well there's lots of windows on the tower and most of that set was just clipping in the glass things in the plastic glass into the window frames is a bit boring a bit tedious so even though it looks good now it's finished.

668
00:44:09,280 --> 00:44:22,280
And there's lots of cool little Easter eggs in here the actual build of it I didn't really enjoy that much to be honest which is a shame because it wasn't exactly a cheap legacy so yeah I probably said that was on my last and she didn't enjoy it but there we go.

669
00:44:22,280 --> 00:44:25,280
Coffee tea or energy drink during the time.

670
00:44:25,280 --> 00:44:29,280
The coffee nice coffee though not instant coffee.

671
00:44:29,280 --> 00:44:44,280
Nice got to be nice coffee one thing Microsoft should publish tomorrow when you can say them and anything one to will our feature.

672
00:44:44,280 --> 00:44:47,280
What if I could choose a feature what would I have kind of thing.

673
00:44:47,280 --> 00:44:53,280
Yeah you are for you you can say Microsoft this you have to release tomorrow.

674
00:44:53,280 --> 00:44:56,280
Microsoft that's released tomorrow.

675
00:44:56,280 --> 00:45:03,280
And enabling Claude for the UK and EU without having to worry about.

676
00:45:03,280 --> 00:45:08,280
They are residency and stuff everything seems to everyone receives Claude at the main room.

677
00:45:08,280 --> 00:45:15,280
And it's a bit more of a legal issue for you can you using Claude because of where your date is processed and save.

678
00:45:15,280 --> 00:45:23,280
So if that was if I could do one thing tomorrow to go and sort that out Microsoft so the rest of the world can use Claude about any fears of.

679
00:45:23,280 --> 00:45:28,280
The date of side of things so that's what I would do because Claude is pretty cool I like Claude so.

680
00:45:28,280 --> 00:45:30,280
That's what I would do.

681
00:45:30,280 --> 00:45:40,280
And yeah my last question is from the session what if the one thing everyone should take away.

682
00:45:40,280 --> 00:45:52,280
And I think touching back on the points you made anyone governance shouldn't be there to stop people doing things governance should be an able to help people do things safely.

683
00:45:52,280 --> 00:46:01,280
So people are thinking about governance in terms of how much luck everything down on edge to change your mindset a bit and think governance is the first part of.

684
00:46:01,280 --> 00:46:07,280
In able in your workforce people productive to try and stocks but in those things around.

685
00:46:07,280 --> 00:46:10,280
Yeah and that by the adventure.

686
00:46:10,280 --> 00:46:14,280
And don't buy an event just tell it yeah everything you do that.

687
00:46:14,280 --> 00:46:27,280
To be fair it was that bad but yeah yeah it was a bit disappointing let's put it away so if you're going to buy it don't spend a lot of money on it but a second hand or something so it's also good.

688
00:46:27,280 --> 00:46:33,280
So Claude because there's more has been an awesome convert is it was so any fun.

689
00:46:33,280 --> 00:46:37,280
Yeah we've been fun fans having me honest we were going to.

690
00:46:37,280 --> 00:46:47,280
Thanks you for sharing your experience on governance, scale event power platform AI and enabling innovation in the right way that was nice session so.

691
00:46:47,280 --> 00:46:55,280
Thank you so much and have a nice day and I hope you come back and you look at your prediction in the six months again.

692
00:46:55,280 --> 00:46:58,280
Yeah thanks again for having me we give fun we enjoyed it.

693
00:46:58,280 --> 00:47:01,280
Thank you bye.

Mirko Peters Profile Photo

Founder of m365.fm, m365.show and m365con.net

Mirko Peters is a Microsoft 365 expert, content creator, and founder of m365.fm, a platform dedicated to sharing practical insights on modern workplace technologies. His work focuses on Microsoft 365 governance, security, collaboration, and real-world implementation strategies.

Through his podcast and written content, Mirko provides hands-on guidance for IT professionals, architects, and business leaders navigating the complexities of Microsoft 365. He is known for translating complex topics into clear, actionable advice, often highlighting common mistakes and overlooked risks in real-world environments.

With a strong emphasis on community contribution and knowledge sharing, Mirko is actively building a platform that connects experts, shares experiences, and helps organizations get the most out of their Microsoft 365 investments.

Craig White Profile Photo

BizApps MVP, Lego Nerd

Craig, a Microsoft MVP for Business Applications, has been navigating the Microsoft ecosystem for over 20 years. His passion for automation has led him to work with Visual Basics (VBA), SQL Server, SharePoint On-Prem, Microsoft 365, and since 2016, the Power Platform.

Craig focuses on Power Platform, Copilot Studio & M365 administration, governance and enablement. His goal is to inspire organisations to adopt the Power Platform & Copilot tools at scale, fostering safe and dynamic environments for innovation.