Course 04 · Available now
Eight modules on the Power Platform governance stack every IT admin needs. Environment types + strategy, securing the default environment, DLP policies with connector classification / action control / endpoint filtering, Managed Environments premium features, cross-tenant isolation, environment routing + groups + rules, and inventory strategy across PPAC + the deprecated CoE Starter Kit.
CA$99 one-time · lifetime access · verified against Microsoft Learn
Enrolment
Lifetime access · no subscription · no renewals
Bundle all 6 courses · CA$399 (once all six ship)
Why this course exists
That single fact drives every governance decision in this course. Skip governance and you get a citizen-developer sprawl of apps + flows + agents that IT can't see, DLP doesn't cover, and Copilot happily grounds on. And every one of those makers has Environment Maker rights in the default environment — which cannot be deleted, ever.
This course teaches the four tenant-level knobs (environment strategy, DLP, tenant isolation, Managed Environments) plus the per-environment strategy on top. Every module cites its Microsoft Learn source. Includes practical PowerShell examples, the seven environment types + when to use each, the desktop-flow DLP gotcha most admins miss, and the CoE Starter Kit deprecation status that changes how you should approach inventory going forward.
Curriculum
Each module includes written reference, callouts for the traps, tables for the environment / connector / DLP matrices, PowerShell code blocks, and a knowledge-check quiz. Complete all eight plus the final exam to earn CCPPG certification.
The three risk drivers (default environment, connectors, cross-tenant connections). The four tenant-level knobs (environment strategy, DLP, tenant isolation, Managed Environments). What Copilot changed.
Seven environment types — Default, Production, Sandbox, Developer, Trial, Dataverse for Teams, Support. Microsoft-recommended enterprise split. Access control per environment purpose. The irreversible Dynamics 365 install decision.
Enable Managed Environments on the default. Configure sharing limits. The "Share with Everyone" gotcha. Data policy recommendations. Designating a separate SharePoint form environment. Quarantining noncompliant apps.
Business / Non-business / Blocked classification. Tenant vs environment scope (no user-level scoping exists). Connector action control, endpoint filtering (six specific connectors), custom connector classification. Desktop flow DLP + the enforcement rule that trips everyone up.
The 20+ features Managed Environments unlocks (sharing limits, IP firewall, usage insights, environment groups, Customer Managed Key, extended backup, Application Insights). Pipelines becoming mandatory Feb 2026. The autoclaim policy licensing impact.
Cross-tenant Entra ID-based connection control. One-way vs two-way. Allow-list configuration (up to 500 rules). Azure DevOps connector loophole. The 1-hour policy change propagation.
Default environment routing to personal developer environments. Environment groups + rules for consistent governance at scale. Delegated admin. The actions page + governance recommendations. Inventory explorer + environment explorer.
CoE Starter Kit is no longer actively maintained. What PPAC covers today, what CoE still uniquely provides. Cloud flows vs data export data sources. Inventory freshness gotchas + the pragmatic recommendation.
Eight modules · CCPPG certification exam · PDF certificate + LinkedIn credential · every claim citing its Microsoft Learn source. No subscription. No renewals.