Course 02 · Founder cohort forming

SharePoint Governance for Enterprise

Ten modules on the parts of SharePoint governance every enterprise gets wrong. Hub architecture that scales. Permission inheritance and why it silently breaks. SharePoint Advanced Management for at-scale remediation. RCD, RAC, external sharing posture, and how to run an access-review programme that survives contact with reality.

Founder cohort — first fifty enrolments get 40% off launch pricing when we ship

Founder pricing

CA$239 at launch

40% off standard CA$399 · locked in for founder cohort

  • 10 modules · 12 hours of content
  • Practitioner guide (PDF)
  • Permission audit runbook + PowerShell
  • Access-review templates
  • Certification exam + LinkedIn credential
  • Lifetime access + free updates
Reserve your spot →

Zero commitment · you pay only when the course ships

Why this course exists

The SharePoint governance content on Microsoft Learn is written for the pre-Copilot world.

Most SharePoint governance training was written when the biggest risk was an internal user finding a document they shouldn't have. Copilot changes the threat model: now the biggest risk is that Copilot summarizes and surfaces that document across the whole tenant in ten seconds, and nobody can prove it happened until the DLP alert fires.

This course teaches SharePoint governance for the Copilot era. Hub architecture that scales past 500 sites. Permission models that survive staff turnover. SharePoint Advanced Management features (RCD, RAC, block-download policies, restricted access control) — what they do, when to use them, when to skip them. And the operational programmes — access reviews, exception logging, external sharing audits — that keep the model working after the consultant leaves.

Curriculum

Ten modules. Governance that actually holds.

Each module includes video walkthrough, written reference, PowerShell snippets, and a knowledge-check quiz. Complete all ten plus the final exam to earn certification.

Module 01

Hub & Site Architecture at Scale

Hub design patterns for 500+ sites. When to use communication vs team sites. Site provisioning automation. Hub navigation vs global navigation. The five architectural choices that break at scale and how to avoid them.

Module 02

Permission Inheritance & Its Failure Modes

Site-collection admin vs owner vs member vs visitor. Where inheritance silently breaks (Shared with Everyone, unique permissions on subfolders, sharing links). How to audit inheritance. How to restore it without breaking the user experience.

Module 03

SharePoint Advanced Management (SAM) Overview

What SAM actually includes (it comes bundled with Copilot licensing). The five capabilities most tenants never enable. When SAM justifies the licensing cost vs when standard SharePoint is enough.

Module 04

Restricted Content Discovery (RCD)

The single most impactful pre-Copilot control. What RCD does, what it doesn't do, how to apply it at scale, how to measure coverage, and how to sequence RCD rollout against the sensitivity label programme.

Module 05

Restricted Access Control (RAC)

RAC as the safety net when RCD isn't enough. Site-level RAC vs library-level. Interaction with Purview labels. The scenarios where RAC is the only correct answer and how to configure it without breaking legitimate access.

Module 06

External Sharing Posture

Tenant-wide vs per-site sharing settings. Anyone links, company-shareable links, specific-people links. Link expiry policies. B2B guest access via Entra. Anonymous link audits. The one sharing setting that matters more than all the others combined.

Module 07

Site Lifecycle Management

Site provisioning, ownership handoff, inactivity detection, ownership orphaning, and site retirement. The four-state site lifecycle (Active, Underused, Orphaned, Retired) and how to move sites between states without user complaint.

Module 08

Access Reviews at Scale

Entra ID Governance access reviews. Manual quarterly reviews for high-sensitivity sites. Automated reviews for group membership. How to design a review programme auditors accept. Review templates for the four common scenarios.

Module 09

Audit Logging & Investigation

Unified audit log for SharePoint activity. Which events matter and which are noise. How to build an investigation runbook. Correlating file access to user identity. Preserving audit evidence for HR or legal escalation.

Module 10

Governance Programme Design

Bringing the previous nine modules into a single operational programme. Steering committee cadence, exception process, escalation, tooling, metrics, and reporting. What "SharePoint governance" actually means as a running programme, not a one-off project.

Reserve your founder-cohort spot.

First fifty enrolments lock in CA$239 (40% off the CA$399 launch price). Zero payment now — we'll email you when the course ships and send the payment link with your founder discount code.

← Back to MigrationFox Learn