#Configure Site Collection Renewal Profiles

A site collection renewal profile enables a renewal process for users to periodically review and change site collection governance details when a site collection goes through the renewal process.

To access Renewal profiles, click the Renewal profiles card on the Profiles & templates page.

To define site collection renewal profiles, click Create > Site collection renewal profile on the ribbon to open the Create site collection renewal profile panel and configure the following settings:

#Basic info

Configure the following basic settings:

1. Profile name – Enter a name for the site collection renewal profile.

2. Description – Enter an optional description for the site collection renewal profile.

3. Message to renewal task assignee – To customize the message that is shown to the renewal task assignee when they start the renewal process, complete the following steps:

   1. Click the edit button of your desired languages.

   2. In the Edit message panel, enter your desired message in the text box.

   3. Click Save when you finish the configuration. The message will be shown to the site collection renewal task assignee before they start to renew a site collection.

4. Default language – Select a default language for the message shown to the renewal task assignee. If a user's Cloud Governance display language is not one of the enabled options, the message will be shown in the default language. Note that only the languages that are enabled as available languages can be selected as the default language.

5. Conditions to initiate renewal process – Turn on the toggle of one or both of the following options to define when and how to trigger a renewal process, and then define the corresponding settings:

   • Generate a renewal task when the site collection inactivity threshold reaches – Enter a number in the text box and select Days, Weeks, Months, or Years as the unit of time. When a site collection has no activities for your specified time, a site collection renewal task will be generated.

     You can choose whether to Send a reminder email to the renewal task assignee before the inactivity threshold reaches. With the option enabled, select a reminder profile from the drop-down list.

   • Generate renewal tasks on schedule – Choose one of the following methods to configure the renewal schedule:

     • Configure a periodic renewal schedule – If you choose this method, configure the following settings:

       • Specify the start time of the renewal recurrence – Choose one of the following options to specify the renewal recurrence start time:

         • Site collection created time – The time when a site collection is created in Microsoft 365.

         • Specific time – Click the calendar button and select a specific date and time.

       • How often do you want the renewal process to initiate? – Click one of the options and configure the corresponding settings to define the recurrence of the renewal process as daily, weekly, or monthly.

     • Manually specify each renewal task generation time – If you choose this method, to manually specify the time to generate each renewal task, click Add renewal time, select a renewal task generation time in the Add renewal time panel, and then click Save.

       NOTE

       • You can add up to 12 unique renewal task generation times.
       • A site collection can only have one renewal process on the same day.

     • Generate the next renewal task based on the last renewal completion date – If you choose this method, configure the following settings:

       • Specify the start time of the renewal recurrence – Choose one of the following options to specify the renewal recurrence start time:

         • Site collection created time – The time when a site collection is created in Microsoft 365.

         • Specific time – Click the calendar button and select a specific date and time.

       • How often do you want the renewal process to initiate? – Enter a number in the text box and select Days, Weeks, Months, or Years from the drop-down list to define the renewal recurrence. When the site collection renewal task is completed, after your specified renewal recurrence interval, the next renewal task will be generated.

         For example, if you configure the recurrence as Every 10 Day(s) after the last renewal completion date, and the last renewal completion time is 2023-09-15, then the next renewal date will be 2023-09-25.

When you complete the configurations, click Next and go to configure settings on the next page.

#Renewal details

Configure the following site collection renewal details:

1. Renewal options – Choose what information will be displayed to the renewal task assignee for review and update, and then configure the corresponding settings:

   For the information renewal, you can choose whether to Show guidance to renewal task assignee when renewal task assignees process the renewal. If you want to show guidance, select a guidance profile from the drop-down list. You can click View profile details to view the details of the selected guidance profile. You can also click the create button to create a new profile. For more information about how to create a guidance profile, refer to Configure Guidance Profiles. To retrieve the latest guidance profiles that are available, you can click the refresh button.

   • Contact renewal – Allows renewal task assignees to review and modify primary and secondary site collection contacts.

     • People picker filter profile for primary contact – Select a people picker filter profile from the drop-down list, which will be applied to the primary site collection contact people picker fields in the renewal task. The profile will determine what users are available in the people picker fields, including search results, for example, who can be specified as the primary contact.

       You can click View profile details to view the details of the selected people picker filter profile. You can also click the create button to create a new profile. For more information about how to create a people picker filter profile, refer to Configure People Picker Filter Profiles.

       To retrieve the latest people picker filter profiles that are available, you can click the refresh button.

     • People picker filter profile for secondary contact – Select a people picker filter profile from the drop-down list, which will be applied to the secondary site collection contact people picker fields in the renewal task. The profile will determine what users are available in the people picker fields, including search results, for example, who can be specified as the secondary contact.

       You can click View profile details to view the details of the selected people picker filter profile. You can also click the create button to create a new profile. For more information about how to create a people picker filter profile, refer to Configure People Picker Filter Profiles..

       To retrieve the latest people picker filter profiles that are available, you can click the refresh button.

     • Choose whether to Require the task assignee to assign a secondary contact. If you enable the setting, a secondary contact is required in the contact renewal.

     • Choose whether to Notify the newly assigned contacts when renewal task assignees specify the new contacts. If you enable the notification, select an email template for the notification email sent to the new primary or secondary contact.

   • Sensitivity label renewal – Allows renewal task assignees to review and modify the site sensitivity label. With this option enabled, select the sensitivity labels that the task assignees can choose to change to during the renewal process.

     NOTE

     To renew the sensitivity label, make sure you have completed the following configurations. Otherwise, the sensitivity labels cannot be loaded, or errors may occur in the renewal process.

     • Enable sensitivity label for specified tenants in System settings > Sensitivity labels.

     • Configure the Cloud Governance for Exchange app and assign it the compliance admin role to allow Cloud Governance to retrieve external user access and external sharing settings of sensitivity labels.

   • Permission renewal – Allows renewal task assignees to review and modify SharePoint group permissions to the corresponding site collection. To enable the permission renewal, make sure the renewal permission index has been enabled for your tenant in Settings > System settings > Renewal permission index in the Cloud Governance admin center.

     • Choose whether to allow the renewal task assignee to Only renew external users, Renew site permissions and unique permissions, or Renew objects matching specific risk information.

       If you allow the renewal task assignee to Renew site permissions and unique permissions, you can choose to use Object based view or User based view for permission renewal.

       If you allow the renewal task assignee to Renew objects matching specific risk information, you need to choose the options below to define which objects get their permissions renewed:

       NOTE

       A subscription to Insights is required to utilize this option effectively.

       • Sensitivity level – Select the sensitivity of the object.

       • Exposure level – Choose how widely the object is shared.

       When the Object based view or Renew objects matching specific risk information option is selected, the following options are available:

       • Allow the renewal task assignee to grant users SharePoint permissions – With the option enabled, select a people picker filter profile from the drop-down list to limit the people picker fields in the renewal task in the Cloud Governance Portal. The profile will determine what users are available in the people picker fields when granting user permissions.

         You can click View profile details to view the details of the selected people picker filter profile. You can also click the create button to create a new profile. For more information about how to create a people picker filter profile, refer to Configure People Picker Filter Profiles.

         To retrieve the latest people picker filter profiles that are available, you can click the refresh button.

       • Allow the renewal task assignee to delete unique permissions – Choose whether to allow the renewal task assignee to delete unique permissions of objects in the site and inherit permissions from parents. Once unique permissions are removed, any sharing links of objects will be deleted.

     • Choose whether to Exclude specified permission levels from the renewal process. With the option enabled, select your desired permission levels, and your selected permission levels will not be available during the renewal process. You can also choose whether to hide the objects with the excluded permissions by choosing Yes or No.

     • Choose whether to Exclude site admins from the permission renewal process. With the option enabled, site admins will be excluded from the permission renewal process to prevent accidental removal by the task assignees.

   • Site admin renewal – Allows renewal task assignees to review and modify site admins.

     • Primary site admin – Allow renewal task assignees to review the primary site admin. You can choose whether to Allow the renewal task assignee to change primary site admin. Then, select a people picker filter profile from the drop-down list, which will be applied to the primary site admin people picker fields in renewal tasks. The profile will determine what users are available in the people picker fields to be assigned as the primary site admin, including search results.

       You can click View profile details to view the details of the selected people picker filter profile. You can also click the create button to create a new profile. For more information about how to create a people picker filter profile, refer to Configure People Picker Filter Profiles.

       To retrieve the latest people picker filter profiles that are available, you can click the refresh button.

     • Additional site admins – Allow renewal task assignees to review and remove additional site admins. You can choose whether to Allow the renewal task assignee to add additional site admins. Then, select a people picker filter profile from the drop-down list, which will be applied to the additional site admin people picker fields in renewal tasks. The profile will determine what users and groups are available in the people picker fields to be added as additional site admins, including search results.

       NOTE

       Guest users cannot be added as additional site admins by default unless the guest filter is enabled in the people picker profile. Once enabled, available guest users can be added as additional site admins.

       You can click View profile details to view the details of the selected people picker filter profile. You can also click the create button to create a new profile. For more information about how to create a people picker filter profile, refer to Configure People Picker Filter Profiles.

       To retrieve the latest people picker filter profiles that are available, you can click the refresh button.

     • Choose whether to Exclude the following users or groups from the site admin renewal process. With the option enabled, specify users or groups to exclude from the site admin renewal process. These users or groups will be excluded from the renewal process and cannot be added as site admins.

   • Sharing link renewal – Allows renewal task assignees to review and manage the links that have been shared with users or groups.

     NOTE

     Make sure the renewal permission index has been enabled for your tenant in Settings > System settings > Renewal permission index in the Cloud Governance admin center.

   • Metadata renewal – Allows renewal task assignees to review and modify values of site collection metadata. With this option enabled, choose the renewal type and complete the corresponding configurations:

     • Manual – In this renewal type, you can define a list of metadata for renewal task assignees to review and update. Click Add, select metadata that will be available to renewal task assignees in the Add metadata panel, and then click Add to list. You can also click the edit button in the Action column to modify the value of the added metadata.

     • Dynamic – In this renewal type, select a dynamic metadata profile from the drop-down list and the metadata will be loaded based on the conditions or branches defined in the profile.

   • Recommended renewal actions – Configure the additional renewal actions that you recommend the renewal task assignees perform when they complete the site collection renewal tasks.

   • Remove all direct guest user access to high risk content

     AvePoint Cloud Governance integrates with AvePoint Insights to retrieve data and information for the renewal process. The risk level is defined by Insights, and the table below illustrates the risk level calculation based on the sensitivity level and exposure level:

     Sensitivity Level/Exposure Level	High	Medium	Low
     High	High Risk	High Risk	Medium Risk
     Medium	High Risk	Medium Risk	Low Risk
     Low	Medium Risk	Low Risk	Low Risk
     N/A	N/A	N/A	N/A

     • With a subscription to Insights, you can customize the sensitivity and exposure definitions. For more instructions, you can refer to Risk Definition Administration.

     • Without the subscription to Insights, default settings of sensitivity and exposure definitions provided by Insights will be used and cannot be customized. For more information, you can refer to Default Settings of Sensitivity and Exposure Definitions provided by Insights.

   • Remove sharing links with external user access

2. Lifecycle management actions – Choose whether to allow the renewal task assignee to delete, archive, lock, or Microsoft 365 Archive the site collection during the renewal process.

   • Allow the renewal task assignee to delete a site collection

   • Allow the renewal task assignee to archive a site collection – If you have an available subscription for AvePoint Cloud Archiving only, select an AvePoint Cloud Archiving profile from the drop-down list.

     If you have an available subscription for AvePoint Opus, this field is unnecessary for you and will be hidden.

     NOTE

     For existing site collection renewal profiles, after migrating AvePoint Cloud Archiving to AvePoint Opus, the profile settings will be updated automatically when editing profiles, but the original profile settings will retain if there are backend archive jobs or when viewing profiles before the update.

   • Allow the renewal task assignee to lock a site – With the option enabled, select one or more of the following options:

     • Allow the renewal task assignee to lock the site in “no access” status

     • Allow the renewal task assignee to lock the site in “read-only” status

   • Allow the renewal task assignee to Microsoft 365 Archive a site collection – This option is available if the Microsoft 365 Archive service is enabled in your Microsoft 365 admin center and you are using the commercial environment. Before a hub site is Microsoft 365 Archived as a lifecycle management action, it will be unregistered as a hub site first.

   Once you set an approval process in the renewal profile, the archiving, deletion, locking, or Microsoft 365 Archiving task will go through the approval process. The site collection will not be deleted, archived, locked, or Microsoft 365 Archived until the task is approved. If you want to set a different approval process for the deletion, archiving, locking, or Microsoft 365 Archiving action, you can select the Go through a specific approval process checkbox and select an approval process. The site collection deletion. archiving, locking, or Microsoft 365 Archiving will go through this approval process.

When you complete the configurations, click Next and go to configure settings on the next page.

#Advanced settings

Configure the following advanced settings for site collection renewal:

• Assignment and duration – Select a stage profile from the drop-down list to define the assignment and duration of different stages that will be applied in the site collection renewal task.

  You can click View profile details to view the details of the selected stage profile. You can also click the create button to create a new profile. For more information about how to create a stage profile for site collections, refer to Configure Stage Profiles.

  Choose whether to Notify the assignees when the task is submitted by another assignee. With this option selected, select an email template from the drop-down list.

• Escalation – Choose whether to Enable an escalation for an overdue renewal task. With the option enabled, select a site collection automated escalation profile from the drop-down list.

  You can click View profile details to view the details of the selected automated escalation profile. You can also click the create button to create a new profile. For more information about how to create an automated escalation profile for site collections, refer to Configure Automated Escalation Profiles for Site Collections.

• Approval process – Choose whether to Require approval before submitted renewal task changes take effect. With the option enabled, select an approval process from the drop-down list. The approver will need to approve the submitted site collection renewal task, and they can export the renewal audit report to view the detailed renewal changes before they approve or reject the task.

• Administrator contact – Configure the renewal process administrator contact and relevant email notification:

  • Administrator contact – Add a user or group (Microsoft 365 Group, security group, distribution group, or mail-enabled security group) to be the administrator contact. This should be an administrator who is responsible for the successful completion of the renewal process.

  • Notification email template for renewal exception – Select a renewal exception notification email template from the drop-down list. If the renewal process encounters an exception, the administrator contact will receive a notification email.

Click Save to save all your configurations.