End Teams sprawl. Govern every workspace from creation to retirement.
Governed workspace creation with approval workflows, templates, and lifecycle management.
Overview
Microsoft provides a binary choice for workspace creation: fully open self-service that leads to sprawl, or fully restricted creation that creates bottlenecks and shadow IT. There is no native middle ground.
Compass Provisioning Engine fills this gap with a React web application for guided self-service workspace creation, Azure Logic Apps for multi-level approval workflows, and Python Azure Functions for provisioning execution via Graph API. Users submit workspace requests through a clean web interface that enforces naming conventions, captures metadata, and applies templates. Approvers receive Teams Adaptive Cards or email notifications with Approve/Reject actions powered by Azure Logic Apps. Upon approval, an Azure Function creates the workspace using Graph API with pre-configured permissions, channels, sensitivity labels, and folder structures.
Use Cases
- Governed Teams and SharePoint creation
- Project-based workspace lifecycle management
- Mergers and acquisitions workspace setup
- Department onboarding automation
Key Features
Technical Architecture
Deployed in your tenant71% of IT leaders report Copilot introduces additional security risks by surfacing overshared content from abandoned workspaces. Provisioning governance ensures every workspace is created with proper permissions and retired when no longer needed - preventing Copilot from surfacing stale, sensitive content.
Ready to deploy Provisioning Engine?
Book a consultation and we will walk through your tenant to show exactly how this product maps to your requirements.