Global Admin Training Plan
Operation Digital Sovereignty - Forge a dual-hatted leader with Global Administrator and Code Owner authority
Executive Summary: Operation Digital Sovereignty
Commander,
Per your directive, the following is the reconstituted and fully integrated operational training plan for the Global Administrator and Code Owner track. This plan has been restructured to align with the specific "Free for Charity" operational tempo.
Mission Objective:
To forge a dual-hatted leader capable of holding full Global Administrator authority over the Microsoft 365 tenant and Owner rights over the GitHub Organization.
Operational Overview:
- Phase 1 (The Administrative Beachhead): Focuses on Microsoft 365 identity, security, and governance. Candidates must pass a simulated validation (MS-900 practice) before being granted live "Global Admin" keys to the charity tenant. The phase concludes with the actual MS-900 certification.
- Phase 2 (The Code Supremacy Campaign): Focuses on GitHub proficiency, specifically leveraging "Vibe Coding" (AI-driven development) to transform Global Admin-written Issues directly into Pull Requests. This phase concludes with the GitHub Foundations certification and the launch of the charity's digital presence.
Logistics Note: Test vouchers for both MS-900 and GitHub Foundations are fully funded at nonprofit/student rates.
Detailed Analysis: Logistics and Licensing
Before deployment, the following Quartermaster's report outlines the necessary tooling and financial requirements to support the "Vibe Stack" (AI-augmented administration).
Quartermaster's Report: Licensing & Costs
| Product / License | Tactical Purpose | Standard Price (Annual) | Nonprofit / FFC Price (Annual) | Operational Notes |
|---|---|---|---|---|
| Microsoft 365 Business Premium | Full Tenant Command, Intune, Defender, Conditional Access | $264.00 /user/year | $66.00 /user/year (75% discount) | Primary command infrastructure. Note: 300 free Business Basic accounts available but not suitable for Global Admins |
| GitHub Team (Organization) | "Owner" status, branch protection, repo management | $48.00 /user/year | $0.00 (Unlimited seats) | Requires "GitHub for Nonprofits" application |
| GitHub Copilot Pro | "Vibe Coding," CLI assistance, Automated PRs | $100.00 /user/year | $100.00 /user/year | Hard Cost. Essential for the "Issue-to-PR" workflow |
| Microsoft 365 Copilot | "Vibe Working," AI in Office/Teams, Agent building | $360.00 /user/year | $306.00 /user/year | Strategic augmentation. Requires base license |
| Cloudflare (Project Galileo) | WAF, DDoS protection, Page Rules | $240 - $2,400 /year | $0.00 | Project Galileo application required for full suite |
| LastPass Teams/Business | Secure "Break Glass" vault | $48.00 - $84.00 /user/year | ~30% Discount | Contact Sales for "Impact Program" |
Certification Costs (One-Time Investment)
| Certification | Standard Price | Student Discount | Nonprofit Discount | Notes |
|---|---|---|---|---|
| Microsoft 365 Fundamentals (MS-900) | $99.00 | Available | Available | Voucher fully funded at discounted rate |
| GitHub Foundations | $99.00 | $0.00 with GitHub Student Pack | Available | FREE with GitHub Student Developer Pack. Voucher fully funded at discounted rate otherwise. |
Cost Optimization Notes:
- • All pricing reflects annual billing to maximize available discounts
- • GitHub Foundations certification is free of charge when obtained through the GitHub Student Developer Pack
- • Test vouchers for both certifications are fully funded at nonprofit/student rates
Phase 1: Operation Certified Foundation (Microsoft 365)
Mission: Establish the secure identity perimeter and governance structure.
End State: Candidate holds Global Administrator access to the live tenant and possesses the MS-900 Certification.
ABlock A: Security & Intelligence (Pre-Deployment)
Concept: Initial gear check and perimeter security. Before touching the live environment, we establish the secure identity protocols.
Objective:
Understand the "Zero Trust" defense doctrine and Identity Access Management (IAM).
Directives:
- Study: Describe Microsoft 365 identity and access management (Microsoft Learn)
- Study: Describe Microsoft 365 security solutions (Microsoft Learn)
- Training Resource: Crash Course in Microsoft 365 Business Premium for Nonprofits (Watch Video)
- Action: Configure personal MFA and secure authentication methods.
BBlock B: The MS-900 Theoretical Gate (Simulation)
Concept: Simulated Combat Evaluation. The candidate must prove competence in a controlled environment before receiving command codes.
Objective:
Master the core concepts of cloud services and SaaS.
Directives:
- Study: Microsoft 365 Fundamentals (MS-900) Learning Path (Microsoft Learn)
- Validation Event: Complete official MS-900 Practice Tests.
- Pass Criteria: Must achieve a score of >80%.
Promotion Event: Upon successful completion of the >80% threshold, the candidate is granted Global Administrator rights to the live Charity Tenant.
CBlock C: Live Terrain Configuration (Field Operations)
Concept: Taking Command. The candidate now operates on the live tenant (the new charity environment).
Objective:
Configure the tenant for active duty using the newly granted Global Admin rights.
Directives:
- Execution: Configure custom domains (DNS records).
- Execution: Create initial user accounts and assign licenses.
- Reference: Set up Microsoft 365 for business (Microsoft Learn)
DBlock D: Governance & Compliance (Fortification)
Concept: Digging in. Establishing long-term governance and compliance rules on the live tenant.
Objective:
Implement data handling and compliance policies.
Directives:
- Study & Apply: Describe Microsoft 365 compliance capabilities (Microsoft Learn)
- Execution: Configure base retention policies and compliance alerts in the live tenant.
Phase 1 Final Gate: MS-900 Certification
- Mission: Pass the official Microsoft 365 Fundamentals (MS-900) Exam. Exam Details
- Support: Voucher provided by unit command.
Phase 2: Operation Code Supremacy (GitHub & Copilot)
Mission: Deploy the web presence and master AI-driven development ("Vibe Coding").
End State: Candidate holds Code Owner rights, a live website, and the GitHub Foundations Certification.
1Gate 1: Initial Infiltration (Profile Deployment)
Concept: Establishing the Digital Beachhead.
Objective:
Deploy a professional GitHub profile managed "as code."
Directives:
- Training: Introduction to GitHub (Microsoft Learn)
- Action: Create the GitHub account, set up 2FA, and create the profile README.md.
2Gate 2: Forward Operating Base (Coming Soon Site)
Concept: Establishing the FOB. A placeholder presence to signal operations.
Objective:
Deploy a "Coming Soon" page using GitHub Pages.
Directives:
- Training: GitHub Pages documentation (GitHub Docs)
- Action: Create a public repository and deploy a static HTML index page.
3Gate 3: Fortification (Security & Cloudflare)
Concept: Securing the Perimeter. The repository is public; defenses must be active.
Objective:
Secure the supply chain and map the custom domain.
Directives:
- Training: Securing your repository (GitHub Docs)
- Action: Enable Dependabot and CodeQL.
- Action: Configure Cloudflare DNS and map to GitHub Pages.
4Gate 4: Strategic Code Review (Vibe Coding & Auto-PRs)
Concept: AI-Augmented Command. The Global Admin (Commander) dictates the intent via an Issue, and the AI (Vibe Coding) executes the tactic via a PR.
Objective:
Execute the "Issue-to-PR" workflow using GitHub Copilot.
Directives:
- Training: GitHub Copilot Fundamentals (Microsoft Learn)
- Training: Using GitHub Copilot for Pull Requests (GitHub Docs)
- Action: Implement Branch Protection rules requiring PRs for all changes.