Privacy management

Applies to: Skype for Business 2015

In Microsoft Unified Communications Managed API 5.0, user endpoints operate in Private mode if they are so configured by the enterprise administrator, unless they are configured to be in Standard mode by the endpoint owner. User endpoints can also switch to (or "be migrated to") Standard mode if the administrator does not state a preference or orders such a change.

Privacy mode versus preferred privacy mode

The PrivacyModePreference enumeration indicates the privacy mode that is preferred by the endpoint owner. In contrast, the PrivacyModePreference enumeration indicates the privacy mode that is set by the Skype for Business Server 2015 administrator.

The values of the PrivacyModePreference enumeration are shown in the following table.

Value

Description

None

No selection has been made.

Private

The endpoint owner wants privacy to be enabled.

Standard

The endpoint owner does not want privacy to be enabled.

The values of the PrivacyMode enumeration are shown in the following table.

Value

Description

Standard

The local owner is not enabled for privacy.

Private

The local owner is enabled for privacy.

MigratingToPrivate

The local owner is in a transitory phase and is currently being enabled for privacy.

MigratingToStandard

The local owner is in a transitory phase and is currently being disabled for privacy.

A user endpoint can update its privacy mode using the BeginUpdatePrivacyPreference(PrivacyModePreference, AsyncCallback, Object) and EndUpdatePrivacyPreference(IAsyncResult) methods that are available from the PresenceServices property on the UserEndpoint class.

The only constraint on UCMA 5.0 endpoints in participating in migration is that they must be subscribed to both LocalOwnerPresence and ContactGroupServices. There is a tight coupling between these sessions, such that addition of a contact might require an Access Control Entry to be added in the local owner’s roaming data or vice-versa requiring both the data to be available for UCMA to perform the operation.

Migrating involves applying the appropriate manifest from the server and ensuring that the contact list and container membership list of the endpoint owner are synchronized. Any inconsistencies that are detected after migration are also corrected, thereby ensuring that the endpoint owner's data complies with the rules dictated by the server's container manifest.

Contact addition and deletion in privacy mode

Any contact added in privacy mode will have an equivalent Access Control Entry (ACE) added to a container based on the Source Network of the contact unless indicated differently by the endpoint owner. The BeginAddContact(String, AsyncCallback, Object), BeginAddContact(String, ContactAddOptions, AsyncCallback, Object), and EndAddContact(IAsyncResult) methods on the ContactGroupServices class can be used to add a contact in privacy mode.

Similarly, when a contact is deleted in privacy mode, all ACEs indicating the contact's SIP URI are automatically removed, unless the URI belongs to the endpoint owner's blocked container. For more information, see "Relationship level management" in LocalOwnerPresence.