Microsoft 365 Consultant Needed to Build Secure SharePoint and Teams Intranet.

Statement of Work Microsoft SharePoint and Teams Intranet Development Franklin Skin & Laser 1. Project Overview Franklin Skin & Laser is seeking an experienced Microsoft 365 consultant or development firm to design, configure, document, and implement a secure internal intranet using Microsoft SharePoint Online and Microsoft Teams. The intranet will serve as the central internal information and collaboration platform for the organization. It must provide secure document storage, role-based access, department-specific workspaces, controlled sharing, standardized document organization, and an intuitive experience for employees with varying levels of technical ability. The selected consultant must have demonstrated experience with: * SharePoint Online architecture * Microsoft Teams configuration * Microsoft 365 Groups * Microsoft Entra ID security groups * SharePoint permissions and inheritance * Role-based access control * Document libraries and metadata * Information architecture * Document governance * Microsoft Purview retention and sensitivity capabilities * Microsoft Power Automate * Microsoft Lists * Microsoft Forms * Version control and document approval * Microsoft 365 security best practices * User training and administrative documentation This project is intended to create a durable, scalable platform that Franklin Skin & Laser can maintain after implementation. The consultant should not simply create isolated Teams or SharePoint sites without first developing an organized governance and permissions structure. ⸻ 2. Organization Background Franklin Skin & Laser is a physician-led cosmetic and aesthetic practice with multiple operational locations and a combination of clinical, administrative, management, marketing, financial, and operational personnel. The organization currently uses or intends to use Microsoft 365, Microsoft Teams, and SharePoint as its primary internal collaboration and document-management platform. The system may contain confidential business information, employee information, policies, training materials, vendor information, operational documents, and certain information subject to privacy and security requirements. The intranet must therefore be designed using the principles of: * Least-privilege access * Role-based permissions * Separation of sensitive information * Secure document storage * Controlled external sharing * Traceable document changes * Clear ownership and accountability * Simple employee navigation * Consistent naming and organization * Administrative maintainability ⸻ 3. Project Objectives The primary objectives of this engagement are to: 1. Create a centralized intranet landing page for Franklin Skin & Laser. 2. Establish a logical SharePoint and Teams architecture. 3. Secure documents according to employee role, department, location, and management level. 4. Prevent unauthorized access to sensitive documents. 5. Create appropriate security groups and permission levels. 6. Reduce reliance on individual employee OneDrive folders for organizational records. 7. Establish standardized document libraries, folders, metadata, naming conventions, and retention practices. 8. Integrate SharePoint document storage with Microsoft Teams. 9. Create department-specific and function-specific collaboration areas. 10. Allow leadership to publish organization-wide announcements, policies, forms, schedules, and updates. 11. Provide controlled access to human resources, financial, legal, compliance, clinical operations, marketing, and management documents. 12. Create a system that can be administered internally after the project is completed. 13. Train designated Franklin Skin & Laser administrators and employees. 14. Provide complete documentation of the system architecture, permissions, configuration, and ongoing administrative procedures. ⸻ 4. Required Project Approach The consultant must use a structured implementation process. The expected phases are: 1. Discovery and requirements assessment 2. Current-state Microsoft 365 review 3. User, group, and access analysis 4. Information architecture design 5. Security and permissions design 6. Prototype development 7. Review and approval 8. Full configuration and implementation 9. Content migration 10. Testing 11. Training 12. Documentation 13. Go-live support 14. Post-implementation review The consultant must not begin full-scale construction before Franklin Skin & Laser approves the proposed architecture, permissions matrix, site structure, and implementation plan. ⸻ 5. Discovery and Requirements Assessment The selected consultant will conduct a structured discovery process with Franklin Skin & Laser leadership and designated staff. Discovery must include: * Review of the existing Microsoft 365 tenant * Review of existing SharePoint sites * Review of existing Teams * Review of existing Microsoft 365 Groups * Review of existing Entra ID users and groups * Review of existing OneDrive usage * Review of current file-storage methods * Review of current shared-drive or cloud-storage structures * Review of current document types * Review of department and employee roles * Review of location-based access requirements * Review of management and executive access requirements * Review of external contractor and consultant access requirements * Review of guest-user settings * Review of document-sharing practices * Review of confidential and restricted information * Review of document-retention needs * Review of existing workflows, forms, lists, and approval processes * Review of device and mobile-access requirements * Review of current Microsoft licensing * Identification of any licensing limitations or additional licensing recommendations The consultant will conduct stakeholder interviews as necessary and prepare a written discovery summary. ⸻ 6. User and Access Group Analysis The consultant will help Franklin Skin & Laser define appropriate user groups. Potential groups may include: * Owners * Executive Leadership * Medical Director * Practice Management * Department Managers * Site Managers * Physicians * Advanced Practice Providers * Nurses * Medical Assistants * Aestheticians * Laser Providers * Front Desk Staff * Scheduling Staff * Billing or Finance Staff * Marketing Staff * Human Resources * Compliance Personnel * Information Technology Administrators * General Employees * Contractors * Consultants * Temporary Personnel * Location-specific staff * Project-specific teams The final group structure will be determined during discovery. The consultant must distinguish between: * Microsoft Entra ID security groups * Microsoft 365 Groups * SharePoint groups * Teams membership * Teams ownership * SharePoint site ownership * Site members * Site visitors * Guests * External users * Individual document-sharing permissions The consultant must minimize the use of direct user-by-user permissions whenever group-based permissions can be used. ⸻ 7. Permissions Matrix The consultant will prepare a detailed permissions matrix before implementation. The permissions matrix must identify: * Each SharePoint site * Each Team * Each document library * Each restricted library or workspace * Each security group * Each Microsoft 365 Group * Site owners * Team owners * Members * Visitors * Read-only users * Contributors * Editors * Approvers * Restricted users * External users * Access by department * Access by role * Access by location * Access by management level * Access to confidential information * Access to employee information * Access to financial information * Access to legal documents * Access to clinical operations documents * Access to marketing materials * Access to policies and procedures * Access to archived records The matrix must clearly identify where permission inheritance is retained and where it is intentionally broken. Franklin Skin & Laser must approve the permissions matrix before production access is assigned. ⸻ 8. Proposed Intranet Architecture The consultant will recommend and implement an appropriate hub-and-spoke SharePoint architecture. The anticipated structure may include the following: A. Franklin Skin & Laser Intranet Home The main intranet landing page should include: * Organization-wide announcements * Important alerts * Quick links * Frequently used forms * Policies and procedures * Employee resources * Training resources * Department links * Location links * Calendars * Upcoming events * New employee information * Staff contacts * Leadership communications * Commonly used documents * Search functionality * Recently updated content * Help and support resources The home page must be easy to navigate on desktop and mobile devices. B. Department or Functional Sites Potential sites may include: * Executive Leadership * Management * Human Resources * Clinical Operations * Front Desk and Scheduling * Finance and Accounting * Marketing * Compliance and Privacy * Training and Education * Information Technology * Facilities and Maintenance * Vendor Management * Projects * Policies and Procedures * Forms and Templates C. Location-Based Sites or Sections The consultant will evaluate whether separate location-based sites, Teams, channels, libraries, or metadata should be used for each Franklin Skin & Laser location. The design should prevent unnecessary duplication while allowing location-specific access and communication. ⸻ 9. Microsoft Teams Configuration The consultant will design and configure Microsoft Teams to complement the SharePoint architecture. Required work includes: * Reviewing existing Teams * Identifying redundant or improperly configured Teams * Recommending which Teams should be retained, archived, consolidated, renamed, or removed * Creating an approved Team naming convention * Establishing Team ownership requirements * Establishing minimum numbers of owners * Configuring public versus private Teams * Configuring standard, private, and shared channels as appropriate * Connecting Teams to appropriate SharePoint sites and document libraries * Preventing unnecessary creation of duplicate Teams * Establishing a process for requesting new Teams * Establishing a process for Team expiration or review * Configuring guest access appropriately * Configuring external access appropriately * Establishing standards for channel naming * Establishing standards for files, posts, meetings, apps, and tabs * Establishing Teams etiquette and use guidelines The consultant must explain the relationship between Teams, Microsoft 365 Groups, SharePoint sites, channels, and document libraries. ⸻ 10. SharePoint Document Management The consultant will create standardized document-management structures. This may include: * Document libraries * Content types * Metadata columns * Views * Filters * Search refiners * Folder structures where appropriate * Document sets where appropriate * Required fields * Managed metadata * Naming conventions * Version history * Check-in and check-out settings * Content approval * Draft visibility * Document status * Document owners * Review dates * Expiration dates * Effective dates * Department classifications * Location classifications * Confidentiality classifications * Document categories * Archived status The consultant should avoid excessive folder nesting where metadata, views, or separate libraries provide a more maintainable solution. ⸻ 11. Policies, Procedures, and Controlled Documents The intranet should include a controlled-document system for policies, procedures, manuals, checklists, protocols, forms, and standard operating procedures. The consultant should configure a structure that supports: * Draft documents * Documents under review * Approved documents * Published documents * Superseded documents * Archived documents * Version numbers * Effective dates * Review dates * Document owners * Approvers * Approval history * Read-only access for employees * Editing access limited to authorized personnel * Controlled publication * Employee acknowledgement, where feasible * Notifications when policies are updated * Links to the current approved version * Prevention of routine employee access to obsolete versions The consultant should recommend whether this should be achieved through standard SharePoint functionality, Power Automate, Microsoft Lists, Microsoft Forms, Purview, or another appropriate Microsoft 365 solution. ⸻ 12. Secure and Restricted Document Areas The system must include appropriately restricted areas for sensitive information. Potential restricted areas may include: * Executive documents * Ownership documents * Financial records * Payroll information * Employee records * Human resources investigations * Performance-management documents * Legal documents * Contracts * Insurance documents * Compliance records * Incident records * Vendor pricing * Strategic planning * Security information * Technology documentation * Confidential project materials Sensitive information should not be stored in broadly accessible Team channels or general document libraries. The consultant must use least-privilege permissions and clearly document which groups have access to each restricted area. ⸻ 13. Privacy, Security, and Compliance The consultant must configure the environment using Microsoft 365 security best practices. The project should include, as applicable: * Review of multifactor authentication * Review of conditional access * Review of external-sharing settings * Review of guest-access settings * Review of anonymous-link settings * Review of link expiration * Review of sharing permissions * Review of organization-wide sharing defaults * Review of unmanaged-device access * Review of mobile access * Review of download restrictions * Review of audit logging * Review of deleted-item recovery * Review of retention settings * Review of sensitivity labels * Review of data-loss-prevention capabilities * Review of inactive-user procedures * Review of terminated-employee access procedures * Review of privileged-administrator roles * Review of emergency administrator access * Review of service accounts * Review of app permissions and third-party integrations The consultant must identify which security and compliance features are available under Franklin Skin & Laser’s current Microsoft licensing and which require additional licensing. The consultant must not represent that Microsoft 365 configuration alone guarantees legal or regulatory compliance. Any compliance-related recommendations must be clearly identified as technical safeguards rather than legal advice. ⸻ 14. External Users, Contractors, and Consultants The consultant will establish a controlled process for providing access to external users. The process should address: * When guest access is permitted * Who may approve guest access * Which sites permit guest access * Which sites prohibit guest access * Expiration of guest access * Periodic review of guest access * Restrictions on downloading * Restrictions on resharing * Use of dedicated external-collaboration sites * Separation of external files from internal documents * Removal of access at project completion * Documentation of the business owner for each guest Guest users should not receive access to broad internal sites unless specifically approved. ⸻ 15. Forms, Lists, and Workflows The consultant will identify and implement a reasonable initial set of forms, lists, and workflows. Potential examples include: * New employee onboarding * Employee offboarding * IT access requests * New Team or SharePoint site requests * Policy review and approval * Document publication approval * Incident reporting * Maintenance requests * Supply requests * Marketing requests * Training acknowledgement * Equipment tracking * Vendor tracking * Project tracking * Employee directory updates * Procedure-change requests * Meeting agenda submissions The final workflows will be prioritized during discovery. Any workflow created must include: * Documented business purpose * Process owner * Trigger * Approval path * Notifications * Exception handling * Permissions * Testing * Administrative instructions ⸻ 16. Search and Navigation The consultant will configure clear and consistent navigation. This should include: * Global navigation * Hub navigation * Site navigation * Department navigation * Quick links * Search * Frequently used resources * Consistent page layouts * Breadcrumbs or equivalent navigation aids * Mobile-friendly access The system should allow employees to find commonly used documents without needing to know the exact site or library in which they are stored. ⸻ 17. Content Migration The consultant will assist with migration of approved existing content into the new structure. Before migration, the consultant will help Franklin Skin & Laser classify content as: * Current * Outdated * Duplicate * Restricted * Department-specific * Location-specific * Organization-wide * Archival * Appropriate for deletion * Requiring owner review Migration work may include files currently stored in: * SharePoint * Microsoft Teams * OneDrive * Local computers * Shared network drives * Other approved storage locations The consultant must not migrate all files without review and classification. The consultant must provide: * A migration plan * A migration inventory * File-mapping documentation * Identification of failed migrations * Identification of unsupported file types * Identification of excessive path lengths * Identification of duplicate content * Validation of permissions after migration * Validation of file counts or other agreed reconciliation method ⸻ 18. Testing and Quality Assurance The consultant will conduct formal testing before go-live. Testing must include: * User access testing * Group access testing * Denied-access testing * Restricted-library testing * Site-owner testing * Member testing * Visitor or read-only testing * Guest-access testing * Teams membership testing * Private-channel testing * Shared-channel testing * Document-upload testing * Document-editing testing * Version-control testing * Approval-workflow testing * Search testing * Mobile-access testing * Navigation testing * Link testing * File-migration validation * Notification testing * Workflow exception testing * Terminated-user access testing * New-user provisioning testing Franklin Skin & Laser will designate representative users for user-acceptance testing. All material issues must be documented, corrected, retested, and approved before final acceptance. ⸻ 19. Training The consultant will provide live training sessions for designated groups. At minimum, training should include: A. Employee Training * How to access the intranet * How to navigate the intranet * How to find documents * How to use Teams appropriately * How to upload and edit documents * How to avoid creating duplicate files * How version history works * How to share documents appropriately * What employees may not share externally * How to submit forms and requests * How to obtain assistance B. Manager and Site Owner Training * Site and Team ownership responsibilities * Managing membership * Reviewing access * Publishing content * Approving documents * Maintaining department content * Managing pages, lists, and libraries * Avoiding improper permission changes * Escalating technical issues C. Administrator Training * User and group management * Permissions administration * Site creation * Team creation * SharePoint group management * Entra ID group management * Guest-user management * External-sharing controls * Document-library management * Metadata management * Workflow administration * Retention and sensitivity settings * Audit review * Troubleshooting * Backup and recovery limitations * Governance review procedures Training must be recorded unless prohibited by the meeting platform or agreed otherwise. Training materials must be delivered to Franklin Skin & Laser. ⸻ 20. Documentation Complete documentation is a mandatory deliverable. Documentation must include: * Executive summary * Final architecture diagram * SharePoint site inventory * Teams inventory * Microsoft 365 Group inventory * Entra ID security-group inventory * Permission matrix * Site-owner list * Team-owner list * Document-library inventory * Metadata structure * Naming conventions * Navigation structure * External-sharing configuration * Guest-access procedures * Content-migration summary * Workflow inventory * Workflow diagrams * Retention recommendations * Sensitivity-label recommendations * Administrative procedures * New-user onboarding instructions * User-transfer instructions * Employee-offboarding instructions * Terminated-user access-removal instructions * New-Team request process * New-site request process * Permission-change process * Guest-access request process * Periodic-access-review process * Troubleshooting guide * Known limitations * Licensing dependencies * Change-management recommendations * Governance plan * Employee quick-start guide * Administrator manual Documentation must be written so that a competent Microsoft 365 administrator who did not participate in the project can understand and maintain the environment. ⸻ 21. Governance Plan The consultant will develop a written Microsoft 365 governance plan. The governance plan should address: * Who may create Teams * Who may create SharePoint sites * Who may create Microsoft 365 Groups * Naming conventions * Ownership requirements * Minimum number of owners * Membership review * Guest-access review * Expiration or archival of inactive Teams * Site lifecycle * Team lifecycle * Document ownership * Content review * Policy review dates * Restricted-information handling * External sharing * User onboarding * User transfers * User offboarding * Contractor access * Records retention * Deleted-content recovery * Change management * Administrative privileges * Audit procedures * Periodic security review * Documentation updates * Support escalation ⸻ 22. Deliverables The selected consultant will provide the following deliverables: 1. Discovery report 2. Current-state Microsoft 365 assessment 3. Licensing assessment 4. Recommended information architecture 5. SharePoint site architecture 6. Teams architecture 7. Microsoft 365 Group structure 8. Entra ID security-group structure 9. Detailed permissions matrix 10. Architecture diagram 11. Intranet home site 12. Approved department and functional sites 13. Approved Teams and channel structure 14. Configured document libraries 15. Configured metadata and views 16. Restricted document areas 17. Approved forms, lists, and workflows 18. Controlled policy and procedure library 19. External-user access process 20. Content-migration plan 21. Content-migration results 22. Testing plan 23. Testing results 24. Corrective-action log 25. User-acceptance testing documentation 26. Employee training 27. Manager training 28. Administrator training 29. Training recordings 30. Employee quick-start guide 31. Administrator manual 32. Governance plan 33. Final configuration documentation 34. Final site, Team, group, and permissions inventory 35. Post-go-live issue log 36. Project closeout report ⸻ 23. Project Milestones and Approval Gates The project should include formal approval gates. Milestone 1: Discovery Complete Deliverables: * Discovery findings * Current-state assessment * Preliminary user-group structure * Preliminary content inventory * Licensing observations Franklin Skin & Laser approval is required before proceeding. Milestone 2: Architecture and Security Design Complete Deliverables: * Proposed SharePoint architecture * Proposed Teams architecture * Proposed security-group structure * Permissions matrix * Governance recommendations * Migration approach Franklin Skin & Laser approval is required before production implementation. Milestone 3: Prototype Complete Deliverables: * Prototype intranet home page * Prototype department site * Prototype document library * Prototype permission structure * Prototype Teams integration Franklin Skin & Laser approval is required before full buildout. Milestone 4: Configuration Complete Deliverables: * Sites * Teams * Libraries * Groups * Permissions * Navigation * Initial workflows * Initial documentation Milestone 5: Migration and Testing Complete Deliverables: * Migrated content * Testing results * Permission validation * Corrected deficiencies * User-acceptance testing Milestone 6: Training and Go-Live Deliverables: * Employee training * Manager training * Administrator training * Training materials * Final documentation * Go-live support Milestone 7: Project Closeout Deliverables: * Final system inventory * Final permissions matrix * Final governance plan * Open-issue list * Recommendations for future phases * Formal project closeout report ⸻ 24. Technical Requirements The solution must: * Use Franklin Skin & Laser’s Microsoft 365 tenant * Use SharePoint Online * Use Microsoft Teams * Use Microsoft Entra ID groups where appropriate * Use group-based permissions whenever practical * Follow least-privilege principles * Avoid unnecessary broken permission inheritance * Avoid excessive direct permissions to individual users * Avoid undocumented custom code * Avoid unsupported or obsolete SharePoint features * Avoid unnecessary third-party applications * Identify all paid third-party tools before implementation * Identify all premium Microsoft licensing requirements before implementation * Be maintainable by an internal administrator * Be compatible with current Microsoft-supported browsers * Provide a reasonable mobile experience * Preserve document version history where appropriate * Support auditing and access review * Use consistent naming standards * Include administrative and user documentation Any proposed custom development, Power Apps solution, premium connector, third-party migration tool, or third-party SharePoint component must receive written approval before use. ⸻ 25. Security Requirements for the Consultant The consultant will be required to: * Sign a confidentiality agreement * Protect all Franklin Skin & Laser information * Use named individual accounts * Use multifactor authentication * Avoid shared administrator accounts * Use only the minimum administrative access necessary * Access the tenant only for authorized project purposes * Refrain from downloading confidential information to personal devices unless expressly authorized * Refrain from using Franklin Skin & Laser information for demonstrations or portfolio examples * Disclose all subcontractors * Ensure approved subcontractors follow the same security requirements * Immediately report any suspected security incident * Return or delete Franklin Skin & Laser information upon project completion * Cooperate with removal of all consultant access at project closeout The consultant must not retain ongoing global administrator access after project completion unless a separate support agreement is executed. ⸻ 26. Consultant Qualifications Applicants should provide evidence of the following: * At least five years of relevant Microsoft 365 experience * Demonstrated SharePoint Online architecture experience * Demonstrated Microsoft Teams governance experience * Demonstrated permissions and security-group experience * Experience designing intranets for small or midsized organizations * Experience with confidential or regulated environments * Experience with Microsoft Entra ID * Experience with Power Automate * Experience with Microsoft Lists and Forms * Experience with document migration * Experience creating governance documentation * Experience training nontechnical users * Experience preparing administrator documentation Microsoft certifications are preferred but not mandatory. Preferred certifications may include: * Microsoft 365 Certified: Administrator Expert * Microsoft Certified: Identity and Access Administrator Associate * Microsoft Certified: Information Protection and Compliance Administrator Associate * Microsoft Certified: Teams Administrator Associate * Microsoft Certified: Power Platform Functional Consultant Associate * Relevant SharePoint or Microsoft 365 certifications ⸻ 27. Proposal Requirements Applicants must include the following in their Upwork proposal: 1. A summary of relevant experience 2. Examples of SharePoint intranets previously developed 3. Examples of Teams governance projects 4. Description of experience designing permissions 5. Description of experience with Microsoft Entra ID groups 6. Description of experience with confidential or regulated information 7. Proposed project methodology 8. Proposed project phases 9. Estimated project schedule 10. Estimated hours by phase 11. Fixed-price or hourly pricing structure 12. Identification of all proposed subcontractors 13. Identification of any third-party tools 14. Identification of any premium Microsoft licensing requirements 15. Description of training included 16. Description of documentation included 17. Description of post-go-live support 18. At least two client references 19. Confirmation that all work product will belong to Franklin Skin & Laser 20. Confirmation that the consultant will sign a confidentiality agreement Generic proposals that do not address the specific requirements of this Statement of Work may not be considered. ⸻ 28. Questions Applicants Must Answer Applicants should answer the following questions: 1. How would you distinguish between Microsoft Entra ID security groups, Microsoft 365 Groups, SharePoint groups, and Teams membership in this project? 2. How would you prevent employees from receiving unauthorized access through nested groups, broken inheritance, direct sharing, or Teams membership? 3. How would you structure confidential human resources, financial, legal, and executive documents? 4. How would you prevent users from accidentally sharing internal documents externally? 5. How would you manage guest users and contractor access? 6. How would you design a controlled policy and procedure library? 7. How would you handle document versioning, approval, publication, review dates, and archived versions? 8. How would you decide when to use a separate SharePoint site, document library, folder, metadata field, Team, or private channel? 9. How would you migrate content without importing outdated or duplicate documents? 10. How would you validate that users can access only the information appropriate to their role? 11. What governance controls would you recommend for Team and SharePoint site creation? 12. What Microsoft 365 licenses would likely be required for the proposed security, retention, sensitivity, and workflow functions? 13. What documentation would you provide at the completion of the project? 14. What post-go-live support is included? 15. What are the most common mistakes you see in SharePoint and Teams implementations, and how would you avoid them here? ⸻ 29. Ownership of Work Product All project-specific work product will become the property of Franklin Skin & Laser upon payment. This includes: * Architecture * Site designs * Pages * Lists * Libraries * Metadata * Forms * Workflows * Scripts * Configuration documentation * Permission matrices * Training materials * Governance documentation * Administrative manuals * Diagrams * Migration maps * Testing materials * Project plans The consultant must provide Franklin Skin & Laser with editable copies of all documentation and source materials. The consultant may not reuse confidential Franklin Skin & Laser information in another client project. ⸻ 30. Change Control Any material change to the approved scope, architecture, schedule, deliverables, licensing assumptions, or cost must be documented in writing. A change request should include: * Description of the proposed change * Reason for the change * Effect on cost * Effect on schedule * Effect on security * Effect on licensing * Effect on existing configuration * Additional deliverables * Assumptions * Required approvals No material out-of-scope work should be performed without written authorization. ⸻ 31. Acceptance Criteria The project will be considered complete only when: * The approved architecture has been implemented * Required sites and Teams have been created * Required security groups have been created * The permissions matrix has been implemented * Restricted information is accessible only to authorized groups * Employee access testing has been completed * Denied-access testing has been completed * Guest-access controls have been validated * Migration has been reconciled * Navigation and search have been tested * Required workflows have been tested * Material defects have been corrected * Training has been completed * Documentation has been delivered * Administrative access has been transferred * Consultant access has been removed or reduced as directed * Franklin Skin & Laser has provided written acceptance ⸻ 32. Post-Go-Live Support The proposal should include a defined post-go-live support period. The support period should address: * Permission corrections * Broken links * Navigation issues * Search issues * Workflow failures * Migration defects * Membership issues * User-access issues * Documentation corrections * Administrator questions Applicants should separately identify: * Included support * Support duration * Response times * Hourly rates for additional support * Optional monthly support plans ⸻ 33. Potential Future Phases The initial architecture should be designed so that future phases may include: * Advanced employee onboarding * Automated offboarding * Equipment and inventory management * Training and competency tracking * Policy acknowledgement * Advanced Power Apps * Advanced Power Automate workflows * Reporting dashboards * Vendor portals * Project-management workspaces * Knowledge management * Employee directory enhancements * Viva Connections * Viva Engage * Power BI * Microsoft Purview enhancements * Advanced records management * Integration with other business systems These future items are not automatically included in the initial project unless expressly added to the final contract. ⸻ 34. Budget and Engagement Structure Franklin Skin & Laser is open to either: * A fixed-price engagement organized by milestone, or * An hourly engagement with defined phase estimates and spending limits Preference may be given to proposals that clearly separate pricing for: 1. Discovery 2. Architecture and security design 3. Prototype 4. Full implementation 5. Content migration 6. Workflow development 7. Testing 8. Training 9. Documentation 10. Post-go-live support Applicants should identify assumptions, exclusions, optional items, and potential additional licensing costs. ⸻ 35. Desired Outcome At the completion of this engagement, Franklin Skin & Laser should have a secure, organized, well-documented, and easy-to-use Microsoft 365 intranet that: * Serves as the authoritative source for internal documents * Protects sensitive information * Gives employees access based on role and business need * Supports communication across departments and locations * Reduces duplication and uncontrolled sharing * Improves policy and procedure management * Integrates appropriately with Microsoft Teams * Can be maintained by designated internal administrators * Has clear governance, ownership, and lifecycle procedures