User Guide

Introduction

A simple and effective way to create personalized documents with just a few clicks for all employees, brands and locations across devices and platforms.

Wizuard for Office, Word
Multiple Office App Awards Winner

Launching and Connecting

Launching

Wizard Ribbon

Once the «Wizard» App has been assigned to you or you have acquired it via the Office Store/AppSource, it will automatically appear in the «Home» tab of your Office application ribbon. To launch the App best click on the «Personalize» button.

Supported Office applications

Word
Word

Connecting

Wizard Welcome Page

To get started with the «Wizard» you need to connect it to your Office 365 work or school account or with your personal Microsoft Account. Click the «Connect» (1) button to start the process. The actual sign in experience is provided by Microsoft.

Consenting

The first time you connect the App you might be asked to consent to the permissions the App requires. Please go through those permissions carefully and grant consent as the App requires these permissions to function. If you do not grant consent the App will not load.

Navigation

User Menu

Wizard navigation

The «User» menu (1) will provide links to resources such as «Yammer», our «Feedback form», the App «Roadmap», the «Settings» page, the «About» page and the App documentation (website). Additionally, it will allow you to sign-out of the App.

Please note: Dependent on the officeatwork App settings for your Office 365 tenant the items available in the «User» menu can vary.

Getting Help

Learn more… & Info button

Wizard getting help

Here and there you will see some «Learn more» links (1) spread around the App. Those links will take you to a new Web page that will explain further details specific to a topic.

The «Info» button (1) will provide you some more info relevant to the topic right within the App.

Yammer

Join our «Yammer» network and participate in our discussion around the officeatwork 365 Apps and to learn about coming updates. You will find a link to our «Yammer» network in the «More» menu called «Yammer Community» (2).

Please note: Dependent on the officeatwork App settings for your Office 365 tenant the «Yammer Community» and «Send us your Feedback» option might not be available to you.

Wizard

Top
Wizard Personalize

Use «Personalize» to make your personal selection and input for your document so it is purpose fit for the specific intent of your individual documents. A thoughtful designed document will display its fields grouped by contexts like From, To etc.

Fields

Text

Document Wizard Text Field

A «Text» field allows you to enter any text into the field. Just click into the field and enter your text. You can also use copy and paste within the field.

Item

Document Wizard Item Field

An «Item» field will allow you to select from a list of items. To select an item just click into the field. A flyout will appear allowing you to pick and search your items. The search option will not always be available, depending on the data connected to the «Item» field. After selecting an item the flyout will automatically close. To clear the selected item just click the «Delete» icon at the end of the field. To change an existing item just click on it to bring back the flyout.

User

Document Wizard Item User

A «User» field will allow you to select from a list of users. To select a user just click into the field. A flyout will appear allowing you to pick and search for a specific user. After selecting a user the flyout will automatically close. To clear the selected user just click the «Delete» icon at the end of the field. To change an existing user just click on the user to bring back the flyout.

Connecting

Wizard Connecting

Some fields like the «Item» or «User» field are connected to an external data source. Sources you have not recently used will present a «Connect» button enabling you to allow the «Wizard» Add-In to connect to the data source sourcing that specific field. In this case you first need to click the «Connect» button and go through an authentication flow to be able to see the items for that field.

Tip: When copying and pasting content into your document you might also include some placeholders that are customized to work with the «Wizard». To make those placeholders visible to you in the «Wizard» you just need to reload the pane by clicking the «Personalize» button in the Word ribbon.

Embedding Add-In

Top

You might want to have the Wizard Add-In open together with your document. To do that you can 'embed' the Add-In into your document. This makes most sense with documents you often need to make changes to via the Wizard, or for templates that should show the Wizard automatically (once), so that the user can personalize the new document to his/her needs.

Open Add-in together with a document

You might want this Add-In to open alongside with your document automatically. This can be achieved by actively embedding the Add-In into your currently open document.

To do this follow the steps below:

Settings
  • Open the 'User' menu

  • Select the 'Settings'

  • On the 'Settings' page choose your Embedding option (1).

  • Done.

Embedding options

Never

Choose this option if you do not want the Add-In to open together with your document (default setting).

Once

Choose this option if you want the Add-In to only open the next time you open your document, after that it shall not open automatically anymore. 

Always

Choose this option if you want to have the Add-In open together with your document all the time. Note that the Add-In will also open if you close your document with the Add-In closed and then re-open the document.

Business Operations Guide

Roadmap

Top

Under Investigation

Planned

In development

Released February 2020

Released January 2020

Released November 2019

Released March2019

Released January 2019

Released September 2018

Released MAY 2018

Released August 2017

Released July 2017

Released June 2017

Released May 2017

Released January 2017

Released September 2016

Released May 2016

Released December 2015

IT Operations Guide

Deployment

Top

Office Add-ins

Historically you might be used to deploy Office Add-Ins using MSI packages. This is not an option for our modern officeatwork cloud SaaS Office Add-Ins anymore as they are not built with the older (COM) platform dependent technology.

Please note:

We do not offer any MSI packages for our modern web-based Office Add-Ins.

Centralized Deployment

The by far best way of deploying Add-ins for Microsoft 365 is using the new 'Centralized Deployment' feature inside the Microsoft 365 admin center. This feature will allow you to deploy Add-Ins to your users on all devices and platforms. There are no local installations necessary for this to work.

You can reach 'Centralized Deployment' by going to: Microsoft 365 admin center > Settings > Add-ins > + Deploy Add-In

Please note:

You might want to check if your tenant is ready for 'Centralized Deployment'. Here is a link to the Microsoft support document called 'Determine if Centralized Deployment of add-ins works for your organization' that will explain the requirements in detail. Microsoft also offers an Add-In (Word & Excel) that will perform automated checks to see if your infrastructure is ready for Centralized Deployment. It's called 'Compatibility Checker for Centralized Deployment'.

Please note:

You must be an Office 365 admin to be able to sign in to the Office 365 Admin portal. You will also need to use the ‘I want to add an Add-In from the Office Store‘ option as this will keep your add-ins up-to-date automatically!

Additional Resources

Sharepoint add-in catalog (for older Office versions)

Modern Web Office Add-ins can also be deployed for older Office versions like Office 2013. For that you can use the SharePoint Add-In catalog deployment method. Please note that some features like showing icons in the ribbon in Office will not be available via this deployment path. This deployment method will though work for the officeatwork 365 Template Chooser and Content Chooser Add-Ins. Please expect limited functionality due to missing API's in older Office versions like Office 2013. Check out our 'Compatibility' page to learn more about any missing features for your Office version.

Additional Resources

Office Store

You can find our Add-Ins within the Office Store experience provided within the Office applications. Just use the 'Get it now' button to acquire and deploy the Add-In for the signed in user only.

Appsource

You can find our Add-Ins for Office on AppSource. Just use the 'Get it now' button in AppSource to acquire and deploy the Add-In. If you are signed in as a Microsoft 365 administrator the 'Get it now' button should take you to the centralized deployment experience.

Compatibility

Top

Check out the minimal Office versions required for running the officeatwork Web Add-In on your devices. Also see what specific features of the individual Add-Ins are supported from what version onward.

Minimal Office Version

Minimal Office version required to run the officeatwork App.

Windows

Office 2013 (MSI)

15.0 (4855.1000)

Office 2016 (MSI)

16.0 (4390.1000)

Office 2019 (MSI)

all versions

Office 365 (C2R)

1602 (6741.0000)

Office Online

Office 365

January 2016

Mac OS

Office 365

15.20 (160315)

iPad

Office 365

1.22

General Add-In Features

Ribbon Icon

Access App via one or multiple icon in the Office ribbon.

Windows

Office 2013 (MSI)

not available

Office 2016 (MSI)

not available

Office 2019 (MSI)

all versions

Office 365 (C2R)

1603 (6769.0000)

Office Online

Office 365

January 2016

Mac OS

Office 365

15.33.0 (1704.0900)

iPad

Office 365

not applicable

Centralized Deployment

Deploying Word, Excel and PowerPoint Apps in Office.

Windows

Office 2013 (MSI)

not available

Office 2016 (MSI)

not available

Office 2019 (MSI)

all versions

Office 365 (C2R)

1704 (8067.2115)

Office Online

Office 365

January 2016

Mac OS

Office 365

15.34.0 (1705.1500)

iPad

Office 365

not applicable

Automatically open a task pane

Automatically load an App and open a task pane when opening a specific Word, Excel or PowerPoint document.

Windows

Office 2013 (MSI)

not available

Office 2016 (MSI)

not available

Office 2019 (MSI)

all versions

Office 365 (C2R)

16.0 (8121.1000)

Office Online

Office 365

January 2016

Mac OS

Office 365

15.34.0 (1705.1500)

iPad

Office 365

not applicable

MFA (Multi-Factor AUTHENTICATION)

Top

All the officeatwork Add-Ins require Microsoft accounts to sign-in to the Add-Ins. If you have activated MFA (Multi-Factor Authentication) for our Microsoft Work or School account in Microsoft 365, it will automatically also apply for the officeatwork Add-Ins. You as an Admin do not have to configure any dedicated settings for the officeatwork Add-ins as they automatically 'inherit' your sign-in policy you defined for your organization.

Pre-Consenting

Top

Administrators of a Microsoft 365 tenant can pre-consent access to required scopes by running through the Admin Grant process. Once done, users of your tenant will not have to individually grant access to the various scopes required by the officeatwork Add-In/App.

To enable this we offer a 'Grant Permissions' button in our Add-Ins that will take you through the admin grant flow of Azure AD. Here are the steps to take to pre-consent the Add-In:

Pre-Consenting
  • Launch the Add-In.

  • Sign in (connect) with your Microsoft 365 Administrator account.

  • Click on the 'User' menu and select the 'Settings' option.

  • Click on the blue 'Grant Permissions' button In the 'Administrator' section.

  • The Azure AD powered admin grant flow pops up in a separate dialog.

  • Complete the Azure AD provided flow.

Data Scopes

Following our security principles our Apps and Add-Ins do not have their own independent data access definitions. What the Apps and Add-Ins can access is always governed by the data provider.

Microsoft 365

Here are some principals that apply to all the access our Apps and Add-Ins have in Microsoft 365:

  • Data access is always scoped to the signed in user.

  • officeatwork employee do not get access to your data.

  • Your data is protected by the Microsoft 365 security framework including multi-factor authentication.

  • The actual App or Add-In sign in screens are provided and hosted by Microsoft. You can see that as the officeatwork sign in process displays the identical sign in screens and flow as if you were to sign in to Microsoft 365.

  • Users can only access data within the Apps that they can access based on their existing access rights in Microsoft 365

  • This also means that a user can not access data of another user via the officeatwork Apps

Sign-In
Pre-Consent

For the sign-in process the Add-In requires the following scopes:

For the sign-in process the Add-In requires the following scopes:

  • openid user permission to enable users to sign in to the add-in with their organizational and/or Microsoft Account.

  • offline_access user permission to enable automatic sign-in via refresh-tokens, as without users would have to manually Sign-In every single time they launch the Add-In.

  • profile user permission to show the signed in user in the Add-In. This is helpful to assure/confirm the user what account was used to sign-in to the Add-In.

  • email user permission to activate the evaluation subscription in the Add-In.

  • User.ReadWrite user permission to be able to save the user's settings.

Office 365 Users - Basic properties
Pre-Consent

For enabling basic user properties the Office 365 Users Input Field has to offer, the Add-In requires the following scopes:

  • User.ReadBasic.All user permission to enable the add-in to read basic properties of all users.

Office 365 Users - All properties
Pre-Consent

For enabling all user properties the Office 365 Users Input Field has to offer, the Add-In requires the following scopes:

  • User.Read.All admin permission to enable the add-in to read all properties of all users.

Office 365 Users - Limit to group
Pre-Consent

For limiting the selection of available user to a specific group the Office 365 Users Input Field has to offer, the Add-In requires the following scopes:

  • Group.Read.All admin permission to enable the add-in to read all groups of the signed in users.

Contacts
Pre-Consent

To enable the reading of all contacts of the signed in user, the Add-In requires the following scopes:

  • Contacts.Read user permission to enable the add-in to read all contacts of the signed in users.

SharePoint Online
Pre-Consent

To enable the reading of any SharePoint Online list or library the signed in user has access to, the Add-In requires the following scopes:

  • Sites.Read.All admin permission to enable the add-in to read all SharePoint lists and libraries of the signed in users.

All Scopes
Pre-Consent
  • openid user permission to enable users to sign in to the add-in with their organizational and/or Microsoft Account.

  • offline_access user permission to enable automatic sign-in via refresh-tokens, as without users would have to manually Sign-In every single time they launch the Add-In.

  • profile user permission to show the signed in user in the Add-In. This is helpful to assure/confirm the user what account was used to sign-in to the Add-In.

  • email user permission to activate the evaluation subscription in the Add-In.

  • User.ReadWrite user permission to be able to save the user's settings.

  • User.ReadBasic.All user permission to enable the add-in to read basic properties of all users.

  • User.Read.All admin permission to enable the add-in to read all properties of all users.

  • Group.Read.All admin permission to enable the add-in to read all groups of the signed in users.

  • Contacts.Read user permission to enable the add-in to read all contacts of the signed in users.

  • Sites.Read.All admin permission to enable the add-in to read all SharePoint lists and libraries of the signed in users.

Security

Top

You can find more information about the security of the officeatwork Add-Ins and apps on the Microsoft 365 App Certification Program pages. Navigate to the appropriate officeatwork Add-In/App using the left navigation of the site. There you will be able to learn more on how your data and privacy are adequately secured and protected.

We have built all our Apps with a solid and enterprise prove security architecture. We have chosen an architecture that follows these simple principles.

We have built all our Apps with a solid and enterprise prove security architecture. We have chosen an architecture that follows these simple principles.

  • We believe that it is not acceptable that customer data ever gets transferred to any of our officeatwork servers and that we in general limit the data we do have to transfer to our servers to the bare minimum possible.

  • We do not introduce a new permissions or security schema but always use existing permission and security schemas in place offered by the data providers like Office 365, allowing our Add-Ins to only access data the user using the Add-In has already been approved for.

  • All data transfer is encrypted.

  • Any minimal data we store is encrypted.

Data flow

One of the biggest security concern is how the data the Add-In processes flows and if the user's privacy and the companies IP is protected.

The following describes the main usage scenarios and how the data flows between the different actors like the user, the Add-Ins and other connected services.

Loading Add-In

When the Add-In gets loaded it uses encrypted communications via a high availability Azure CDN service. Loading the Add-In requires no User nor Customer Data.

Add-In loading data flow

Sign-In to Add-In

To sign in to the officeatwork Add-Ins you can use either your Microsoft personal or organizational account. The flow starts with the user signing in using Microsoft's sign in flow. After a successful identification by Microsoft a User Access Token is collected by a trusted officeatwork server side Azure function that then hands the Access Token to the Add-In combined with tenant settings data stored in an officeatwork controlled globally available Azure cosmos DB. This flow takes place without any connection to the customer's data.

Sign in data flow

Using Add-In

While the user is interacting with the Add-Ins data might be required. The access to that data is enabled via the User Access Token allowing the Add-In to read and write data in the name of the User directly without having to bypass any officeatwork server services.

Add-In usage data flow

SERVICE LEVEL AGREEMENT (SLA)

Top

All officeatwork SaaS Add-Ins/Apps are hosted across multiple data centers across multiple continents and regions on the Microsoft Azure platform. Please find below the services used with the links to the according Microsoft Service Level Agreement: