SOP — Subscribe to and Manage Google Workspace
Version 1.0 Date 2026-06-22 Example domain mptwork.com Admin console https://admin.google.com Replace the example values (mptwork.com, sample users) with
SOP — Provision a Company Apple Account, Apple Business (ABM), and a Corporate Google Account for Managed Google Play
Version 1.0 Date 2026-06-22 Tenant context mptwork.com (mptwork.onmicrosoft.com) Purpose Create the three organization accounts that Intune needs to manage Apple
SOP — Set Up and Manage Microsoft Entra ID
Version 1.0 Date 2026-06-22 Tenant context mptwork.com (mptwork.onmicrosoft.com) Console Microsoft Entra admin center — https://entra.microsoft.com Companion SOPs M365
SOP — Manage User Devices with Microsoft Intune
Version 1.0 Date 2026-06-22 Tenant context mptwork.com (mptwork.onmicrosoft.com) Console Microsoft Intune admin center — https://intune.microsoft.com Companion SOPs M365
SOP — Subscribe to and Manage Microsoft 365
Version 1.0 Date 2026-06-22 Example domain mptwork.com Example tenant mptwork.onmicrosoft.com Companion SOP Device management & endpoint protection — sop-m365-intune-defender-soc2-iso27001.md Throughout,
SOP — Microsoft 365 Intune and Defender
Version 1.1 Date 2026-06-22 Scope Tenant signup → Intune device management (Windows, macOS, iOS, Android) → Microsoft Defender endpoint protection → SOC 2 / ISO 27001 control
Global Network Reference Architecture
Version 1.0 Date 2026-06-22 Scope 3 subsidiaries (US, Japan, UK) · AWS, GCP, Azure · on-premises offices Companion diagram global-network-hub-spoke-topology.svg Supernet 10.0.0.
Use Case — OpenVPN Client VPN to the UDM Pro Max with RADIUS Authentication
Gateway UniFi UDM Pro Max (US HQ office) VPN client pool 10.12.70.0/24 (the VPN VLAN) Auth backend UDM built-in RADIUS
Use Case — Site-to-Site VPN: US Office ↔ AWS VPC
On-prem side US HQ office, UniFi UDM Pro Max — 10.12.0.0/16 AWS side US AWS prod VPC, us-west-2 — 10.1.0.
Use Case — US Office Network on a UniFi UDM Pro Max
Subsidiary US (10.0.0.0/12) Location US HQ office (on-premises) Gateway UniFi Dream Machine Pro Max (UDM-Pro-Max) On-prem block 10.12.0.
Use Case — US prod VNet in Azure
Subsidiary US (10.0.0.0/12) Provider / region Azure · West US 2 (westus2) Environment prod VNet Regional (vnet-us-prod-westus2), address space 10.8.0.
Use Case — Create the US prod VPC in GCP Oregon (us-west1)
Subsidiary US (10.0.0.0/12) Provider / region GCP · us-west1 (Oregon) Environment prod VPC Global, custom-mode (us-gcp-prod-vpc) Region block 10.4.0.0/