Office 365 & CalCloud California Email Service (CCES)

Office 365 Government Community Cloud (GCC)

Microsoft Office 365 GCC services include Office 2016 applications (e.g., Word, Excel, PowerPoint, OneNote, Outlook, etc.). The Microsoft Office 365 GCC environment meets Federal cloud services, criminal justice and tax information systems compliance requirements.

Office 365 Icons.

Customers that use Office 365 GCC benefit from the following unique features:

  • Content is logically segregated from customer content in Microsoft’s commercial Office 365 Services
  • Content is stored within the United States (US)
  • Access to an organization’s content is restricted to screened Microsoft personnel
  • Compliance with certifications and accreditations required for US Public Sector customers

Office 365 GCC Plans

Designed for the unique needs of US government organizations, these plans provide all the Office 365 features and capabilities in a segmented government cloud community.

Compare Office 365 Government Plans

Office 365 GCC E3

All Office 365 desktop applications, personalized search, and discovery, self-service business intelligence, enterprise management of applications, eDiscovery tools, hosted voicemail with auto-attendant capabilities, and other services.

Office applications included:

Word – Excel – PowerPoint – OneNote – Outlook – Publisher (PC only) – Access (PC only)

Services included:

  • Exchange – OneDrive – SharePoint – Skype for Business
  • Office 2016 applications (Desktop version): Word, Excel, PowerPoint, OneNote, and Outlook, plus Publisher and Access for PC only
  • Office 2016 applications (Web version):  Word, Excel, PowerPoint, and more
  • Unlimited personal cloud storage via OneDrive for Business
  • Business email, calendar, and contacts with 100 GB mailbox and unlimited archiving
  • Host unlimited online meetings, Instant Messaging (IM), and High Definition (HD) Skype for Business video conferencing
  • SharePoint – provides a platform for a company-wide intranet and team sites
  • Office Graph – personalized search and discovery
  • Enterprise application management with Group Policy, Telemetry, Shared Computer Activation
  • Excel – provides for self-service Business Intelligence to discover, analyze, and visualize data
  • Compliance and information protection for Legal holds, rights management, and data loss prevention (e.g., email and files)
  • eDiscovery with in-place search, hold, and export
  • Office 365 Message Encryption – allows for out-of-the-box protections such as encrypt-only or do-not-forward policies for sensitive emails 

Office 365 GCC E5

All Office 365 GCC E3 features plus unified communications with Skype for Business Server, advanced eDiscovery with predictive coding and text analytics, Exchange Online Advanced Threat Protection, personal and organizational analytics, Audio Conferencing, and other services.

Office applications included:

Word – Excel – PowerPoint – OneNote – Outlook – Publisher (PC only) – Access (PC only)

Services included:

  • All Office 365 GCC E3 services
  • Advanced eDiscovery with predictive coding and text analytics
  • Exchange Online Advanced Threat Protection – guard your mailbox against malicious links and attachments
  • MyAnalytics and Power BI Pro – advanced personal and organizational analytics

The Office 365 GCC environment features system redundancy, network security, physical security at the data center sites, mailbox auditing, disaster recovery at geo-redundant data centers, criminal background checks on administrators and encryption in transit and at rest. The hosted service attests compliance to the following security standards:

  • CJIS
  • FedRAMP
  • IRS Publication 1075
  • SSAE 16 Type II
  • HIPAA Customer Ready ISO 27001
  • FIPS

For detailed information related to Office 365 GCC service resilience and redundancy, please see whitepaper:  Data Resiliency in Office 365

Office 365 GCC Trust Center

Additional security & compliance related information – Increasing Employee Productivity and Safeguarding Data

Office 365 GCC Community Screened Personnel

Microsoft staff do not have regular access to customer data hosted in Office 365 GCC. Any staff granted temporary elevated permissions to customer data must have passed the following background checks:

Microsoft Personnel Screening and Background Checks Description
U.S. CitizenshipVerification of U.S. citizenship
Employment History Check Verification of seven (7) year employment history
Education VerificationVerification of highest degree attained
Social Security Number (SSN) Search Verification that the provided SSN is valid
Criminal History CheckA seven (7) year criminal record check for felony and misdemeanor offenses at the state, county, and local level and at the federal level
Office of Foreign Assets Control List (OFAC)Validation against the Department of Treasury list of groups with whom U.S. persons are not allowed to engage in trade or financial transactions
Bureau of Industry and Security List (BIS) Validation against the Department of Commerce list of individuals and entities barred from engaging in export activities
Office of Defense Trade Controls Debarred Persons List (DDTC)Validation against the Department of State list of individuals and entities barred from engaging in export activities related to the defense industry
Fingerprinting Check Fingerprint background check against FBI databases
CJIS Background ScreeningState-adjudicated review of federal and state criminal history by state CSA appointed authority within each state that has signed up for the Microsoft CJIS IA program

The following list provides an overview of the most popular licensing suites, as well as stand-alone add-on services.  For more details, please contact your Microsoft account team.

Microsoft Office 365 Suite E3 or E5

Microsoft Office 365 E3 & E5 is a combined suite that provides the following in a single licensing SKU.

Product SuiteIncluded Product SKUs
Microsoft 365 E3Office 365 Gov E3 + Enterprise Mobility + Security E3 + Windows 10 Enterprise E3
Microsoft 365 E5Office 365 Gov E5 + Enterprise Mobility + Security E5 + Windows 10 Enterprise E5

This licensing option is ideal for customers who are pursuing deployment of the full Modern Workplace stack and wish to take advantage of products and services from Office 365, Enterprise Mobility + Security (EMS), and Windows 10 Enterprise.

Learn more about Microsoft 365 Enterprise at:  https://www.microsoft.com/en-US/Microsoft-365/enterprise

Enterprise Mobility + Security (EMS) E3 or E5

This optional suite of products provides additional services related to security, identity, and mobile device management.  This suite is available in an E3 or E5 version.

Product SuiteIncluded Product SKUs
Enterprise Mobility + Security E3Azure Active Directory Premium P1
Microsoft Intune
Azure Information Protection P1
Advanced Threat Analytics
Enterprise Mobility + Security E5Azure Active Directory Premium P1 & P2
Microsoft Intune
Azure Information Protection P1 & P2
Advanced Threat Analytics
Microsoft Cloud App Security
Azure Advanced Threat Protection

Learn more about the features and services included in Enterprise Mobility + Security at the following pages:

Note:  Pricing listed on the pages above are not reflective of the State’s negotiated pricing discounts.

Windows 10 Enterprise E3 or E5

Adding Windows 10 Enterprise to your cloud enrollment brings your Windows desktop operating system licensing into the same per-user licensing model as your Office 365 services.  The link below will provide a high-level overview of the features available in Windows 10 Pro and Windows 10 Enterprise.  Please note that Windows Defender Advanced Threat Protection (ATP) is only available via Windows 10 Enterprise E5.

Office 365 Advanced Threat Protection (ATP)

Office 365 ATP can help protect your mailboxes, files, online storage, and applications against new, sophisticated attacks in real time. It offers holistic protection in Microsoft Teams, Word, Excel, PowerPoint, Visio, SharePoint Online, and OneDrive for Business. By protecting against unsafe attachments and expanding protection against malicious links, it complements the security features of Exchange Online Protection to provide better zero-day protection.

Visio Online Plan 1 or Plan 2

Visio licensing is available as a subscription model and is an add-on to your Office 365 GCC E3 or Office 365 GCC E5 licensing.

Project Online, client software only or client software plus Project Server Online

Project licensing is available as a subscription model and is an add-on to your Office 365 GCC E3 or Office 365 GCC E5 licensing.

Extra File Storage for SharePoint Online

Office 365 E3 & E5 provide a base allocation of pooled storage for SharePoint Online based on the following formula:  1Tb baseline storage + 10Gb per licensed user.  If you require additional SharePoint Online storage it is available in 1Gb increments for a low monthly cost.

Advanced eDiscovery

Office 365 Advanced eDiscovery builds on the content search and eDiscovery capabilities provided as part of your Office 365 GCC E3 licensing suite. After you create an eDiscovery case, place custodian locations on hold, and collect data that might be responsive to the case, you can then further analyze the data by using the text analytics, machine learning, and the predictive coding capabilities of Advanced eDiscovery. This can help your organization quickly process thousands of email messages, documents, and other kinds of data to find those items that are most likely relevant to a specific case. In addition, we have unified case management and Advanced eDiscovery so that you can seamlessly manage the same case within the Security & Compliance Center.

Note: To analyze a user’s data using Advanced eDiscovery, the user (the custodian of the data) must be assigned an Office 365 GCC E5 license. Alternatively, users with an Office 365 GCC E1 or E3 license can be assigned an Advanced eDiscovery standalone license. Administrators and compliance officers who are assigned to cases and use Advanced eDiscovery to analyze data don’t need an E5 license.

Mobile Device Management (MDM) for Office 365 provides basic capabilities as part of either the Office 365 GCC E3 or Office 365 GCC E5 licensing suite.  Microsoft Intune, which is a full MDM suite, is also available for Office 365 to provide robust Bring Your Own Device (BYOD) capabilities.  A comparison of MDM for Office 365 and Microsoft Intune is located below.

CDT also offers a separate Mobile Device Management solution.

MDM for Office 365 and Microsoft Intune both provide the ability to manage a customer’s mobile devices. But there are key differences, described in the following table.

Feature AreaMDM for Office 365Microsoft Intune
CostIncluded with many Office 365 commercial subscriptions.Requires a paid subscription for Microsoft Intune or can be purchased with Enterprise Mobility Suite.
Device ManagementManage devices using the Security and Compliance Center in Office 365.If you use Intune by itself, you manage devices using the Intune admin console.
If you integrate Intune with System Center 2012 Configuration Manager, you use the Configuration Manager console to manage devices on-premises and in the cloud.
Devices You Can ManageCloud-based management for iOS, Android, and Windows devices.Cloud-based management for iOS, Mac OS X, Android, Windows 8.1 (Phone and PC) and later to include Windows 10.
Key CapabilitiesHelp ensure that Office 365 corporate email and documents can be accessed only on phones and tablets that are managed by your company and that are compliant with your IT policies.
Set and manage security policies, like device level pin lock and jailbreak detection, to help prevent unauthorized users from accessing corporate email and data on a device when it is lost or stolen.
Remove Office 365 company data from an employee’s device while leaving their personal data in place.
Details are included in Capabilities of Built-in Mobile Device Management for Office 365.
MDM for Office 365 capabilities, plus:
Help users securely access corporate resource with certificates, Wi-Fi, VPN, and email profiles.
Enroll and manage collections of corporate-owned devices, simplifying policy and app deployment.
Deploy your internal line-of-business apps and apps in stores to users.
Enable your users to more securely access corporate information using the Office mobile and line-of business apps they know, while ensuring security of data by helping to restrict actions like copy, cut, paste, and save as, to only those apps managed by Intune.
Enable more secure web browsing using the Intune Managed Browser app.
Manage PCs from the cloud with no infrastructure required using Intune, or connect Intune to Configuration Manager to manage all of your devices including PCs, Macs, Linux and UNIX servers, and mobile devices from a single management console.
An Intune subscription also allows you to set up MAM (mobile app management) policies by using the Azure portal, even if people's devices aren't enrolled in Intune. See Protect App Data Using MAM Policies.
Note: Customers can manage users and their mobile devices using both MDM for Office 365 and Microsoft Intune in the same tenant space. Customers using both MDM and Intune can choose which solution is best for specific users and their devices.

Roles & Responsibilities can be found on the Vendor Hosted Service Standards page.

Service Level Agreements (SLAs) are established between Microsoft and each Office 365 tenant. For more information, contact your Microsoft Account Manager.

99.9% uptime – financially backed for each O365 GCC tenant environment.

learn_more caption=”Where can additional information regarding Office 365 be found?”]  The following Microsoft provided resources are available for end-user familiarization and training:

[/learn_more]

How do I purchase additional licenses during the True-up process?

 It is recommended that customers reach out to the reseller to have the following discussion before deciding whether they need to sign and return the document.

Who are the project contacts at CDT?

What documentation will be provided?

 Documentation can be found on the Resources tab of this page. 

Are there any requirements or guidelines for the Customers to follow when configuring policies in their Office 365 tenant environment?

 The O365 tenant environment is the responsibility of the Customer. Customers should create policies that support their business needs that support States Security Policies.

How much time will pilot coexistence testing be allowed for each department?

 Industry best practice recommends no longer than two weeks of coexistence since coexistence issues are unsupported.

How will test and pilot migrations be conducted?

 This will be determined by the Customer’s Migration Vendor. See Lessons Learned and Sample Documents under the Resources tab of this page.

Will Azure Active Directory Connect be a standard installation in the Customer’s Active Directory?

 Yes.

What tenant configuration is needed by CDT to do the migrations?

 Migration End Points and a Service Account to initiate the mailbox migrations will be required.

Are there technical guidelines or requirements Customers should follow as they prepare for mailbox migrations?

Do Customer Active Directory user accounts need to be prepared in any way?

Please review the Migration Process Document.

How will mailbox migrations be scheduled?

 Customers need to contact CDT via the following email account CDTCA.mailtoO365migrations@state.ca.gov.

What are the allowed migration windows?

 Migration windows will be coordinated between the CDT migration Project Manager and the Customer’s Vendor Migration Project Manager.

How many mailboxes can migrate at a time?

CDT has migrated as many as 3600 mailboxes in one night.

Can mailboxes be pre-seeded to 95%?

YES, this is Standard Operating Procedure (SOP).

Will conference room booking policies be migrated?

Yes, however, there are issues with the migration that should be reviewed in the Lessons Learned and Sample Docs under the Resources tab of this page. https://access.ca.gov/FAQ_O365.htm  

Will resource type information be migrated?

Yes, please review the below documents for more information on migrations.

Will ActiveSync policies be migrated?

No, CDT will export the policies and transfer the file to the migration vendor. The Migration Vendor will recreate the policies in customer’s O365 environment.

Will CDT Share a Sample Claims Rule?

Yes, this rule was put in place to match CDT’s technical and security requirements.  Proper vetting and testing of a departments claims rule should be performed for each and every ADFS implementation individually by the department and or their migration vendor.

An example is provided below.

Allow all external access except Microsoft Outlook

exists([Type == "http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-proxy"])

&& exists([Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/groupsid", Value =~ "Group SID value of allowed AD group"])

&& exists([Type == "http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-application", Value == "Microsoft.Exchange.RPC|Microsoft.Exchange.WebServices|Microsoft.Exchange.Mapi|Microsoft.Exchange.Nspi"])

&& && NOT exists([Type == "http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-forwarded-client-ip", Value =~ "^(\b134\.187\.([0-9]|[1-9][0-9]|1([0-9][0-9])|2([0-4][0-9]|5[0-5]))\.([0-9]|[1-9][0-9]|1([0-9][0-9])|2([0-4][0-9]|5[0-5]))\b|\b156\.60\.228\.([0-9]|[1-5][0-9]|6[0-3])\b)"])

=> issue(Type = "http://schemas.microsoft.com/authorization/claims/deny", Value = "true");

What products are available as part of CDT’s CalCloud Vendor Hosted Subscription Service (VHSS)?

 Several new Microsoft cloud solutions are now offered as part of CDT’s CalCloud Vendor Hosted Subscription Service (VHSS), including:

  • Enterprise Mobility Suite,
  • Microsoft Dynamics Customer Relationships Management,
  • Azure Infrastructure-as-a-Service (IaaS), and
  • Exchange Online Plan 2 for Government.

For more detailed information regarding products and rates see Tech Alert 16-11.

Are Customers allowed to engage Microsoft for planning and migration purposes prior to purchasing the license?

The license purchase is the only trigger for the free assessment (for CES customers) and migration service from Microsoft. The customer can elect to pay Microsoft for planning and migration without the license purchase.

What is the Enterprise Cloud Suite (ECS)?

There are the four components of the ECS Suite:

  • Office 365
  • Enterprise Mobility Suite
  • Windows Software Assurance
  • Windows CAL & System Center

What are the benefits of the ECS Suite?

  • Simpler – One SKU is licensed by the user that includes the most popular cloud offerings.
  • Discounted – Microsoft puts a compelling discount on the bundle versus purchasing the individual pieces.
  • Licensed by user – With the average employee using more devices for business, i.e. tablets, mobile phones, and even home PCs, licensing by user makes sense for most scenarios.
  • Ability to decrease license count – In the crazy world of mergers and acquisitions, it is important for some organizations to be able to decrease their licensing headcount as their business changes.  Most ECS licensed agreements are able to have their quantity decreased (“true down”) on the anniversary of the agreement to the minimum of 250 users.
  • Like all Microsoft agreements, customers have the ability to add licensing at any time. Today’s model provides CAL suite, plus Office and Windows.

What is in E3 Suite?

 The E3 Suite is the core offering for Office 365 from Microsoft for Enterprises.  It encompasses a multitude of Microsoft technology including:

  • Office Pro Plus – A full version of Office (currently 2013) install-able locally, accessible offline, and can be installed on up to 5 devices per person.
  • Exchange Plan 2 – 50GB inbox, unlimited archiving, legal hold, data loss prevention, voicemail, spam filtering, virus filtering, and more.
    • Mobile and Tablet Office
    • Office Web Applications
  • SharePoint Plan 2 – Full functionality of SharePoint in the cloud including forms, data visualization, Applications, Web parts, compliance, and more.
  • Skype for Business Plan 2 – Includes unlimited audio, video, and web conferencing in addition to instant messaging and presence for your organization.
  • OneDrive for Business – One terabyte of storage per user for file syncing.
  • Yammer– Social collaboration for business. Yammer Service Description
  • Office Video – Video channel for within the company.
  • Digital rights management – Protect files from unwanted and unauthorized access.
  • Outboard email encryption – Protect critical emails.
  • Delve – Social graph proactive search engine.

Will the “deskless” worker be able to access O365 via OWA? How will it work? Is this functionality one of the licenses the customer procures? If so, will they get the same amount of data storage?

 If the customer has an Office 365 license (either G1 or G3), they will be able to access OWA. This includes one TB of personal file storage on OneDrive for Business, 50 GB mailbox, and unlimited archiving. See this link for more information:   https://products.office.com/en-us/government/compare-office-365-government-plans 

What is Enterprise Mobility Suite (EMS)?

 EMS is a complete suite of security management tools that protect your environment. The features include:

  • Azure AD Premium – Single-sign on to 2500+ SAAS apps, multi-factor authentication, self-service password reset, group management, and security reporting.
  • Advanced Threat Analytics – Provides a simple and fast way to understand what is happening within your network by identifying a suspicious user and device activity with built-in intelligence and providing clear and relevant threat information on a simple attack timeline.
  • Intune – PC management, mobile device management, and full System Center Configuration Manager Functionality.
  • Azure Right Management – Digital rights management protect files from unwanted and unauthorized access including on-premise file servers.

I want to leverage the Microsoft Azure product. What’s the process?

 Azure is available via the Public Cloud contract.

Is there additional information regarding Yammer?

 Yammer Enterprise is not a component of Office 365 Government, but may be acquired at no cost as a standalone offering for each user licensed for Office 365 Government Plan E1, E3, and E4. This offering is currently limited to customers who purchase Office 365 Government under Enterprise Agreement and Enterprise Subscription Agreements. Currently, Yammer provides logical separation of customer data at the application layer. However, Yammer does not provide the same data location and data access features as Office 365 Government, does not support FedRAMP accreditation, and is subject to different contract terms from Office 365 services. It is recommended that you review the Yammer Service Description and privacy terms when assessing the appropriate use of Yammer for your organization. To learn which Office 365 Government plans include Yammer, see Office 365 Plan Options.

If you decide that the use of Yammer is appropriate for your organization as part of your Office 365 Government subscription and you have purchased one of the above-mentioned plans that include Yammer, under your Enterprise Enrollment, you can request a contract amendment to enable your Yammer Enterprise subscription.

Data is encrypted at rest and secure. What about the data in transit? Does the Department of Technology have a recommendation on security tools to secure data that is in the cloud?

 Data is encrypted at rest and in transit natively; no additional software is needed to encrypt the data. However, department specific questions/detail can be directed to the Information Security Officer. 
Questions from Forum

How can a Customer obtain a technical resource to assist with the O365 effort?

Customers can release an RFO and award a CMAS contract.

Is the Active Directory Federation Services (ADFS) included? If not, what is the cost of the server?

 No, ADFS servers are not included. See Department of General Services (DGS) Software Licensing Program (SLP) for Azure rates.

Who does the configuration?  The Customer.

What server components are included?  It’s a Hyper-V instance in Azure https://azure.microsoft.com/en-us/.

Is the service license included in the price or do they have to pay for it?  The price is not included. Customers will have to pay for the server and the license.

CDT Shared Active Directory Federated Services (ADFS) (identity)

  • Hosted In AZURE
  • Roles and Responsibility
  • CDT manages, maintains, configures for shared use department
  • Proposed support cost = $0.99 per user

Can O365 Exchange users save local .pst files?

 PSTs are accessed by Outlook application installed on the desktop, not the back-end mail system. Because PSTs are not provided by the CalCloud Email System (CCES) Mail System, the vendor will not troubleshoot support issues related to PSTs.

What types of services are required for CA.Mail customers to migrate out of CA.Mail?

 Customers will have to acquire a migration vendor.  Part of the migration process includes an assessment of migration readiness. This will determine how much pre-work will be required by a Customer prior to migration. This pre-work could include work to modifications to the Customer’s Active Directory in preparation to participate in the Unified Global Address List.

If a Customer performs all of their pre-work like IDfix, ADFS etc., does this minimize the chance of having a 1-3% loss of permissions, access to shared mailboxes, or the owners?

 Yes, you can minimize the loss; but, it depends on what shape Active Directory is in.  However, there is a chance during a Customer’s migration that permissions will be lost and will have to be re-applied. This is why Customers will be provided with exports from the current mail system and create a contingency plan to re-apply the permissions etc.

Are the O365 Tenant Management Services mandatory?

 No, O365 Tenant Management Services are not mandatory.  Customers can manage their own tenant environment.  This service is available for a smaller Customers that don’t have IT staff and would want CDT staff to manage their tenant environment.

For the SR to stop services, should Customers submit the SR now or submit it when migration in May?

 Customers should submit the SR ahead of migration.  If you miss your date, change your SR via the notes section. Account Leads will be able to assist the Customer.

In regards to loss of permissions, is that 3% of mailboxes migrated?

 Yes, the 3% error rate is considered low and it is 3% of all mailboxes migrated.  

This question is for Microsoft: We do not have a current Premier Support contract, and we know that O365 requires one. We've been told that we can procure the Add-on Pack A2 alone (not a full PS contract, and not the minimum 5-hour CDT shared PS contract hours) to satisfy that requirement. Is this correct?

 No, the Shared Premier Support Contract (minimum 5 hours) will have to be procured first then Customers can procure the add-on packs, the add-on packs would be managed separately and that A2 portion will be assigned specifically to the department that purchased it.  The Shared Premier Support agreement has to be in place because it is an add-on to it which means the Customer has to agree to the 5 hours before they can do the add-on.

Is CDT ADFS ready for customers? How long is the process of setting it up once the SR is approved?

 Yes

For Customers with CommVault and eDiscovery, is there a need to migrate over to O365?

 Customers need to have a plan to move their archive data into O365 and utilize the archiving component of O365 or into any archiving vendor of their choice, provided that vendor can attest to the functionality of integrating with O365.

For Customers with on-premise Rights Management Services (RMS), will there be availability for federation to be centralized between agencies to manage RMS outside their environment?

 RMS is complex to deploy and will require further technical discussions.  There is currently no way for Microsoft to leverage the federated architecture of Microsoft’s O365 environment space and integrate that benefit directly into your agency/department on-premise deployment of RMS.

Please contact the VHSS vendor for a quote.

Vendor Name (and Product)Contract NumberContact NamePhoneAlternate PhoneEmail
Microsoft (Office 365)John Robinson(916) 369-3630John.robinson@microsoft.com
The cost of each bundle will depend on each customer’s current licensing. If customers already have a Microsoft Enterprise Licensing Agreement (MELA) with Software Assurance the cost will be lower than if a customer is purchasing new.

Microsoft pricing is available on the Cal eProcure site by searching for the below contracts.

  1. Go to https://caleprocure.ca.gov/pages/index.aspx
  2. Click on ‘Quicklinks‘ at the top of the screen
  3. Select ‘View/Search Contracts
  4. In the ‘Contract ID‘ field, enter the appropriate vendor’s contract number. The contract numbers are:
    • SCA-16-70-0169R – SoftwareOne Inc.
    • SCA-16-70-0008B – Insight Public Sector, Inc.
    • SCA-16-70-0003Q – SHI International Corp.
    • SCA-16-70-0002S – PCM Gov, Inc.
    • SCA-17-70-0025H – CDW Government LLC
    • SCA-17-70-0204A – Crayon Software Experts LLC
  5. Under ‘ContractID‘, select the contract number to open the contract details
  6. In the “Attachment File” section, select the price list document (‘View All‘ may have to be selected first)

The CDT administration rate is calculated at 4.58% of the Microsoft Office 365 Enterprise License Agreement pricing.

Service CodeService DescriptionUnit of MeasurementRateNotes
K401CalCloud Email CCES Licensing - Office 365 Gov E1 SuiteVariableVendor Cost + 4.58% VHSS Fee
K402CalCloud Email CCES Licensing - Office 365 Gov E3 SuiteVariableVendor Cost + 4.58% VHSS Fee
K403CalCloud Email CCES Licensing - Office 365 Gov E4 SuiteVariableVendor Cost + 4.58% VHSS Fee
K404Core CAL BridgeVariableVendor Cost + 4.58% VHSS Fee
K405Enterprise CAL BridgeVariableVendor Cost + 4.58% VHSS Fee
K406Project ProfessionalVariableVendor Cost + 4.58% VHSS Fee
K407Visio ProfessionalVariableVendor Cost + 4.58% VHSS Fee
K410Enterprise Cloud SuiteVariableVendor Cost + 4.58% VHSS Fee
K411AzureVariableVendor Cost + 4.58% VHSS Fee
K412Enterprise Mobility SuiteVariableVendor Cost + 4.58% VHSS Fee
K413Unified Global Address List (GAL) AdministrationPer User/Month$0.26
K414Shared Active Directory Federation Services (ADFS)Per User/Month$0.99
K415End User and Administrator TrainingPer User/Annual$5.10
K416MS Premier AgreementVariableVendor Cost + 4.58% VHSS Fee
K417Hosted O365 ADFS AD Azure Server VariableVendor Cost + 4.58% VHSS Fee
K418CCES O365 Tenant Management and AdministrationPer User, Per Month$2.00
K420Exchange OnlineVariableVendor Cost + 4.58% VHSS Fee
K421Advanced Threat ProtectionVariableVendor Cost + 4.58% VHSS Fee
K422Skype For BusinessVariableVendor Cost + 4.58% VHSS Fee
K423Power BI ProfessionalVariableVendor Cost + 4.58% VHSS Fee
K424Windows Enterprise SAVariableVendor Cost + 4.58% VHSS Fee
K425Windows Enterprise E5VariableVendor Cost + 4.58% VHSS Fee
K426SharePointVariableVendor Cost + 4.58% VHSS Fee
K427Virtual Desktop AccessVariableVendor Cost + 4.58% VHSS Fee
K428Azure Operations ManagementVariableVendor Cost + 4.58% VHSS Fee
K429O365 File StorageVariableVendor Cost + 4.58% VHSS Fee
K430Import ServiceVariableVendor Cost + 4.58% VHSS Fee
K431Threat IntelligenceVariableVendor Cost + 4.58% VHSS Fee
K432Bing MapsVariableVendor Cost + 4.58% VHSS Fee
K433Yammer EnterpriseVariableVendor Cost + 4.58% VHSS Fee

To enroll in Microsoft Office 365 online:

  1. The Customer contacts their Microsoft Account Lead to request a licensing review of their environment for migrating into Office 365.
  2. Microsoft will provide the Customer with a comprehensive list of SKU numbers required for purchasing the needed licenses for Office 365.
  3. The customer submits a Service Request to CDT, requesting services to purchase the specific required items provided by Microsoft.
  4. IT Program Management (ITPM) reviews, approves and processes the request.
  5. Once all approvals are received, a work authorization will be released.

Microsoft will work with the Customer to provide access to Office 365.

To request Office 365 GCC CalCloud California Email Service (CCES): Request Services Now

Additional Resources: