Cloud Updates

Designing modern cloud management for Microsoft 365 admins at scale.

Cloud Updates dashboard overview showing device update status and compliance across an enterprise tenant
Not Optimal From old portfolio with purple palette — re-export clean screenshot or with Terra accents

Results

30M

Total devices managed through Cloud Updates

98%

Cloud update devices more up to date than non-managed

75K+

Admin tenants actively using Cloud Updates

Customer Voices

"[Before cloud update] our office patching was all over the place — we still have 2013 out there. We have been able to [update faster] and we are now going to heavily rely on it."

— Enterprise IT Admin

"This is exactly what we need and at the right moment… [Some tasks were] a lot harder to do, taking a lot more time and energy the old way before we had cloud update!"

— Enterprise IT Admin

The Challenge

Enterprise admins managing Microsoft 365 deployments faced compounding challenges that made keeping organizations secure and up to date nearly impossible at scale.

Long update cycles

Slow rollouts led to outdated software, exposing organizations to security vulnerabilities and missing critical features.

Manual deployment process

Tedious and error-prone manual work to configure, test, and push updates across thousands of devices.

No visibility into environment

Admins had no clear picture of which devices were up to date, which were falling behind, or where problems were emerging.

Lack of admin controls

Without the ability to pause, modify, or roll back updates, admins felt locked into decisions they couldn't reverse.

Strategic Direction

I led the design direction for Cloud Updates, establishing four principles that would guide every feature decision across the product.

Create confidence by preserving structure

Allow admins to keep their current organizational structure and workflows. Don't force them to start over — meet them where they are.

Simplify language and decision making

Replace technical jargon with clear, actionable language. Reduce cognitive load at every decision point.

Allow admins to reverse major decisions

Every significant action should be undoable. Admins should never feel locked into a path they can't change.

Educate admins on important benefits

Surface the value of staying current — security, features, performance — without being prescriptive about how to get there.

Beyond these principles, the work involved establishing end-to-end workflows, mapping data and information architecture, documenting user flows, and ensuring accessibility throughout the experience.

User flow across the five phases of cloud-managed updates onboarding
01 Day 0

Communicate value and build trust

Entry points across email, in-product banners, and channel posts show what changes and why it matters.

02 Day 0

Seamless transition from existing tools

Admins carry their Group Policy or Intune settings into the new control plane without breaking what already worked.

03 Day 1–3

Insights and update controls onboarding

A guided tour walks admins through the new dashboards and the levers they can pull when an update needs attention.

04 Day 3–20

View results of first update

Populated insights show how the first cloud-managed wave landed across the fleet — completion rates, channels, failures.

05 Day ~50

Microsoft-recommended update strategy

Once confidence is established, the recommended rollout strategy becomes the default — without giving up control.

User flow across the five phases of adopting cloud-managed updates. Hover or tap a region to zoom in.
Journey map of screens and decision points an admin encounters from first interest through ongoing engagement
01 Day 0

Visualizing moving to Cloud Update

Side-by-side value-prop tabs let an admin see what Cloud Update offers — before committing to anything.

02 Day 0

Detailed changes

Once they opt in, onboarding lays out exactly what's about to change in their environment.

03 Day 1–3

Onboarding flow

A guided tour of the tenant overview introduces profiles, insights, and controls in context.

04 Day 3–20

Environment summary

The Day-1 dashboard reports what just changed and how the fleet is doing.

05 Day ~50

Microsoft-recommended update strategy

Once confidence is built, forward-gear becomes the default — without giving up control.

Journey map of the screens and decision points an admin encounters from first interest through ongoing engagement. Hover or tap a screen to zoom in.

Solutions

Visibility into environment

Giving admins a clear, real-time view of their device landscape. Dashboards surface update status, compliance rates, and potential issues — so admins can act on data instead of guessing.

Cloud Updates overview dashboard showing tenant-wide update progress, channel breakdown, and update failures
1 2 3
  1. 1
    ProblemAdmins can't tell at a glance how the tenant-wide rollout is progressing.
    SolutionSingle status bar with a percent-updated headline and stacked breakdown by state.
  2. 2
    ProblemNo way to see whether every channel is keeping pace.
    SolutionPer-channel summary with current build and release date alongside the rollout view.
  3. 3
    ProblemAdmins need to know which devices are failing and why.
    SolutionFailure counts pivoted by device and by issue, with direct drill-in.
Inventory overview showing build spread, channel composition, device architecture, and add-in inventory
1 2 3 4
  1. 1
    ProblemAdmins don't know how many unique Office builds they have.
    SolutionBuild spread graph that drills into device lists.
  2. 2
    ProblemNo way to inspect update channel composition.
    SolutionChannel breakdown with build-level problem detection.
  3. 3
    ProblemAdmins want to move their tenant to 64-bit M365.
    SolutionVisibility into the architecture breakdown by device.
  4. 4
    ProblemNo visibility into add-ins — approved or user-installed.
    SolutionAdd-in inventory with version spread and per-device detail.

Tools for confident automation

Letting admins set up intelligent update policies, automating manual work with clarity at every step. The system handles the heavy lifting while keeping admins informed and in control.

Workflow tools for moving devices between channels, configuring rollout waves, and setting exclusion windows
1 2 3
  1. 1
    ProblemSwitching update channels requires running PowerShell scripts.
    SolutionBuild the workflow into Cloud Update with an inventory and flyout.
  2. 2
    ProblemDifferent user groups have different update sensitivity.
    SolutionConfigure rollout waves by group, with explicit ordering.
  3. 3
    ProblemUpdates need to pause for specific groups and time windows.
    SolutionSet exclusion windows by date range and group.

Admin controls and rollback

Robust controls to pause, modify, or roll back updates at any time. A safety net so admins never feel locked into a decision — building the trust needed to adopt cloud-managed updates.

Monthly Enterprise update view with a side panel for initiating a rollback to a known-good build
1
  1. 1
    ProblemUpdate delivery, add-in compatibility, and edge-case bugs all break trust in cloud-managed updates.
    SolutionOne-tap rollback to the last known-good build, scoped by device or group.

Behind the Work

What I wanted to show you: This project is about building trust with power users. Enterprise admins are experts who've built their own systems over years. The design challenge wasn't simplification — it was earning confidence. Every feature had to prove it could do what admins were already doing, but better.

What I learned: Designing for enterprise admins taught me that the best design sometimes means getting out of the way. These users don't want hand-holding — they want visibility, control, and the ability to undo. The principles we set became the foundation for every feature we shipped.

Next project Building with AI Explorations · 2023–Present