text:
How to hide/restrict actual azure URL *.portal.azure-api.net

Hi, I use APIM and have configured custom domain also. However I am still able to see/access the default URL. Please explain us the way to hide/restrict the developer portal URL *.portal.azure-api.net.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: d02a5991-da24-06a2-0c24-d012d2e07399
Version Independent ID: 64acd893-43bb-81af-d14d-0b7553e93daf
Content: Configure a custom domain name for your Azure API Management instance
Content Source: articles/api-management/configure-custom-domain.md
Service: api-management
GitHub Login: @vladvino
Microsoft Alias: apimpm

@agnimitra Thank you for the question about our documentation!  We are reviewing the document in question and will get back to you shortly.

@agnimitra Unfortunately default domains remain active, and cannot be disabled.
We are going to close this thread as resolved but if there are any further questions regarding the documentation, please tag me in your reply and we will be happy to continue the conversation.

Hi, We are dealing with a similar problem. We have a frontdoor that is linked to an API management service. We have assigned a custom domain to the front door but not an API Management Service. The url of the API management Service is available to the general public. So, how do we restrict access? Any suggestions are welcome.

authors: agnimitra kobulloc-MSFT raovex


text:
Service bus

Hi,
regarding the service bus mentioned in the table above, I am not able to find any other material on 'Server side encryption using service managed keys' or how to enable this?
Please can you extend to provide further information, how do we enable this or is this enabled by default?
thanks,
Waheed

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: cd0472f9-1ed9-0154-3bfd-b25e5da64cd1
Version Independent ID: 846187d4-c24c-279f-e216-80b6507228b3
Content: Microsoft Azure Data Encryption-at-Rest
Content Source: articles/security/azure-security-encryption-atrest.md
Service: security
GitHub Login: @barclayn
Microsoft Alias: barclayn

@waheedhussain Thanks for your feedback! We will investigate and update as appropriate.

@waheedhussain Thanks for the feedback !  I have assigned this issue to content author to investigate and update the document as appropriate.

Hi,
I would like to know  if encryption at rest is enabled by default ? Is there anyway to confirm that it is enabled ?
@barclayn @SaurabhSharma-MSFT
Thanks
Rorotu

@waheedhussain  sorry for the slow response. I contacted a PM and I am waiting for updates.

@barclayn I'm also trying to find out if encryption at rest is possible for Service Bus and enabled by default. So if you have any updates from the PM, please let us know.
Thanks,
Ronald

@waheedhussain and @JustRonald  Sorry for the delays. The response I received was that we are exploring ways to do this but it is not currently available. I will make some updates today.

@waheedhussain and @JustRonald follow up on this. The PM for service bus confirmed that encryption at rest is enabled by default and it is not something that can be configured.  (so the table is correct as it is)

But how to enable client managed keys for Service Bus? Is this feature available?

@palusik and @abhiTechcs I was told “Coming soon”  so unfortunately, I have nothing to share beyond that at this point.

@jeffhollan Hi Jeff,
I am not sure, this is the right place to ask this question but i will try my luck here. :)
As per the microsoft documentation
the data encryption at rest is enabled by default for Azure Service Bus. but unfortunately, we cannot enable it using client managed keys for service bus.
Do you reckon we can get this service enabled pretty soon in Future?
My second question is how can we utilise this functionality with Azure Function V2?
scenario: sending encrypted messages (encrypted using Client managed key) from http triggered function to azure service bus queue and
Receiving encrypted messages in another azure function V2 and decrypt it with the client managed key.
Appreciate your help in advance.
Thanks,
Abhi

Hi @waheedhussain , please reach out with this question on MSDN in the KeyVault forum. I monitor this forum every day and will ensure that you get help. https://social.msdn.microsoft.com/forums/azure/en-US/home?forum=AzureKeyVault

I am closing this out as this is a troubleshooting question better suited for the forums. Feel free to link your post here so that others on this thread can stay in the loop.

source: gharchive/issue

authors: JustRonald MarileeTurscak-MSFT Rorotu SaurabhSharma-MSFT abhiTechcs barclayn palusik waheedhussain

repo: MicrosoftDocs/azure-docs

license_type: permissive

license_source: github-api


text:
How to pass default value to fields like email in sign up policy through c# code

Hi,
We are using Azure B2C built in policies for sign in and sign up. Below is the code what we are using for sign up.
var authenticationProperties = new AuthenticationProperties() { RedirectUri = "/xxxx" };
HttpContext.GetOwinContext().Authentication.Challenge(authenticationProperties, Startup.SignUpPolicyId);.
This is working fine, but we got a requirement where we need to autopopulate email address in the sign up screen. Can you please help me on this.

@dkchittimilla please provide us with the documentation you are referring to so we an better assist

Thanks for your reply's. But I mainly want to pre-populate the field using code (I should pass a value while calling the Sign Up policy and this value should be pre-populated). Is there any way we can do that. Lets say some default value I want to populate in my email text box by the time Sign Up page loaded.

authors: MicahMcKittrick-MSFT dkchittimilla


text:
The link to the Live SDK is incorrect

The link to the Live SDK resolves to https://msdn.microsoft.com/library/bb404787.aspx which isn't for using the LiveAuthClient.  Please update the documentation to describe how to authenticate the Office API.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: b01cf43e-ecf3-ce7a-f9b8-a54918d23601
Version Independent ID: b9b8e1e9-2e1f-ce3a-faed-2d3ccef82a9d
Content: Working with the App Service Mobile Apps managed client library (Windows
Content Source: articles/app-service-mobile/app-service-mobile-dotnet-how-to-use-client-library.md
Service: app-service-mobile
GitHub Login: @conceptdev
Microsoft Alias: crdun

Hello @mscherotter Thanks for bringing this to our attention, I have assigned this to the author so it can be updated

@mscherotter thanks for your feedback. It looks like the Live SDK just recently reached end-of-life (see this migration doc for more info). We'll update this page to reflect the deprecation.
I haven't had a chance to do an exhaustive search, but perhaps this Microsoft Graph Auth doc might be useful?


text:
Where to obtain the subscription keys?

I am creating my Single Page App to consume the API hosted in Azure API Management Service. I understand that I need to add "Ocp-Apim-Subscription-Key" into my header when submitting the request. However, where can i get the subscription key? My APIs in API management Service has added "Unlimited" into the "Products" fields.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: a9b18e22-18d0-f82d-cbd0-e9ca300ee655
Version Independent ID: 2737fc2f-cb47-c881-e2ca-1eba4efa26d2
Content: Create subscriptions in Azure API Management
Content Source: articles/api-management/api-management-howto-create-subscriptions.md
Service: api-management
GitHub Login: @miaojiang
Microsoft Alias: apimpm

@bcube If you enable the option to Require subscription for the product settings, then you must pass the below header Ocp-Apim-Subscription-Key. Even you provide subscription key, the key should belong to the product which the API includes. If you don't want the subscription option, disable it in the product settings.
You can find the subscription key (Primary/Secondary) in APIM developer portal on profile screen.

@bcube Checking in to see if the above post helped answer your question. Let me know if there are still any additional issues I can help with.

@bcube Since we have not heard back from you we will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

authors: KetanChawda-MSFT bcube


text:
Shaping events from different devices (i.e. different json properties)

Hello
we are wandering what would be the best practice that applies when the events are generated by different type of devices with no intersection of properties.
Consider, as example, messages coming from a device of type A:
{
  "timestamp" : "2019-02-25T01:08:00Z",
  "devicetype" : "a",
  "windspeed" : 10,
  "airpressure" : 101300
}

and messages coming from a device of type B
{
  "timestamp" : "2019-02-25T01:09:00Z",
  "devicetype" : "b",
  "temperature" : 26.5,
  "humidity" : 22.5
}

where timestamp is the column used as the source timestamp and devicetype the column used as the Time Series ID.
Following the doc it seems that the resulting output would be like

timestamp
devicetype
windspeed
airpressure
tempearature
humidity

2019-02-25T01:08:00Z
a
10
101300

2019-02-25T01:09:00Z
b

26.5
22.5

In practice, devices of different types will never share any properties. Therefore,

Are we going to get the same degree of performance for speed and memory allocation (blob)?
Are we wasting space?
Is there a better way to organize the events?
What if we change the properties and introduce a common field?

Thanks :)
Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: ddb074e8-7df6-5b8d-01c1-63ac213a111a
Version Independent ID: 4c4d5abf-1a29-92db-709a-0d1ebacbfce4
Content: Shape events with Azure Time Series Insights Preview
Content Source: articles/time-series-insights/time-series-insights-update-how-to-shape-events.md
Service: time-series-insights
GitHub Login: @ashannon7
Microsoft Alias: anshan

@alevincenzi Thanks for your reaching out. Since this doesn't seem like documentation bug or documentation feedback. Would you please create a post on StackOverflow? We have engineers there along with community members that can help you there. If you do so please share the link here. Thanks again!

@alevincenzi Thanks for your reaching out. Since this doesn't seem like documentation bug or documentation feedback. Would you please create a post on StackOverflow? We have engineers there along with community members that can help you there. If you do so please share the link here. Thanks again!

Sure, here the post on Stackoverflow. I just cloned the question.
I have read the best practices section at the top of this document and thought it would be a reasonable use case to describe. Anyway, lets move the discussion there.

@alevincenzi  We will now proceed to close this thread. I will raise your question internally to ensure you get help and we will gladly reopen the issue and continue the discussion if needed. Just please tag me on your reply.

authors: Alberto-Vega-MSFT alevincenzi


text:
What permissions are required on subscription for the end user connecting to AKS cluster using kubectl?

In my scenario, user abc@xyz.com has Reader role assigned on the subscription and he is trying to deploy a service of type load balancer. Isn't the service principal (used by AKS) permissions enough to provision the load balancer? I am getting errors like The client 'abc@xyz.com' with object id 'xxxxxxxx-xxxx-xxxx-xxxxx-xxxxxxxxxxxx' does not have authorization to perform action 'Microsoft.Resources/subscriptions/resourcegroups/read' over scope '/subscriptions/xxxxxxxx-xxxx-xxxx-xxxxx-xxxxxxxxxxxx/resourcegroups/MC_xxxx'
Is there a documentation on what minimum permissions are required for an end user on the subscription? If end user has been assigned cluster role binding to perform service deployments etc in the RBAC'ed cluster

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 92b18eba-07a5-dbbf-b697-0264e326f4d4
Version Independent ID: 8c025ef6-38a6-eca5-7729-8f040fbbbe10
Content: Concepts - Access and identity in Azure Kubernetes Services (AKS)
Content Source: articles/aks/concepts-identity.md
Service: container-service
GitHub Login: @iainfoulds
Microsoft Alias: iainfou

Thanks for the question! We are investigating and will update you shortly.

@badalk Reader role only allows the users to view the Azure resources but not create new ones
https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles#azure-rbac-roles

@MicahMcKittrick-MSFT I know that but my question was, when kubectl create command is executed for a service manifest that is deploying load balancer service, wouldn't it be SP identity that is used to provision the resources? SP has the contributor role on the subscription. Why we need to grant contributor permissions to each user for K8s application deployments?

@badalk as per documentation it looks like we link to the kubernetes docs for this information

https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
which does imply that read access is not enough.
@iainfoulds do you have any info you can add to this?

@MicahMcKittrick-MSFT I am not talking about K8s cluster role / role and rolebindings. Here is the scenario:
We provisioned the AKS cluster using ARM automation and the service principal has been given the contributor permissions on the subscription
We enabled RBAC and created a cluster-role-binding to give a specific Azure AD group a cluster admin role on K8s cluster
The end users are also granted AZURE KUBERNETES SERVICE CLUSTER USER ROLE to list the credentials using az aks get-credentials
The end users don't have Contributor role on the subscription though, they have only Reader role
My understanding is ->

When the end user logs into azure using azure cli (az login), he logs in with his credentials
He then sets aks context using az aks get-credentials (no --admin flag)
Since he belongs to a group and cluster is RBAC enabled, he is asked to login using devicelogin prompt
Once the flow comes back to the shell, he can do kubectl get pods etc.. successfully
Now when he tries to deploy a service of type load balancer - though it is his user context but when K8s tries to create the resources in the node resource group (e.g. load balancer), isn't the service principal doing that action and not the actual user who is logged in on the client side?

Is my understanding wrong?
Hope I am clear in what I am asking
Regards
Badal

The scenario as described should work. The internal service principal of your AKS cluster is used to provision the load balancer; the user permissions shouldn't influence that action here. It's the cluster service principal doing the work, not the user delegated permissions.
Since it sounds like the service principal has the appropriate permissions to create the load balancer, @MicahMcKittrick-MSFT can help start a support request to investigate the initial error message that you reported.

Thanks for confirming @iainfoulds
@badalk you can email me at AzCommunity@microsoft.com with your SubscriptionID and link to this thread and I can get you in contact with support.
I will close this and be on the lookout for that email.

I am ensuring all the setup once again and will come back if i need to raise a ticket. Thanks @iainfoulds @MicahMcKittrick-MSFT

authors: MicahMcKittrick-MSFT badalk iainfoulds


text:
If users find ACI operations that failed it may be because there is no admin user enabled on ACR

Please see https://github.com/MicrosoftDocs/azure-docs/issues/27220 for more info.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 3a077225-4fb9-57c8-6bf7-f6e22eef0870
Version Independent ID: bf5ce9ce-51a8-43e2-7362-e3de0e2ac63e
Content: Deployment troubleshooting guide - Azure Machine Learning service
Content Source: articles/machine-learning/service/how-to-troubleshoot-deployment.md
Service: machine-learning
GitHub Login: @chris-lauren
Microsoft Alias: clauren

@jeffmartinxyz Thanks for the feedback. We are investigating into the issue and will update you shortly.

@jeffmartinxyz We will go ahead and close this issue since we use default contributor role assignment to deploy ACI.
Please check issue 27220 for more details.

authors: RohitMungi-MSFT jeffmartinxyz


text:
Azure Key Vault for elastic jobs?

I'm wondering if an Azure elastic job can be assigned an App ID, so that the target databases can grant access to it through settings for their Azure keys?
This question refers to the following doc page, which falls short of answering integration between elastic jobs and Azure key vault:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-jobs-powershell
Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 29114656-dbc0-e00f-707a-fbf3098afedb
Version Independent ID: 35b16380-cedf-780b-e2ab-7ca47ad1298b
Content: Create and manage elastic jobs using PowerShell
Content Source: articles/sql-database/sql-database-elastic-jobs-powershell.md
Service: sql-database
Sub-service: scale-out
GitHub Login: @stevestein
Microsoft Alias: sstein

@shmahanta Thank you for the inquiry. I am curious if you have Azure Active Directory configured for your Azure SQL Server instance where your Elastic DBs are hosted? If you do, then you might possibly be able to use Azure AD password authentication in the credentials for the Elastic Jobs Agent. With this authentication, you can extend privileges to Azure Key Vault.

@Mike-Ubezzi-MSFT Thanks. Our DB is already registered for AAD.
I think I would need an Azure app ID for the elastic job to be able to give access to other resources easily. But I'm not sure if elastic jobs can be related to an Azure app:
https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal

@johnpaulkee who had helped with another spec for elastic jobs.

The solution is Managed Service Identities and Azure SQL Database does support this functionality, as does Azure Key Vault. You create the identity and add that identity to each service you desire access to. This blog is the best I could find:
Azure SQL authentication with a Managed Service Identity

Thanks Mike, however, these steps are for an Azure web app. An elastic job is not listed in the supported services for Managed identities:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/services-support-managed-identities
Is there any clear guideline specific to elastic jobs? Am I missing some part, such as a capability to encapsulate the elastic job in an Azure app?

@shmahanta Really not exactly sure what you are attempting to do. You can use Managed Identities in Azure App Service and Azure Functions. PowerShell Modules can be used in Azure Functions. Using Managed Identities directly in Elastic Job does not make sense. Please consider using the Azure SQL Database Uservoice to make a feature request or leverage the forums (MSDN or Stack Overflow) to ask this question to a wider audience.
We will now proceed to close this thread. If there are further questions regarding this matter, please comment and we will gladly continue the discussion.

authors: Mike-Ubezzi-MSFT shmahanta


text:
The new Directory show when we logout / login of Azure Portal

In the the point 4 of that documentation https://docs.microsoft.com/en-ca/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory, it mentions that it takes some time before new Directory appears in the Switching interface. After a few minutes after nothing showing up, I tried to logout / login of Azure Portal and my new Directory was in the Switching interface. Maybe it's a normal behavior and it should be documented in that page.

Document details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: da261ee4-3348-b520-a27c-98f9d9ef40cc
Version Independent ID: 13d12189-ee46-8058-dd99-058adc69f1c5
Content: Add an existing Azure subscription to your tenant - Azure Active Directory
Content Source: articles/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory.md
Service: active-directory
Sub-service: fundamentals
GitHub Login: @msaburnley
Microsoft Alias: ajburnle

@tremblaysimon
Thanks for your feedback! We will investigate and update as appropriate.

I agree that it would be useful to have a note here about sometimes needing to log out and log back in. I've made a pull request to add this.
Thanks for the suggestion, @tremblaysimon ! https://github.com/MicrosoftDocs/azure-docs-pr/pull/84232
@msaburnley


text:
Building Projects with Azure DevOps Private NuGet Feed Dependencies

When the Project references NuGet packages published to a private AzureDevOps feed, the following error is produced:
> Please provide credentials for: https://{your-org}.pkgs.visualstudio.com/_packaging/{your-feed}/nuget/v3/index.json
How can private NuGet Feeds be leveraged in this scenario?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 81dce42d-71bc-9ac0-b016-4add247bb48a
Version Independent ID: 72e95a87-a302-d06c-5a0f-e2f5caf201d1
Content: Continuous deployment - Azure App Service
Content Source: articles/app-service/deploy-continuous-deployment.md
Service: app-service
GitHub Login: @cephalin
Microsoft Alias: cephalin

Thanks for the feedback! We are currently investigating and will update you shortly.

@JoeBrockhaus, once you've configured your app service for pipelines, sign into your https://dev.azure.com account and add your private feed to your artifacts. It should then be selectable from your nuget restore command.

Hi @JoeBrockhaus wanted to follow up to see if you were able to utilize your private nuget feed in your CI/CD pipeline.
Let us know.

We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

authors: JoeBrockhaus RyanHill-MSFT


text:
Can Av2-Series use "Premium storage"?

Hi, team!
This document states that Av2-Series uses “Premium Storage”.
But i think that it can not using "premium storage".
Would you tell me which is the correct and details of Av2-series?
>Premium Storage: Not Supported
>Premium Storage caching: Not Supported
>Av2-Series sizes run on the Intel® Xeon® 8171M 2.1GHz (Skylake) or the the Intel® Xeon® E5-2673 v4 2.3 GHz (Broadwell) or the Intel® Xeon® E5-2673 v3 2.4 GHz (Haswell) processors with Intel Turbo Boost Technology 2.0 and use premium storage.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 9bb1d37c-6337-0906-42ff-b5dbc6afdc8b
Version Independent ID: 72a96e16-1d2d-4c01-45be-3caf82470592
Content: Azure Windows VM sizes - General purpose
Content Source: articles/virtual-machines/windows/sizes-general.md
Service: virtual-machines-windows
GitHub Login: @jonbeck7
Microsoft Alias: jonbeck

@wankostar
Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.

@jakaruna-MSFT
I appreciate for your help.
Would you tell me about the situation?
Thanks!

@wankostar Since this issue is same as https://github.com/microsoftdocs/azure-docs/issues/44108,
We will now close this issue. If there are further questions regarding this matter, please tag me in a comment. I will reopen it and we will gladly continue the discussion.
We will get your feedback incorporated and reply on this issue: https://github.com/microsoftdocs/azure-docs/issues/44108


text:
Instructions are a bit ambiguous

I'm trying to follow the instructions on this page via the Portal but am not having much luck. On the "Add multi-site listener" blade I select the Key Vault but it shows a "The key vault must have GET permissions on the secret" error; I have created a policy to grant Get certificate permissions for the user-assigned Managed Identity. Am I doing something wrong? Does the App Gateway need a role assignment on the Key Vault as well?
Does the lack of explicit portal instructions mean that you can only (currently) do this using PowerShell (https://docs.microsoft.com/en-us/azure/application-gateway/configure-keyvault-ps)?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 4c416d5e-5bfd-c641-e9bb-324dcb921acc
Version Independent ID: 8739a044-d471-c432-3ed1-503539408ae8
Content: SSL termination with Azure Key Vault certificates
Content Source: articles/application-gateway/key-vault-certs.md
Service: application-gateway
GitHub Login: @vhorne
Microsoft Alias: victorh

@philipstreet-hiscox Thanks for the feedback! I would use PowerShell, as we have clearly outlined instructions for configuring this via PowerShell.
To add instructions for the portal, I have assigned this issue to the content author to evaluate and update as appropriate.

@philipstreet-hiscox the user assigned identity only requires get persmissions on the secrets. no additional role assignments are required. In the PowerShell example you can see this line:
Set-AzKeyVaultAccessPolicy -VaultName $kv -PermissionsToSecrets get -ObjectId $identity.PrincipalId

It says in "2. Configure your key vault" that it's recommended to store certificates as Certificates in the KV, not as Secrets. And in so doing, it would be '-permissionstocertificates get' that is required.

#reassign:winthrop28

Encountering this as well, seems a little misleading as I'm given a list of certificates, not secrets.  Also, I have already granted GET permission to the user managed identity that is being used.
Something doesn't seem right here.

Currently when trying to add a certificate through the secrets list, this message shows: "This feature has been deprecated. Click here to go to your list of certificates and import a new certificate."
Is there a plan to update the app gateway in accordance?

I am closing issues that are older than a year in order to research and cross reference them individually. I am recording each issue and compiling a list of articles to review. If you feel there is an urgent need to address something related to this GitHub issue, please open a new issue and I will reply in the new thread. Please also reference this GitHub issue number in the new issue. Thanks. #please-close

authors: BartVanBerkel ChrisSommers TravisCragg-MSFT assaf-grth atrauzzi greg-lindsay philipstreet-hiscox vhorne


text:
No guidance on how to manage the ASC Default Policy with PowerShell

In part 5 of the the 'Disable security policies' section is the instructions for how to disable certain policy parameters via the GUI.
I have been trying to research how to disable these parameters via PowerShell with limited success (the main one being "Just-In-Time network access control should be applied on virtual machines") , can you please amend the article to include an example command?
Cheers

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: a224f020-9828-db10-d927-4f0bc875e0a6
Version Independent ID: d5d7dd34-0997-0338-0e10-1aa7ec40dc4a
Content: Working with security policies
Content Source: articles/security-center/tutorial-security-policy.md
Service: security-center
GitHub Login: @memildin
Microsoft Alias: memildin

@memildin Could you please provide your views here if the suggested amendment could be done ?

We have requested the content team to check on this as to how best the documentation can be improved.

Hi Hopefully,  examples 3 and 4 on this page will help you answer this question:
https://docs.microsoft.com/en-us/powershell/module/az.resources/Set-AzPolicyAssignment?view=azps-3.8.0
Let us know if you need further guidance.
#please-close

authors: BarryShtPeas memildin shashishailaj


text:
Remove important text from image

For localization and search purposes, it's not best practice to include the list of required info as an image. Please replace this with a text list or table.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: ca240f49-ece4-cba8-5764-cac971896652
Version Independent ID: 26f6c050-e92b-a6c3-a566-b9f6ff86915e
Content: Azure ExpressRoute: Circuit configuration workflows
Content Source: articles/expressroute/expressroute-workflows.md
Service: expressroute
GitHub Login: @cherylmc
Microsoft Alias: cherylmc

@dcbrown16 , Appreciate your patience. As discussed offline, I will be assigning this issue to the respective content author for updating the document accordingly.

We will take this as a doc bug. I will work with the PM on this one. #please-close

authors: SubhashVasarapu-MSFT cherylmc dcbrown16


text:
Please provide dependency to reload the model trained by the designer

Hi, we can use the designer to train the model and the model can be registered or stored in blob storage . but there is no document mentions about what kid of packages we need to load the trained_model file.  Do we need JSON or PICKL?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 2d019e5f-d971-b4f4-5fcf-2072ad30dec7
Version Independent ID: 14a7de84-6cd6-ebeb-df6c-2d93dfadb742
Content: Tutorial: Deploy a machine learning model with the designer - Azure Machine Learning
Content Source: articles/machine-learning/tutorial-designer-automobile-price-deploy.md
Service: machine-learning
Sub-service: core
GitHub Login: @PeterCLu
Microsoft Alias: peterlu

@oo2316oo Thanks for the feedback. We are investigating the issue and will update you shortly.

@oo2316oo You can use JSON to load the data to your model. Here is an example for the SDK to load data for a model in scoring file.

@oo2316oo We will now proceed to close this thread. If there are further questions regarding this matter, please tag @RohitMungi-MSFT in your reply.


text:
Not up to date information

These steps are not up to date:
"Enable monitoring and configure event logging on an existing VM. You can enable diagnostics at the VM level. To enable diagnostics and then configure event logging, perform the following steps:
Select the VM.
Click Monitoring.
Click Diagnostics.
Set the Status to ON.
Select each diagnostics log that you want to collect.
Click OK."
There is Diagnostics Settings under Monitoring , then it is not Status to turn on and Azure diagnostics in a virtual machine is not set this manner any more.
Please update the article.
Regards, Ilkin

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: d4cd31f8-9ffe-9350-ab99-51bfbb7c66b3
Version Independent ID: 63e89e8b-cb06-2e67-5163-1b345ad522db
Content: Use blob storage for IIS and table storage for events in Azure Monitor - Azure Monitor
Content Source: articles/azure-monitor/platform/azure-storage-iis-table.md
Service: azure-monitor
Sub-service: logs
GitHub Login: @bwren
Microsoft Alias: bwren

@ctahok Thanks for the feedback.
Assigning content owner @bwren for visibility, review and document enhancement consideration if appropriate.

Thanks. We actually just updated this article along with a lot of others for the diagnostics extension.  More updates along the way, mainly for the Linux extension.
#please-close

authors: KrishnaG-MSFT bwren ctahok


text:
Add Secret Manager - please add this one liner to make it easier

Now: you are pointing the user to a Secret Management intro article away from the tutorial. All they really need to know is dotnet user-secrets init andUserSecretsId  is populated. Please make this change.. It's easier if everything is in one article rather than having to go to another article and then come back

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 2984100d-7d78-2115-40f4-4b9478a5a5bc
Version Independent ID: 24ac6adc-6779-b847-ce81-c9d36e4b067b
Content: Quickstart for Azure App Configuration with ASP.NET Core
Content Source: articles/azure-app-configuration/quickstart-aspnet-core-app.md
Service: azure-app-configuration
GitHub Login: @lisaguthrie
Microsoft Alias: lcozzens

@softchris Thank you for the feedback!  We are going to assign this to the document author so they can review the documentation.

@softchris - the tutorial itself actually contains everything you need to know about Secret Manager in order to complete the tutorial itself. I've updated it to make clear that the link out to the Secret Manager article is purely informational, for anyone wanting to know more about it.

#please-close

authors: kobulloc-MSFT lisaguthrie softchris


text:
Pricing "vCPU", "execution time"

This issue belongs to the page "https://azure.microsoft.com/en-us/pricing/details/functions/". Posting it here since there's no feedback link.
The pricing page says:

is billed on a per second basis based on the number of vCPU-s

and:

by the time in milliseconds it takes to execute the function

Please define what vCPU means. Does it mean that time is only counted while a CPU is in use (i.e. not while sleeping)?
From this it is not clear if CPU- or Wall-Time is used to calculate the price.
Does Thread.Sleep(10000) or Task.Delay(10000) cause costs? With Wall-Time it does, with CPU-Time it doesn't.
Does waiting for IO operations cause costs? With Wall-Time it does, with CPU-Time it doesn't.
Does waiting for async interruptions (like "await SomeAsyncFunc()") cause costs? With Wall-Time it does, with CPU-Time it doesn't.
PS.: after reading this a few more times... it seems like the "Consumption Plan" counts "Wall-Time", while the "Premium Plan" counts "CPU-Time". Is this correct?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: a8a0ac96-e410-b481-9fdb-90d827a98935
Version Independent ID: 6a133cdf-a66a-9807-d431-2e0ae43b253b
Content: Azure Functions Overview
Content Source: articles/azure-functions/functions-overview.md
Service: azure-functions
GitHub Login: @mattchenderson
Microsoft Alias: glenga

Hi @stmax82 Thanks for your feedback. We will review and update as appropriate.

@mattchenderson I have assigned this to content author for further review and update as appropriate.

@jeffhollan might be the best person to help with resolution here.
#reassign:jeffhollan
vCPU refers to what is exposed to the virtual machine in which the service runs, as opposed to the raw hardware.
You are correct that this is wall time.  Async tasks, IO, and Thread.Sleep do not get away from billing.
It is worth noting that Durable Functions allows an orchestration to go to sleep without billing concern, but this is more a statement on application structure rather than individual function code.
Aside: @ggailey777 I got tagged through the overview topic that this was filed against - should we update that metadata? I only touched the first versions of this article, and the Microsoft alias field shows you.

authors: DixitArora-MSFT mattchenderson stmax82


text:
Example doesn't work

I'm running PS 7 and tried to follow above example, but never get screen with changes:
PS C:\Users\elvir> New-AzResourceGroupDeployment >>   -ResourceGroupName ExampleGroup2
>>   -TemplateUri "https://raw.githubusercontent.com/Azure/azure-docs-json-samples/master/azure-resource-manager/what-if/what-if-before.json"
DeploymentName          : what-if-before
ResourceGroupName       : ExampleGroup2
ProvisioningState       : Succeeded
Timestamp               : 4/28/2020 3:30:25 AM
Mode                    : Incremental
TemplateLink            :
Uri            : https://raw.githubusercontent.com/Azure/azure-docs-json-samples/master/azure-resource-manager/what-if/what-if-before.json
ContentVersion : 1.0.0.0
Parameters              :
Outputs                 :
DeploymentDebugLogLevel :
PS C:\Users\elvir>   New-AzResourceGroupDeployment >>   -Whatif
>>   -ResourceGroupName ExampleGroup2 `
>>   -TemplateUri "https://raw.githubusercontent.com/Azure/azure-docs-json-samples/master/azure-resource-manager/what-if/what-if-after.json"
What if: Performing the operation "Creating Deployment" on target "ExampleGroup2".
PS C:\Users\elvir>

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 2a06520c-ba95-a3c7-85e4-9e9737ca1b69
Version Independent ID: fa6dbc5f-8301-6355-d899-2903e60d58f9
Content: Template deployment what-if (Preview) - Azure Resource Manager
Content Source: articles/azure-resource-manager/templates/template-deploy-what-if.md
Service: azure-resource-manager
Sub-service: templates
GitHub Login: @mumian
Microsoft Alias: jgao

@elvirk Thanks for your comment! We will review and provide an update as appropriate.

@elvirk - do you have the preview module installed?

I did, I removed PS 7 preview and tried again few time and each time I'm getting same results. I tried this running from VSC and from PS 7 but same.

Can you run this command and list the results:
Get-InstalledModule -Name Az.Resources -AllVersions | select Name,Version

PS C:\Users\elvir> Get-InstalledModule -Name Az.Resources -AllVersions | select Name,Version
Name         Version

Az.Resources 1.0.0
Az.Resources 1.12.0
PS C:\Users\elvir>

It looks like you need to run:
Install-Module Az.Resources -RequiredVersion 1.12.1-preview -AllowPrerelease

Thank you that did it - I guess I missed this requirements in documentation.

Glad to hear that worked. I changed the description in that part of the article to clarify the requirements.

#please-close

authors: KrishnaG-MSFT elvirk tfitzmac


text:
Correct casing of "Powershell" -> PowerShell

In the section "Create an image of a VM using Powershell", correct casing of "PowerShell".
Thanks,
--Neno

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 7d299c34-ffe1-b930-bace-f43c8d8217ca
Version Independent ID: b9eab64c-51a9-ad18-705c-15e553e0b2fe
Content: Create a managed image in Azure - Azure Windows Virtual Machines
Content Source: articles/virtual-machines/windows/capture-image-resource.md
Service: virtual-machines-windows
Sub-service: imaging
GitHub Login: @cynthn
Microsoft Alias: cynthn

@NenoLoje thanks for the PR! Closing this out.

authors: MarileeTurscak-MSFT NenoLoje


text:
Identity Provider OpenId Connect Logo

Could you add how to add a logo to an open id connection?  We'd like to add a logo to the login screen.  In fact, Apple will not accept any app that doesn't have the logo.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 15942a1a-df5c-bbeb-a693-510aadede4b2
Version Independent ID: dd96db95-d230-9690-ab08-dfc6ceaff7f2
Content: Set up sign-up and sign-in with OpenID Connect - Azure AD B2C
Content Source: articles/active-directory-b2c/identity-provider-generic-openid-connect.md
Service: active-directory
Sub-service: b2c
GitHub Login: @msmimart
Microsoft Alias: mimart

@chrisevans9629  Thanks for your feedback! We will investigate and update as appropriate.

@chrisevans9629 Hi, have you seen this documentation? It shows you how to customize the appearance. This document does as well. Please let me know if I can clarify anything!

Yeah we are working on implementing the custom html/css.  That seems to be
the only way to do this.  I was hoping that there would be a way to change
the logo on the buttons within the UI, but the custom css will do the
trick.  This probably can be closed
On Thu, Aug 20, 2020 at 4:31 PM James Hamil notifications@github.com
wrote:

@chrisevans9629 https://github.com/chrisevans9629 Hi, have you seen this
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/customize-branding
documentation? It shows you how to customize the appearance. This
https://docs.microsoft.com/en-us/azure/active-directory-b2c/customize-ui-overview
document does as well. Please let me know if I can clarify anything!
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/MicrosoftDocs/azure-docs/issues/61197#issuecomment-677916583,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AICIJGF2DBDEDFOSEC5QLXDSBWI2TANCNFSM4QFLCQRQ
.

Setting the logo of identity providers is a pretty standard task. It has no connection to a custom layout. This should be supported out of the box and should be part of configuring a custom IDP

We are currently giving Azure AD BC2 a trial run coming from auth0 and so far the experience has been very... microsofty.
Yes everything seems possible and powerful but even the very common use cases require complete customization or digging into xml policies. This is less then friendly to approach.

For anyone finding this, the basics:

Each identity provider is registered with an ID
In the default idp selector html this ID is added to the social button as attribute id="[ID]"
This html id is then used to assign an image via css

<style id="common">
        ...
        #LinkedInExchange {
          background-image: url(https://login.microsoftonline.com/static/tenant/templates/idp_logos/colored/linkedin.svg);
        }
        #LinkedInExchange:hover {
          background-image: url(https://login.microsoftonline.com/static/tenant/templates/idp_logos/white/linkedin.svg);
        }
        #MicrosoftAccountExchange {
          background-image: url(https://login.microsoftonline.com/static/tenant/templates/idp_logos/colored/microsoft.svg);
        }
        #MicrosoftAccountExchange:hover {
          background-image: url(https://login.microsoftonline.com/static/tenant/templates/idp_logos/white/microsoft.svg);
        }
        ...
</style>

Now you have two options:

Copy based apporach

create a copy of the default idp selector html
add a css targeting the id of YOUR identity provider
upload the html somewhere public
configure ab2c to use it

Shortcut

Rename your identity provider to match MicrosoftAccountExchange and the correct image will be picked up automatically
That's it, no need to maintain a custom html and while not failsafe its unlikely the Microsoft identity provider id will be changed any time soon
Please note this obviously only works when you use the single button for all types of Microsoft accounts login approach


text:
Need clarification on the following statement: "During preview, you can only add Namespace level permissions via the Azure CLI."

Hello,
From the documentation it is not clear what is meant here:
"During preview, you can only add Namespace level permissions via the Azure CLI."
My customer observed that you can use this for allowing access for non-namespaced resources in Kubernetes i.e. notes, for kubectl get node for instance.
Please can we clarify on this document what is meant here, and if possible add an example, to prevent reader confusion?
Many thanks,
Adam

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 42afd8de-b697-100c-98c7-ae8e6a6f1b92
Version Independent ID: 81674054-0ea2-210b-2e65-18a0f15617c1
Content: Manage RBAC in Kubernetes From Azure - Azure Kubernetes Service
Content Source: articles/aks/manage-azure-rbac.md
Service: container-service
GitHub Login: @palma21
Microsoft Alias: jpalma

@AdamSharif-MSFT
Thanks for the feedback! I have assigned the issue to content author to check and update the document as appropriate.

@palma21
Can you please check and add your comments on this doc update request as applicable.

Thank you @AdamSharif-MSFT for the feedback.
The article is no longer in preview.
#please-close


text:
Gen5 is available in most regions worldwide - which regions?

re section:
Hardware availability
Gen4/Gen5
Gen4 hardware is being phased out and is no longer available for new deployments. All new databases must be deployed on Gen5 hardware.
Gen5 is available in most regions worldwide*.
If I wanted to show a customer at a glance around the regions where the Generation 5  Compute is available - ''most regions'' isn't helpful, what are the specific regions?  Surely we can provide a list of available regions here or a direct link here to the evolving list of regions where gen5 is available??
Thanks

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: b154f4ad-6372-ac17-3084-1ff016073568
Version Independent ID: 8c4a54f3-8db5-7839-3008-724beecc3888
Content: vCore purchasing model overview - Azure SQL Database & Azure SQL Managed Instance
Content Source: articles/azure-sql/database/service-tiers-vcore.md
Service: sql-db-mi
Sub-service: features
GitHub Login: @stevestein
Microsoft Alias: sstein

@slave02 Thank you for the detailed feedback.
This is being assigned to the content author to evaluate and update the documentation as appropriate.

@slave02 - thanks for the feedback. Gen5 is available in all public regions. The article has been updated.
-Thanks

#please-close

authors: KalyanChanumolu-MSFT slave02 stevestein


text:
Extra (uncessary) PowerShell commands in Firewall configuration sample script to define domain and policy name, they are not used.

[Enter feedback here]

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 31718c09-8c87-c102-d326-c78e5ff018fd
Version Independent ID: 1b15c261-9ea8-e23b-d6a1-b3131dd403b9
Content: Windows Virtual Desktop RDP Shortpath (preview) - Azure
Content Source: articles/virtual-desktop/shortpath.md
Service: virtual-desktop
GitHub Login: @gundarev
Microsoft Alias: denisgun

Issue entered by mistake - closing.

Thanks for sharing the update.

authors: Karishma-Tiwari-MSFT squevill


text:
outdated Moby reference to be updated with Containerd

https://docs.microsoft.com/en-us/azure/aks/concepts-clusters-workloads#nodes-and-node-pools refers to Moby Whereas Containerd is used by default since 1.19, see https://docs.microsoft.com/en-us/azure/aks/cluster-configuration#container-runtime-configuration
See also #69327
Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: a445f8cc-6581-ad43-1dba-719a94eda81a
Version Independent ID: 31280746-d8de-91b4-d430-91693c2e869d
Content: Concepts - Kubernetes basics for Azure Kubernetes Services (AKS) - Azure Kubernetes Service
Content Source: articles/aks/concepts-clusters-workloads.md
Service: container-service
GitHub Login: @mlearned
Microsoft Alias: mlearned

@ezYakaEagle442
Thanks for your feedback! We will investigate and update as appropriate.

@ezYakaEagle442
Thanks for your feedback! We will investigate and update as appropriate.

@ezYakaEagle442
Thank you for pointing this out! I've assigned this issue to the author to investigate and update as needed.
Nodes and node pools documentation:

Container runtime configuration documentation:
AKS clusters using Kubernetes version 1.19 node pools and greater use containerd as its container runtime. AKS clusters using Kubernetes prior to v1.19 for node pools use Moby (upstream docker) as its container runtime.

@ezYakaEagle442
Thank you for pointing this out! I've assigned this issue to the author to investigate and update as needed.
Nodes and node pools documentation:

Container runtime configuration documentation:
AKS clusters using Kubernetes version 1.19 node pools and greater use containerd as its container runtime. AKS clusters using Kubernetes prior to v1.19 for node pools use Moby (upstream docker) as its container runtime.

thank you @ezYakaEagle442 for the feedback.
The article has been updated to address your feedback.
#please-close

authors: JamesTran-MSFT ezYakaEagle442 zr-msft


text:
Additional change to Az Spring Cloud Vnet integration

In the 'Grant service permission to the virtual network' section, in addition to changing the role to 'Owner', it will be beneficial to say to which user the 'Owner' role I assigned.
Based on my testing and understanding it is 'Azure Spring Cloud Resource Provider’ that needs the 'Owner' role.
Please correct me if am wrong or kindly update the document to reflect this.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: bee481df-4234-b6a2-7b20-6b3e4bef512c
Version Independent ID: 00f88b4b-45c7-a0c7-4ec5-c51a0115e16f
Content: Deploy Azure Spring Cloud in a virtual network
Content Source: articles/spring-cloud/how-to-deploy-in-azure-virtual-network.md
Service: spring-cloud
GitHub Login: @MikeDodaro
Microsoft Alias: brendm

#please-close

authors: KarlErickson vamckMS


text:
DNS forwarder information and directives for virtual link

[Enter feedback here]
The issue we are currently facing with this document is on the cases requiring the DNS forwarder. The customers most of the time have no clue how to set it up, let alone the most crucial part which is to have its VNET virtually linked to the Azure Private Zone privatelink.database.windows.net  created while enabling the Private Endpoint if the DNS forwarder and the PE are on 2 different VNETs.
To make the document more complete, it would be nice to have links to repos for DNS forwarder (Linux and Windows Server) and also some explanation with pics about the virtual link that need to be established.
Below is a link to a  DNS forwarder template:

Linux: https://azure.microsoft.com/en-us/resources/templates/dns-forwarder/

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: a88af182-32aa-a8f3-359d-b92ae1cfb8c7
Version Independent ID: 01ce07fc-4bc2-def5-9ecd-a80330ad9488
Content: Azure Private Endpoint DNS configuration
Content Source: articles/private-link/private-endpoint-dns.md
Service: private-link
GitHub Login: @asudbring
Microsoft Alias: allensu

Thanks for the feedback! We are taking a look into this and will get back to you soon.

@asudbring Can you please look into this?

Sending to PM for review.
#please-assign:@ivapplyr

The DNS forwarder can be linux or Windows

Thank you for you dedication to our documentation.?
?
Unfortunately, we have been unable to review this issue in a timely manner. We sincerely apologize for the delayed response. We are closing this issue. If you feel that the problem persists, please respond to this issue with additional information.?
?
Please continue to provide feedback about the documentation. We appreciate your contributions to our community.?
?
#please-close

authors: SaiKishor-MSFT Svijay-msft Tchimwa asudbring tcsougan


text:
Update request: includes patch versions that aren't supported

Regarding 'What happens when a user scales a Kubernetes cluster with a minor version that isn't supported?', I think it should be also included a patch version that isn't supported.
Could you please update 'with a minor or a patch version that isn't supported', or simply 'with a version that isn't supported'?
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: ec484163-5d73-af3a-3d7b-9e0d421d2824
Version Independent ID: 42da7aed-a33d-e331-fb7f-4fb4b40e5813
Content: Supported Kubernetes versions in Azure Kubernetes Service - Azure Kubernetes Service
Content Source: articles/aks/supported-kubernetes-versions.md
Service: container-service
GitHub Login: @palma21
Microsoft Alias: jpalma

@jyama4ta -  Thanks for brining this to our attention. We will investigate it further and update you shortly.

@jyama4ta - Thanks again for bringing this to our attention. We have updated the Doc and it will be live once its merged.  We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

Thanks @MonikaReddy-MSFT !! 💯


text:
Salesforce Marketing Cloud to ADF

Unable to connect to Salesforce Marketing Cloud from ADF Connector. Im getting permission denied or unathorized access error in ADF but Im able to successfully query SFMC via Postman REST calls using the same clientID, clientSecret and subdomain

Thanks for leveraging Azure docs feedback channel to raise this question. Could you please share the Azure documentation for which this feedback is applicable to?
This channel is reserved for ‘Azure docs’ feedback- for sharing doc feedback and suggesting content improvements.

@Svijay-msft Please finc the corresponding Azure docs : https://docs.microsoft.com/en-us/azure/data-factory/connector-salesforce-marketing-cloud?tabs=data-factory

@ashishmgofficial -
You are receiving a 403-error meaning there is a permission issue. The connector is built on top of the Salesforce Marketing Cloud REST API.  My understanding at this point of time is that there may be a restriction/permission had not been granted at the Salesforce end.
I had been researching and found a similar issue at my end. The resolution was adding/granting necessary client id responsible
the permission at the sales force end.

Having said that if the issue is still persistent, I would encourage to post your query in the [Microsoft Q & A] (https://docs.microsoft.com/en-us/answers/products/) as your query seems more related to 'Break-Fix'
GitHub forum is specifically for logging document feedback or document issues.
Alternatively, you could also raise a support ticket. How to create support request: https://docs.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-support-request
We will now close this issue in GitHub but hope to engage with you via our technical forums shared above.

@Svijay-msft Shouldn't the docs specify the minimum permissions required at Salesforce end for the connector to work ?

Hello @ashishmgofficial - Since there is mention that the connector is built on top of the Salesforce REST Api . I am assuming the referenced documentation of the Salesforce REST API should have the necessary permission requirement.
However, just checking with the author of the document - @jianleishen for thoughts on this.

@Svijay-msft Sure, but the api is accessible when tested via Postman, which means it's ADF , who specifically requires some relevant permission. So technically, if it's any specific permission is required for ADF connector to work, it should be mentioned in the ADF Connector doc as prerequisite

authors: Svijay-msft ashishmgofficial


text:
port 25 thing  is a bit difficult to understand

Hello,
port 25 rule is a bit difficult to understand because now this doc says "ending email on Port 25 is unsupported from all Azure Platform-as-a-Service (PaaS) resources, including Azure App Service and Azure Functions." but we can use port 25 in App service.
Some users will confuse because of that
I hope this doc explain more detail.
c.f.
Now App service can use port 25 regardless of the subscription, but it is not supported.
port 25 in App service is possible to become useless.
App service can't use port 25 when using VNet integration.(https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#application-routing)

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 027fa865-2329-23de-3740-cfbe35359302
Version Independent ID: 99f0a52f-8df4-f8d4-3d4e-778fea2a389f
Content: Troubleshoot outbound SMTP connectivity in Azure
Content Source: articles/virtual-network/troubleshoot-outbound-smtp-connectivity.md
Service: virtual-network
GitHub Login: @genlin
Microsoft Alias: genli

@kohei-miyoshi Thanks for your feedback! We will investigate and update as appropriate.

@kohei-miyoshi , We have assigned this to the content owner/author for review.
@genlin , can we add more details on the Important section which says "Sending email on Port 25 is unsupported from all Azure Platform-as-a-Service (PaaS) resources, including Azure App Service and Azure Functions." for more clarity?


text:
GCP Native cloud connector (recommended)

GCP Native cloud connector (recommended) description needs to be updated to GCP resources (Currently It is the same as AWS resources).
Thank you.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: c9132fa3-434e-8339-b5e4-5ecc924d8f63
Version Independent ID: 365c05fb-43b8-807c-e14b-804050e0340a
Content: Connect your GCP project to Microsoft Defender for Cloud
Content Source: articles/defender-for-cloud/quickstart-onboard-gcp.md
Service: defender-for-cloud
GitHub Login: @ElazarK
Microsoft Alias: elkrieger

@Minalt1355
Thanks for your feedback! We will investigate and update as appropriate.

#reassign: @bmansheim

@Minalt1355 I recently received a comment about this from someone else as well. I just merged a change that I think covers the issue. If you want, you can check tomorrow to see how it looks. If there are still issues, please comment here.
#please-close

authors: Minalt1355 YashikaTyagi-MSFT bmansheim


text:
Enhanced backup policy and selective disk backup doesn't work together.

Enabling Selective Disk Backup in a standard backup policy works fine.

However, when you have a VM under Enhanced Policy and try to enable selective disk backup, it gives you a misleading error message.

Kindly update our public documentation regarding this if this is expected.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: c377efd1-001c-0c4f-cadb-0c60decc0c6d
Version Independent ID: ca9492ae-ca22-d786-b1a7-49f9b6ba9c8e
Content: Selective disk backup and restore for Azure virtual machines - Azure Backup
Content Source: articles/backup/selective-disk-backup-restore.md
Service: backup
GitHub Login: @v-amallick
Microsoft Alias: v-amallick

@jusolis
Thanks for your feedback! We will investigate and update as appropriate.

@v-amallick Can you please review this issue?

Hi @jusolis  - thanks for writing to us. We are planning to release Enhanced policy with selective disk backup in preview soon.
As there are no doc updated needed, we are closing this issue - #please-close .

authors: Naveenommi-MSFT SwathiDhanwada-MSFT jusolis v-amallick


text:
proximity placement group support

VMSS Flex configuration blade shows "Proximity placement group configuration cannot be changed in virtual machine scale sets with flexible orchestration mode"

@fitzgeraldsteele
Can you review the proposed changes?
When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.
#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

This is not correct. PPG is supported, just not changable after deployment

This merge should be denied

Thanks @fitzgeraldsteele I'll close the PR now.

source: gharchive/pull-request

authors: Court72 ShannonLeavitt fitzgeraldsteele juanandmsft


text:
Update functions-bindings-storage-blob-trigger.md

Hello,
I see some Blob trigger functions occur errors as it cannot access a queue storage. To avoid this issue, proposing an additional
note to allow the access.

@ggailey777
Can you review the proposed changes?
IMPORTANT: When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.
@MicrosoftDocs/public-repo-pr-review-team

emailed author

@yuna-s how did you get into the situation where your function app didn't have access to Queue Storage in the storage account you are using for AzureWebJobsStorage? I'm disinclined to accept your suggestion because I don't think this situation is very likely to occur.
I will go ahead and update this article to include blob trigger as something that required the queue storage.
Please let me know if I am misunderstanding your scenario.

hi @ggailey777 Thank you for your checking! Your suggestions is nice. Some customer enables Firewall on Azure Storage and it blocks requests to queue storage. Using Firewall on the Storage is not unusual sinario. I think it would be more kindly that making it clear to customers that Blob trigger also needs access to Queue storage.

Thanks @yuna-s this is very good information! I'll keep it in mind as I work on our troubleshooting documentation.

authors: American-Dipper AnnaMHuff ggailey777 yuna-s


text:
Added an explanatory sentence regarding minimum notice time of event scheduling.

I suppose it is some difficult to understand what is the minimum notice time of event scheduling.
I added a an explanatory sentence regarding it.

I couldn't link. This is the isuue.
https://github.com/MicrosoftDocs/azure-docs/issues/113731

Excuse me. I would make another PR for fix. Thanks.


text:
Update copy-activity-data-consistency.md

The json format specified is not in the right format

@dearandyxu
Can you review the proposed changes?
When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.
#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

Merged in https://github.com/MicrosoftDocs/azure-docs-pr/pull/252749. #please-close

authors: Bowrna Court72 jonburchel


text:
Update custom-extension-get-started.md

Fix spelling mistake

Thanks, @soneff!


text:
Fixed typo in azure-to-azure-powershell.md

Fixed typo as specified by in issue 16664

@akramkazmi71 : Thanks for your contribution! The author, @sujayt, has been notified to review your proposed change.


text:
fix: articles/security/azure-security-threat-modeling-tool-sensitive-data.md

Incorrect code fence languages
Example indenting
Missing closing brace in JS example
Remove code fence from list
Remove double quote escaping in XML

@nschonni @jegeib - We're in the process of pulling this commit to the private repository so we can verify the updates on staging. We'll post a new private repo PR # shortly and then close this PR.

@nschonni @jegeib - We've moved this PR to the private repo for validation and staging in PR https://github.com/MicrosoftDocs/azure-docs-pr/pull/64973.

authors: GitHubber17 nschonni rjagiewich


text:
Fixed typo

Fixes #25282

@Potapy4 : Thanks for your contribution! The author, @douglaslMS, has been notified to review your proposed change.

@Potapy4 - thank you for the typo catch!


text:
Delete unnecessary spaces

When copying from the web page, there is an unnecessary space after the code.

@changeworld : Thanks for your contribution! The author, @georgewallace, has been notified to review your proposed change.

@changeworld : Thanks for your contribution! The author, @craigshoemaker, has been notified to review your proposed change.

Thanks, @changeworld! I appreciate you taking the time to submit this PR :smiley:
#sign-off

@changeworld - Thank you for your submission. We are not able to accept these kinds of changes (formatting and spacing changes) in the repo at this time.


text:
gender neutral language

change "she" to "them", "she'll" to "they'll"

@emberstevens : Thanks for your contribution! The author, @mrbullwinkle, has been notified to review your proposed change.

Placeholder name "Marcela Markova " isn't gender-neutral, so it doesn't correspond with the updated gender-neutral pronouns. Please replace with non gender-specific placeholder.

This article was slated for retirement, and has now been retired and is no longer live.
#please-close

authors: PRMerger6 chbain emberstevens mrbullwinkle


text:
Fixed typo

PACPAC => BACPAC

@OskarKlintrot : Thanks for your contribution to the Azure documentation! The author, @janeng, has been notified to review your proposed change.

#sign-off
@OskarKlintrot thank you

authors: CarlRabeler OskarKlintrot PRmerger


text:
Update configure-azure-oci-networking.md

Removing the pre-requisite for OCI tenancy whitelisting as this has been lifted by Oracle.

Microsoft authors of articles need to make updates through the private repository so the updates can be staged and validated by the current validation rules. After you review staging and fix all validation issues, you can add the sign-off comment to let the PR reviewers know the updates are ready to be merged.It's easy to access the private repo version of your articles in GitHub. Just add -pr to the URL, as follows:
Public repo URL: https://github.com/Microsoft/azure-docs/blob/master/articles/azure-portal-overview.md
Private repo URL: https://github.com/Microsoft/azure-docs-pr/blob/master/articles/azure-portal-overview.md
We have closed this pull request. Please resubmit the updates through the private repo. If you need perms to the private repo, see the contributor guide instructions


text:
Suggested a more explicit "device"

Explicitly mentioned which device the device registration refers to.

@amang2205 : Thanks for your contribution! The author(s) have been notified to review your proposed change.

Related to issue #37157

Made an edit to your PR.

Which edit besides closing the PR?

One of the prerequisites to create this new strong credential, is that the device, where the Microsoft Authenticator app is installed, must also be registered within the Azure AD tenant to an individual user. Due to current device registration restrictions, a device can only be registered in a single tenant. This limit means that only one work or school account in the Microsoft Authenticator app can be enabled for phone sign-in.

OK, understood. Thanks.
I'm completely confused as the PR was not merged.

I tried to edit yours but just ended up publishing via a PR (https://github.com/MicrosoftDocs/azure-docs-pr/pull/86008) from the private repo we use internally.


text:
Update key-vault-ovw-soft-delete.md

Clarify soft delete immutability

@binaryjanitor : Thanks for your contribution! The author(s) have been notified to review your proposed change.

Hi, @binaryjanitor. We mention this a few sentences later:  "Once soft-delete has been set on a key vault it cannot be disabled, and the retention policy interval cannot be changed."  However, I agree that this could be clearer.  How about:

When soft-delete is enabled, resources marked as deleted resources are retained for a specified period (90 days by default). The service further provides a mechanism for recovering the deleted object, essentially undoing the deletion.
When creating a new key vault, soft-delete is on by default. You can create a key vault without soft-delete through the Azure CLI or Azure Powershell. Once soft-delete is enabled on a key vault it cannot be disabled
The default retention period is 90 days but, during key vault creation, it is possible to set the retention policy interval to a value from 7 to 90 days through the Azure portal. The purge protection retention policy uses the same interval. Once set, the retention policy interval cannot be changed.

This sounds great. The way it was originally phrased was confusing and this simplifies significantly.

@msmbaldwin - Would you like me to apply your revisions to the pull request?

Hi again, @binaryjanitor. The live doc now has the rewrite. Thanks for the feedback -- we really appreciate it! https://docs.microsoft.com/en-us/azure/key-vault/key-vault-ovw-soft-delete #please-close

authors: PRMerger17 binaryjanitor ktoliver msmbaldwin


text:
Update nodejs.md

Add link to list of supported third party libraries

@markwolff : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#sign-off

authors: PRMerger8 markwolff mrbullwinkle


text:
Added one missing events

"MFA is enabled for the user" is supported as well.

@lujiangfeng666 : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#sign-off


text:
Update virtual-network-powershell-sample-filter-network-traffic.md

Update to Get-InstalledModule -Name Az

@jieya-ms : Thanks for your contribution! The author(s) have been notified to review your proposed change.

@KumudD - Hi, would you review the proposed change to your article? Thanks.

#sign-off

authors: KumudD PRMerger9 jieya-ms ktoliver


text:
Update availability-zones.md

Updated new regions. SA North, South Central US, Germany West Central.

Hi @keikhara - This pull request was opened in the public repo. PMs should work in the private repo, per the Microsoft Docs contributor guide. It looks like you have opened PRs in the private repo before. Would you make this content update in the private repo instead? Thank you! We'll close this PR.

authors: keikhara ktoliver


text:
Update iot-edge-verify-iot-edge-continuous-integration-continuous-dep…

…loyment.md
Add a troubleshooting step to explain how to enable diagnostic logs.

@marianan : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#sign-off

authors: PRMerger13 marianan v-tcassi


text:
Including service connection(manual setup)

Including manual setup when creating a service connection.

@Anne56njeri : Thanks for your contribution! The author(s) have been notified to review your proposed change.

Please remote the note about not supporting managed identity too.

@zhenlan Thanks for your review.
@Anne56njeri Thanks for incorporating feedback on your pull request.
@AlexandraKemperMS Could you review the proposed update?
Thanks, all.

#sign-off

@ktoliver : Thanks for your contribution! The author(s) have been notified to review your proposed change.

Thanks, all.


text:
Readability typographical / grammatical error

There is a message with a potential readability issue. This message is shown in a warning reminder tooltip on https://github.com/MicrosoftDocs/azure-docs/edit/master/articles/active-directory/develop/v2-protocols-oidc.md (at the bottom of the "Successful token response" section).
Current Sentence

Tokens for Microsoft services can use a special format that will not validate as a JWT, and may also encrypted for consumer (Microsoft account) users.

Proposed Change to Sentence
From:

.. and may also encrypted ...
To:
... and may also be encrypted ...

Updated Sentence

Tokens for Microsoft services can use a special format that will not validate as a JWT, and may also be encrypted for consumer (Microsoft account) users.

Scope
Improve readability with minimal modification. No major structural changes made (in order to preserve the original intent).

@trentapple : Thanks for your contribution! The author(s) have been notified to review your proposed change.

Looks good; thanks @trentapple.

authors: PRMerger15 ktoliver trentapple


text:
Update concept-default-purview-account.md

Modified Purview to Azure Purview as per latest guidance

@athenads : Thanks for your contribution! The author(s) have been notified to review your proposed change.

@ktoliver : Thanks for your contribution! The author(s) have been notified to review your proposed change.

Looks good; merging per https://github.com/MicrosoftDocs/azure-docs/pull/86342#issuecomment-1012242204.


text:
add aks addon update faq

Adding in an FAQ on how to update an AKS addon.

@PixelRobots : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#label:"aq-pr-triaged"

Hey, Any update on this?

Hey, Any update on this?

Hey, Any update on this?

Any update on this PR?

Any update here?

LGTM
#sign-off

Learn Build status updates of commit a58f7c9:
:white_check_mark: Validation status: passed

File
Status
Preview URL
Details

articles/aks/faq.md
:white_check_mark:Succeeded

For more details, please refer to the build report.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
For any questions, please:Try searching the learn.microsoft.com contributor guidesPost your question in the Learn support channel


text:
Update (incl. SQL Managed Instance) in two spots.

Update (incl. SQL Managed Instance) in two spots.

@jeremiahjordanisaacson : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#please-close


text:
Discussion of Visual Studio .NET 2003 and Visual Studio .NET is antiquated and largely irrelevant now.

The beginning of the description of the warning was still relevant about 15 years ago, but not now. Nobody cares anymore what precipitated the addition of the warning.
I suggest the following subset should be all that we leave in the description:
[
unreachable code
When the compiler (back end) detects unreachable code, it will generate C4702, a level 4 warning.
Remove the unreachable code or assure that all source code is reachable by some flow of execution.
]

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 46377c2b-c72c-8279-f7ff-7d31bf4aab54
Version Independent ID: 31f7f75a-646a-4ffd-9631-6933a6481330
Content: Compiler Warning (level 4) C4702
Content Source: docs/error-messages/compiler-warnings/compiler-warning-level-4-c4702.md
Product: visual-cpp
Technology: cpp-diagnostics
GitHub Login: @corob-msft
Microsoft Alias: corob

@ScotBren
True enough. Of course, there's always more than just one thing that needs updating. A fix should appear sometime tomorrow.

authors: ScotBren corob-msft

repo: MicrosoftDocs/cpp-docs


text:
Missing step

Hi!
I suggest a further step to create (or modify)  a property sheet:

After setting the properties, right click on the property sheet and choose "Save the Property Sheet".

:)

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 4d14bcc9-b174-5949-035e-678a3939f031
Version Independent ID: 03017dba-6921-5b6e-b6df-05a9d955da3d
Content: Share or reuse Visual Studio project settings - C++
Content Source: docs/build/create-reusable-property-configurations.md
Product: visual-cpp
Technology: cpp-tools
GitHub Login: @TylerMSFT
Microsoft Alias: twhitney

Moved this issue to an internal work item tracking system because we are moving away from using GitHub issues to track C++ doc work.

authors: LMdNeves TylerMSFT


text:
Remove excess comma

Remove a couple of duplicated commas.

@TylerMSFT
Can you review the proposed changes?
When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.
#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

#sign-off

#sign-off


text:
'syntax' section is a bit confusing

Hello,
Currently, the 'syntax' section is a bit confusing because the query expected results are bunched in with the next example output.

project series_fit_2lines(x)
Will return all mentioned above columns with the following names: series_fit_2lines_x_rsquare, series_fit_2lines_x_split_idx etc. project (rs, si, v)=series_fit_2lines(x)

I'd expect something like
Syntax
project series_fit_2lines(x)

Will return all mentioned above columns with the following names: series_fit_2lines_x_rsquare, series_fit_2lines_x_split_idx etc.

project (rs, si, v)=series_fit_2lines(x)

Will return the following columns: rs (r-square), si (split index), v (variance) and the rest will look like series_fit_2lines_x_rvariance, series_fit_2lines_x_line_fit and etc.

extend (rs, si, v)=series_fit_2lines(x)

Will return only: rs (r-square), si (split index) and v (variance).

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: dfa6fbcc-e5c5-9973-d85d-ecb6e558b010
Version Independent ID: 51840cae-1d85-d88f-26db-16cf90ed87ce
Content: series_fit_2lines() - Azure Data Explorer
Content Source: data-explorer/kusto/query/series-fit-2linesfunction.md
Service: data-explorer
GitHub Login: @orspod
Microsoft Alias: orspodek

Thank you for your detailed feedback.  We are looking into the issue, and we will respond when we have more information.

@shanrath  Thank you for bringing this to our attention.  I have created a pull request making the helpful changes you proposed.
Please let me know if you have any further questions.  Have a great day!

authors: MartinJaffer-MSFT shanrath

repo: MicrosoftDocs/dataexplorer-docs


text:
Dynamics 365 Admin Center is deprecated

Dynamics 365 Admin Center is deprecated and it is currently redirecting to Power Platform Admin Center. Some of the steps/screenshots are no longer relevant to the new Power Platform Admin Center.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: f180a4e1-c03d-9c8f-bbd7-6b0ffeef0ac4
Version Independent ID: 87f094ff-adeb-f203-b4bc-f65dc97a00a2
Content: Upgrade Field Service
Content Source: ce/field-service/upgrade-field-service.md
Service: dynamics-365-customerservice
Technology: field-service
GitHub Login: @FieldServiceDave
Microsoft Alias: daclar

Thank you so much for raising this issue. This upgrade doc has since been updated, and further updates are planned in our backlog!

authors: LinnZawWin krbjoran


text:
Uninstall?  Really?

[Enter feedback here]
Is this a joke?  Correct me if I'm wrong, you can only remove 1 package at a time, and each package takes 1-3min?  So this is a 3+ hour process?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 99900155-22d8-caa6-8151-06269d0cc491
Version Independent ID: 1545a162-3eb5-1845-34bb-5c6eb508f4ec
Content: Dynamics 365 Marketing solution uninstall order (Dynamics 365 Marketing)
Content Source: ce/marketing/solution-uninstall-order.md
Service: dynamics-365-marketing
GitHub Login: @alfergus
Microsoft Alias: alfergus

@joewichowski -- As mentioned on the Uninstall Dynamics 365 Marketing page, if you want to release your Marketing entitlement to use on a different instance, you do not need to uninstall any of the Marketing solutions.
If you have further questions, reach out to the Dynamics 365 Marketing forum at https://community.dynamics.com/365/marketing/f/dynamics-365-for-marketing-forum and a developer will be able to help you.

authors: alfergus joewichowski


text:
Wrong example

The example being used on this page is for the Set-NAVServerConfiguration cmdlet, not the New-NAVServerConfiguration.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: deb6878c-e087-03d2-6f7f-92688813ce0c
Version Independent ID: 7a7071c1-393b-c6d1-7a40-9953ee8e36f7
Content: New-NAVServerConfiguration (Microsoft.Dynamics.Nav.Management)
Content Source: businesscentral-ps/Microsoft.Dynamics.Nav.Management/New-NAVServerConfiguration.md

Hi, thanks for pointing this out, a new example for the New-NAVServerConfiguration will be available in the next doc refresh.

authors: blrobl epernst


text:
Flow & salesOrderLines Api

Hello
It's impossible to update Business Central from Flow with then salesOrderLine API.
(Using salesOrder API is ok)
error message :
{
"status": 400,
"message": "ErrorCode: Application_DialogException  You must specify a document id to get the lines.\r\nclientRequestId: bf31d2f6-3d8a-46d9-b0e6-0e8048352c7e",
"source": "api.businesscentral.dynamics.com",
"errors": []
}
but the "document id" property is missing from Flow.
We see companyname, tablename, itemId, accountId but not "document id".
Where can we specfify that element ?
thank you

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: ab8727c9-7b8e-2c83-680f-7f5c8a4ec22c
Version Independent ID: dc43f5e7-d5d9-48e7-b74d-460b5a70150e
Content: Create salesOrderLines - Dynamics NAV
Content Source: dynamics-nav/fin-graph/api/dynamics_create_salesorderline.md
Service: dynamics365-financials
GitHub Login: @SusanneWindfeldPedersen
Microsoft Alias: solsen

Hello, this repo is meant for documentation issues and bugs. Please use your ususal support channel to get help with this issue. Thanks.

Hi jn, you can use a HTTP request in Flow to create sales order lines for a sales order. You can provide the Document ID in the post request that you will be sending through the HTTP connector. It's a shame it's not possible in one single action, but it's possible with a POST request through the HTTP step.

I've written a brief blog to give people guidance on how to execute a HTTP request to create sales order lines: https://www.ruudvg.com/2019/05/26/microsoft-business-central-api-beta-create-a-sales-order-and-sales-order-lines-through-powerapps-flow/.


text:
Corrected typo : from Excel 2012 to Excel 2019

Corrected typo : from Excel 2012 to Excel 2019

Thanks for your contribution, much appreciated!

authors: SusanneWindfeldPedersen duiliotacconi


text:
Updated shortcuts in the Debugger for a11y

We needed to call out Ctrl+M in the Debugger as a way to escape focus trapping in the editor for accessibility. See: Microsoft/monaco-editor#296 for reference. I also just made the Console shortcuts look a little more consistent since I thought "" was confusing when we had two shortcuts that do the same thing.

:white_check_mark: Validation status: passed

File
Status
Preview URL
Details

microsoft-edge/devtools-guide/console.md
:white_check_mark:Succeeded

microsoft-edge/devtools-guide/debugger.md
:white_check_mark:Succeeded

For more details, please refer to the build report.
Note: If you changed an existing file name or deleted a file, broken links in other files to the deleted or renamed file are listed only in the full build report.

Thanks @zoherghadyali

authors: erikadoyle opbld32 zoherghadyali

repo: MicrosoftDocs/edge-developer


text:
Update lakehouse-streaming-data.md

Sample code bugfixing:

.select(f.from_json("bodyAsString", Schema).alias("events")) \
.option("checkpointLocation", "Files/checkpoint") \

@microsoft-github-policy-service agree

@tedvilutis
IMPORTANT: When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.
#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

#sign-off

authors: ShannonLeavitt SnehaGunda viktormaruna

repo: MicrosoftDocs/fabric-docs


text:
Site is hard to use without the floating mini TOC on each page

Describe the bug
Documents used to show a mini floating TOC on the right hand side of each page. It's been replaced with an "Additional resources" section, which is useless and should be shown at the bottom.
Articles are much harder to grok without that mini TOC. I have to continually scroll up and down to determine where I am, or scroll to the top to look at the full TOC.
Useability of the docs site is much poorer because of this.
To Reproduce
Visit any page.
Expected behavior
Floating mini TOC on the right of every page.
Screenshots
An example screenshot I found of the old layout:

Desktop (please complete the following information):
all desktops
Smartphone (please complete the following information):
n/a
Additional context

FYI @keziamicro

Related to #3925.

@lonix1 Yes, the time to read was removed in April 2023. This was the explanation for that:

The feature works great for simple articles but is misleading when a customer is trying to work through more complex documentation. In our world, time to read is one thing but time to comprehend and DO is quite another. Because the “time to read” feature is hurting more than helping our users and since comprehension time is not a straightforward calculation, we’ve decided to retire it effective April 2023.

repo: MicrosoftDocs/feedback


text:
Missing features in the Twitter Connector Documentation for Microsoft Flow

Hi, got the hint (via @MicrosoftFlow on Twitter) that there is a way to search for a specific user in the Twitter Flow Connector using the following as a search text:

from:@username

Unfortunately this is mentionned nowhere on the connector documentation page: https://docs.microsoft.com/de-de/connectors/twitter
I've seen this question asked a few times on UserVoice and the PowerUsers Forums and people using very weird workaround for it.
I think it should be added to the documentation... well as other hidden features if there are some ;)
Thanks!

@miriver Can you follow up the user's suggestion?

@theresapalmer Can you help here?

This is a reasonable suggestion, I've filed a bug to track adding this to the documentation. I'm also no longer working on connectors but assigned the bug to @schabungbam

Created pull request with an updated description

@v-sefedo Your PR is closed without merge. Can you response if your team will add some examples?

@theresapalmer For your reference

@schabungbam would own this from the PM side.

@Powerhelmsman, @theresapalmer , Documentation was updated recently, I have added search term from:@username as an example how to search for tweets. I think we can resolve this issue now.

@Timothep The issue is resolved. Please take a look.

authors: Powerhelmsman Timothep theresapalmer v-sefedo


text:
Something went wrong activating Intellicode

Issue Type: Bug
I am having the same problem as reported in https://github.com/MicrosoftDocs/intellicode/issues/57.  the output screens are below:
VS IntelliCode
Acquiring model 'intellisense-members-lstm' for python
Querying IntelliCode service for available models.
Cached model is up to date.
vs-intellicode-python was passed a model: {"modelId":"15708AE89896CA5DF1690433B7A8D93D28B7","modelPath":"c:\Users\XXXX\.vscode\extensions\visualstudioexptteam.vscodeintellicode-1.2.7\cache\15708AE89896CA5DF1690433B7A8D93D28B7_215F8B4FAB1F4663ABD624559FD205B9","outputId":"215F8B4FAB1F4663ABD624559FD205B9"}.
Error while activating Python: {}
Python
User belongs to experiment group 'AlwaysDisplayTestExplorer - experiment'
User belongs to experiment group 'ShowPlayIcon - start'
User belongs to experiment group 'DebugAdapterFactory - experiment'
User belongs to experiment group 'PtvsdWheels37 - experiment'
User belongs to experiment group 'UseTerminalToGetActivatedEnvVars - control'
User belongs to experiment group 'WebHostNotebook - control'
User belongs to experiment group 'LocalZMQKernel - control'
User belongs to experiment group 'NativeNotebook - control'
User belongs to experiment group 'CollectLSRequestTiming - control'
User belongs to experiment group 'CollectNodeLSRequestTiming - experiment'
User belongs to experiment group 'EnableIPyWidgets - experiment'
User belongs to experiment group 'DeprecatePythonPath - experiment'
User belongs to experiment group 'RunByLine - control'
Python interpreter path: C:\Python\Miniconda3\python.exe

python3.7 c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import sys;print(sys.executable)"
python3.6 c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import sys;print(sys.executable)"
python3 c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import sys;print(sys.executable)"
python2 c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import sys;print(sys.executable)"
python c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import sys;print(sys.executable)"
py -3.7 c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import sys;print(sys.executable)"
py -3.6 c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import sys;print(sys.executable)"
py -3 c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import sys;print(sys.executable)"
py -2 c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import sys;print(sys.executable)"
C:\Python\Miniconda3\python.exe c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import sys;print(sys.executable)"
conda --version
pyenv root
conda info --json
conda info --json
conda info --json
conda env list
conda env list
C:\Python\Miniconda3\python.exe c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import jupyter"
C:\Python\Miniconda3\python.exe c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py -c "import notebook"
C:\Python\Miniconda3\python.exe c:\Users\XXXX.vscode\extensions\ms-python.python-2020.5.80290\pythonFiles\pyvsc-run-isolated.py jupyter kernelspec --version

Extension version: 1.2.7
VS Code version: Code 1.45.1 (5763d909d5f12fe19f215cbfdd29a91c0fa9208a, 2020-05-14T08:27:35.169Z)
OS version: Windows_NT x64 10.0.18363

System Info

Item
Value

CPUs
Intel(R) Core(TM) i7-8650U CPU @ 1.90GHz (8 x 2112)

GPU Status
2d_canvas: enabledflash_3d: enabledflash_stage3d: enabledflash_stage3d_baseline: enabledgpu_compositing: enabledmultiple_raster_threads: enabled_onoop_rasterization: disabled_offprotected_video_decode: enabledrasterization: enabledskia_renderer: disabled_off_okvideo_decode: enabledviz_display_compositor: enabled_onviz_hit_test_surface_layer: disabled_off_okwebgl: enabledwebgl2: enabled

Load (avg)
undefined

Memory (System)
15.93GB (4.54GB free)

Process Argv
fix_all_headers.py

Screen Reader
no

VM
0%

@hcc-donder - which language server are you using - Microsoft or Pylance. Is this still a problem with Python extension 2020.8+? Thanks.

I am using Microsoft. It does not seem to be a problem any more under 2020.8.

authors: MikhailArkhipov hcc-donder

repo: MicrosoftDocs/intellicode


text:
Extension causes high cpu load

Issue Type: Performance
Extension Name: vsliveshare-audio
Extension Version: 0.1.48
OS Version: Windows_NT x64 10.0.17134
VSCode version: 1.33.0

:warning: Make sure to attach this file from your home-directory:
:warning:C:\Users\jhdra\ms-vsliveshare.vsliveshare-audio-unresponsive.cpuprofile.txt
Find more details here: https://github.com/Microsoft/vscode/wiki/Explain:-extension-causes-high-cpu-load

Perhaps the same root cause as 1824. We should make those same improvements to the audio extension.

Perhaps the same root cause as 1824. We should make those same improvements to the audio extension.

Perhaps the same root cause as 1824. We should make those same improvements to the audio extension.

Perhaps the same root cause as 1824. We should make those same improvements to the audio extension.

I am also experiencing live share using 100% cpu constantly while joined in a session.

I don't know if it is related. But while joined in a session VS code seems to constantly work on "Indexing Ruby source files".

Also, the 100% cpu problem only occurs when I join someone elses sessions. Not when I host one myself.

This issue should now be resolved. Please re-open it if you're still experiencing this problem. Thanks!

authors: JeronimoHermano daytonellwanger lostintangent runephilosof

repo: MicrosoftDocs/live-share


text:
Live Share Audio (unable to download needed dependencies) — TypeError

Product and Version [VS/VSCode]:
1.39.0-insider,9414b7e75bdbef887c76cb603e542db2b86b99b7
OS Version [macOS/Windows]: macOS 10.14.6
Live Share Extension Version:
ms-vsliveshare.vsliveshare-1.0.766 and ms-vsliveshare.vsliveshare-audio-0.1.64
Target Platform or Language [e.g. Node.js]: N/A
Steps to Reproduce / Scenario:

Update to latest Code Insiders build.
Reload and receive error about being unable to download needed dependencies.
Uninstall both Live Share and Live Share Audio from Extensions.
rm -rf ~/.vscode-insiders/extensions/ms-vsliveshare*
Launch code-insiders; reinstall Live Share and Live Share Audio from Extensions.
Export Logs:

Contents of `VSLSAudio.log`

[2019-09-08 02:59:09.653 LiveShareAudio I] Installing dependencies for VSLS Audio...
[2019-09-08 02:59:09.655 LiveShareAudio I] Downloading package 'electron-mac-x64-skype-4.2.7'
[2019-09-08 02:59:17.605 LiveShareAudio I] Download complete.
[2019-09-08 02:59:17.645 LiveShareAudio I] Skipping package 'slimcore-electron-signed-2019.23.01.1.tgz' (already downloaded).
[2019-09-08 02:59:17.645 LiveShareAudio I] Installing package 'electron-mac-x64-skype-4.2.7'
[2019-09-08 02:59:17.645 LiveShareAudio V] Installing package 'electron-mac-x64-skype-4.2.7' to: /Users/corey/Library/Application Support/Code - Insiders/User/globalStorage/ms-vsliveshare.vsliveshare-audio/electron-4.2.7/dist
[2019-09-08 02:59:17.709 LiveShareAudio I] Cleaned old files from install path.
[2019-09-08 02:59:25.842 LiveShareAudio V] Extracted packed files
[2019-09-08 02:59:25.857 LiveShareAudio E] Failed at stage: installPackages - Dependency download failed. TypeError: Cannot read property 'code' of null
[2019-09-08 03:02:48.352 LiveShareAudio I] Deactivating extension

Suspect Failed at stage: installPackages - Dependency download failed. TypeError: Cannot read property 'code' of null is the issue. The download worked; perhaps the package didn't extract correctly?
rm -rf ~/Library/Application Support/Code - Insiders/User/globalStorage/ms-vsliveshare* and also repeat step 4.
Launch code-insiders; reinstall Live Share and Live Share Audio from Extensions.

:tada: workaround successful, verified via Live Share logs:
Contents of `VSLSAudio.log`

[2019-09-08 03:04:27.761 LiveShareAudio I] Installing dependencies for VSLS Audio...
[2019-09-08 03:04:27.763 LiveShareAudio I] Downloading package 'electron-mac-x64-skype-4.2.7'
[2019-09-08 03:04:35.148 LiveShareAudio I] Download complete.
[2019-09-08 03:04:35.211 LiveShareAudio I] Downloading package 'slimcore-electron-signed-2019.23.01.1.tgz'
[2019-09-08 03:04:37.069 LiveShareAudio I] Download complete.
[2019-09-08 03:04:37.071 LiveShareAudio I] Installing package 'electron-mac-x64-skype-4.2.7'
[2019-09-08 03:04:37.071 LiveShareAudio V] Installing package 'electron-mac-x64-skype-4.2.7' to: /Users/corey/Library/Application Support/Code - Insiders/User/globalStorage/ms-vsliveshare.vsliveshare-audio/electron-4.2.7/dist
[2019-09-08 03:04:41.683 LiveShareAudio V] Extracted packed files
[2019-09-08 03:04:41.684 LiveShareAudio I] Finished installing.
[2019-09-08 03:04:41.693 LiveShareAudio I] Installing package 'slimcore-electron-signed-2019.23.01.1.tgz'
[2019-09-08 03:04:41.693 LiveShareAudio V] Installing package 'slimcore-electron-signed-2019.23.01.1.tgz' to: /Users/corey/Library/Application Support/Code - Insiders/User/globalStorage/ms-vsliveshare.vsliveshare-audio/slimcore-4.0
[2019-09-08 03:04:42.291 LiveShareAudio V] Extracted packed files
[2019-09-08 03:04:42.292 LiveShareAudio I] Finished installing.
[2019-09-08 03:04:42.295 ExternalAppCallingService I] Calling stack will be lazy loaded
[2019-09-08 03:04:42.296 LiveShareAudio V] Current state: Initializing, Action: InitializeDone

#2475 is similar but doesn't mention the extraction issue. #2660 and #2071 are also similar.
#2663 appears to be the same issue (although not against an Insiders build); in theory, the above workaround around might work.
Peace 🖖

@jramsay Related to #368?

@coreygo : thanks for filing this! There was indeed an problem with our dependency downloader that could occur after VS Code updates. The latest Live Share Audio extension (v.0.1.66) contains a fix for the issue. Appreciate your help with this!

Glad to help.
No issues updating to 1.39.0-insider,55825e9ad2aa4b4b3f8b2290a54a517bc454a7a5.
ms-vsliveshare.vsliveshare-audio,0.1.66 works correctly.

authors: cait1inhennessy coreygo jramsay


text:
Failed on joining live session

Issue Type: Bug
Just clicked to join, then insta-fail.
Extension version: 1.0.1377
VS Code version: Code 1.40.2 (f359dd69833dd8800b54d458f6d37ab7c78df520, 2019-11-25T14:54:45.096Z)
OS version: Windows_NT x64 10.0.17763

System Info

Item
Value

CPUs
Intel(R) Core(TM) i7-6820HQ CPU @ 2.70GHz (8 x 2712)

GPU Status
2d_canvas: enabledflash_3d: enabledflash_stage3d: enabledflash_stage3d_baseline: enabledgpu_compositing: enabledmetal: disabled_offmultiple_raster_threads: enabled_onoop_rasterization: disabled_offprotected_video_decode: unavailable_offrasterization: enabledskia_renderer: disabled_offsurface_control: disabled_offsurface_synchronization: enabled_onvideo_decode: enabledviz_display_compositor: enabled_onviz_hit_test_surface_layer: disabled_offwebgl: enabledwebgl2: enabled

Load (avg)
undefined

Memory (System)
31.97GB (19.00GB free)

Process Argv

Screen Reader
no

VM
0%

Also with 1.41

Thanks for the issue. I'm closing it due to age but if you are still experiencing the issue, please feel free to re-activate and attach logs so we can diagnose!

authors: Davsterl skyphyr


text:
help

Product and Version [VS/VSCode]:
OS Version [macOS/Windows]:
Live Share Extension Version:
Target Platform or Language [e.g. Node.js]:
Steps to Reproduce / Scenario:

Go to '...'
Click on '....'
Scroll down to '....'
See error

Screenshots
If applicable, add screenshots to help explain your problem.

Hi @ceopurpleurkel2212! It seems you are trying to report a problem? if so, can you please provide details of the problem? thank you!

I'm closing this issue while details are provided. thanks,


text:
Debugger Banner does not work with Live Extension enabled

Upstream issue https://github.com/MicrosoftDocs/live-share/issues/575

Wrong repo


text:
Modern Auth section still necessary?

Is the section "Turn on Modern authentication for your organization" really needed anymore? Now that basic auth has been or is being disabled?

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: be1e6c9a-9644-6d86-3962-d36bf1efd656
Version Independent ID: 96142d6c-71de-6ea9-0361-dbec82647b15
Content: Set up multifactor authentication for users - Microsoft 365 admin
Content Source: microsoft-365/admin/security-and-compliance/set-up-multi-factor-authentication.md
Service: microsoft-365-business
GitHub Login: @KwekuA
Microsoft Alias: kwekua

@MicrosoftGuyJFlo Thank you for your feedback since Basic auth is still available till Dec 31st, 2022. The content team will update the document after the protocol has been completely disabled on all Microsoft tenants.
Hope this helps!
Thanks
Sri

@msbemba Thank you very much for the contribution and sharing this explanation. @MicrosoftGuyJFlo Hope this comment is helpful for you. If you see a documentation update is required, please feel free to open an issue for the same. We proceed here to close it. Thanks for taking out some time to open the issue. Appreciate and encourage you to do the same in future also.

authors: MicrosoftGuyJFlo msbemba yogkumgit