text:
Documentation of Snapshots not being Supported for Prem v2 VMs does not appear to be mentioned

All Limitations of Prem v2 Disks are not successfully called out - as we are missing the limitation of Snapshots not being supported.
Suggest including something like:
Premium SSD v2 can't be used with some features and functionality, including disk snapshots, disk export, changing disk type, VM images, availability sets, Azure Dedicated Hosts, or Azure disk encryption.
This issue is encountered in the following scenario where a user will create a snapshot of a Prem v1 disk in an attempt to then create a new Prem v2 disk from snapshot - during that process  the error is encountered: code: message:'restoreDirectDriveDisk is not supported for this subscription
This error is confusing - having documentation indicating that snapshots are not supported for Prem v2 disks could help with that (unless there is a restoreDirectDriveDisk preview feature to be registered that we are not aware of?)
Note: We should see quite a few users attempting to upgrade from Prem v1 to Prem v2 disks, as the size change is not supported and that leaves recreating new disks - Snapshot seems like a great method for this, and the platform (Portal) will actually allow you to attempt to do just that, unfortunately the process will fail as mentioned, and hence why we should document the support of snapshots against Prem v2 VMs.
Repro:
-Create a Zonal VM in AV Zone 1
-Attach a Prem v1 Data Disk
-Create a snapshot of the Prem v1 Data Disk
-Create a data disk from that snapshot and select Prem v2, AV Zone 1 (with the intent of attaching it back to the Zonal VM)
Expected: The disk should be created
Actual: The disk is not created and the deployment failure: 'restoreDirectDriveDisk is not supported for this subscription is instead encountered.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 1b4f48bd-e5e9-ebca-e29e-9dec927bc2d3
Version Independent ID: 2e032831-dbb6-aaf2-15ce-ac072ef36727
Content: Select a disk type for Azure IaaS VMs - managed disks - Azure Virtual Machines
Content Source: articles/virtual-machines/disks-types.md
Service: storage
Sub-service: disks
GitHub Login: @roygara
Microsoft Alias: rogarana

@johnem-msft
Thanks for your feedback! We will investigate and update as appropriate.

@roygara
Can you please check and add your comments on this doc update request as applicable.

@johnem-msft @SaibabaBalapur-MSFT Thanks for reaching out. This isn't a documentation issue, as snapshots are currently supported in preview.
https://learn.microsoft.com/en-us/azure/virtual-machines/disks-incremental-snapshots?tabs=azure-cli#incremental-snapshots-of-premium-ssd-v2-and-ultra-disks-preview
Accordingly, I'm closing this out.
#please-close

authors: SaibabaBalapur-MSFT YashikaTyagii johnem-msft roygara


text:
Cold tier details

The section quoted below does not mention the newly GA cold tier

Consider the following information when using access tiers:

Only the Hot and Cool access tiers can be set at the account level. The Archive access tier isn't available at the account level.
Hot, Cool, and Archive tiers can all be set at the blob level during upload or after upload.
Data in the Cool tier has slightly lower availability, but offers the same high durability, retrieval latency, and throughput characteristics as Hot tier data. For data in the Cool tier, slightly lower availability and higher access costs can be acceptable trade-offs for lower overall storage costs compared to the Hot tier.
Archive storage stores data offline and offers the lowest storage costs. However, it also carries the highest data rehydration and access costs.
For more information, see Hot, Cool and Archive access tiers for blob data.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 392e90a0-af77-999e-39a1-78f09ffe0d06
Version Independent ID: 411ca9a3-4370-f9ca-f14c-5385e13d9075
Content: Access tiers for blob data - Azure Storage
Content Source: articles/storage/blobs/access-tiers-overview.md
Service: storage
GitHub Login: @normesta
Microsoft Alias: normesta

@thommck
Thanks for your feedback! We will investigate and update as appropriate.

Thank you for raising this @thommck. This block of text doesn't appear to exist in this article (https://learn.microsoft.com/en-us/azure/storage/blobs/access-tiers-overview).  Would you mind directing me to the article where you found the list that you present above? Thank you!

source: gharchive/issue

repo: MicrosoftDocs/azure-docs

license_type: permissive

license_source: github-api


text:
Microsoft Azur サブスクリプション
保護されていると思いました

https://app.azure.com/8d804ac8-5abd-4cb5-9089-4ee68e41d6aa/subscriptions/e049a186-fed5-4b8f-899b-4a3ec059b216

Microsoft Azur は、法人用らしいですのでそれと半年間無料期間だったのにいきなり課金されたので、 Microsoft Azur アカウントを削除しました

@Producer-Director
It would be great if you could elaborate your query in English and add a link to the documentation you are following for these steps? This would help us redirect the issue to the appropriate team. Thanks!

Microsoft Azur seems to be for corporate use, and even though it was free for half a year, I was suddenly charged, so I deleted my Microsoft Azur account

@Producer-Director
I apologize for any inconvenience. If you need help with this, please log a case here: https://learn.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-support-request. Thank you. Closing issue since not related to the documentation, like you've mentioned. Thanks!

authors: Naveenommi-MSFT Producer-Director


text:
PySpark Support

Hi,
Are there any plans to support PySpark?
-Matt

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 3a43d656-dbdf-ae04-f88d-488aa1dc78c5
Version Independent ID: 155c9eb2-92df-1619-4284-17c46a419f1f
Content: Spark Connector with Azure SQL Database and SQL Server
Content Source: articles/sql-database/sql-database-spark-connector.md
Service: sql-database
GitHub Login: @allenwux
Microsoft Alias: xiwu

@MattKravetz Thank you very much for your interest in Azure products and services. In looking at this tutorial, PySpark is used with an HDInsights cluster and an Azure SQL Database instance. In which context were you wanting PySpark support in Azure SQL Database?
Use HDInsight Spark cluster to read and write data to Azure SQL database

Hi Mike,
Thanks for your response! I am interested in using the bulk copy features demonstrated in the "spark connector" article, but it seems to only be available for scala Spark.  I am using a jdbc driver to write pyspark dataframes to SQL Server 2017 in python now, but this appears to do row-by-row inserts instead of a bulk/batched insert, so it is quite slow. Just took a look at the article you linked, and it also seems to be using scala instead of Python.  Do you have any advice on how to bulk copy from PySpark?

@MattKravetz I do not think there is immediate support for Python based PySpark with Azure SQL Database. You can use the SQL Database User Voice to make that recommendation. Please outline your solution and use case in a detailed manner. I will forward this on to the content owner to confirm.

@allenwux Just want to get your feedback on this topic. Thank you.

@MattKravetz  we are working on the python support.

@MattKravetz We will now proceed to close this thread. If there are further questions regarding this matter, please comment and we will gladly continue the discussion.

authors: MattKravetz Mike-Ubezzi-MSFT allenwux


text:
Even with IP restriction IIS of the App Service still respond to anyone, normal?

I made some tests and even if we use IP restriction on the web app, if you know the public IP or the generated public domain name by Azure we can still have a valid telnet connection on a IIS server from anywhere. Is that normal?
I suspect some kind of proxy server make some response but is it something we wish? In security you would want to have anything blocked from outside to not even be accessible from outside at all. My concern is if it's a proxy IIS server or even the same not deliver traffic for the blocked web app is running but still open to traffic, it can still be potentially vulnerable to 0days against that server.
Also, that behavior is not documented at all, that would be greatly appreciated if we can know what happens under the hood, at least at higher level.
Thanks for your time

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: d90bbf62-44f9-30a6-d6ea-bbf776f6efc5
Version Independent ID: b3961eac-6c70-b345-f48c-e4c0ec67059c
Content: Restrict client IPs - Azure App Service
Content Source: articles/app-service/app-service-ip-restrictions.md
Service: app-service-web
GitHub Login: @ccompy
Microsoft Alias: ccompy

@BryanTrach-MSFT
Is there any updates on this? It's been a month now.
Thanks

@francoislarouche Apologies for the delay. My email rules are setup so I only get notified of GitHub alerts if I'm tagged in the message.
Can you please reach out to me at brtrach at Microsoft dot com with your subscription ID and the URL of this post? This will require a deeper investigation. We look forward to your reply.
Closing out this post and taking this offline.

@francoislarouche It appears I missed your message as you tagged the wrong person.
This channel, Azure-Docs, is specifically for issues about the docs themselves. As you mentioned, this is/was a potential product issue and not a doc issue.  As a result, we need to review sensitive data to see where the issue is occurring. In order to do so, we need Personally Identifiable Information (PII) from you. In order to protect your PII and privacy, we kindly asked you to reach out to us offline. Our policy prevents us from engaging or requesting for PII on a public forum.
Once the resolution has been found, Microsoft or the original poster will typically update the thread with a sanitized solution.
Thank you for your concerns and for your understanding.

authors: BryanTrach-MSFT francoislarouche


text:
Enable https (SSL Binding) on Service Fabric Mesh Application using gateway

I have deployed a new mesh app with an Asp.Net API core container image. I am able to successfully deploy and access the API using http://[]:80. I used the Following configuration in gateway yaml file:
http:

name: BenApiHTTP
port: 80
hosts:

name: "*"
routes:

name: benapi
match:
path:
value: "/benapiservice/"
rewrite: "/"
type: Prefix
destination:
applicationName: BenApplication
serviceName: BenApi
endpointName: BenApiListener

Now I want to use my own ssl (Custom Domain) certificate and wants to enable the same api using https i.e. on port 443. I do not see any example on how to enable https with SSL binding. So my questions are:

How to upload the ssl certificate in mesh? OR if we need to do in Containers ?
Which port I have to expose in the Service Listener ?
What Yaml updates I have to make in gateway.yaml to enable https ?
How to set the Domain for the gateway url ?

Same has been asked in Stackoverflow: https://stackoverflow.com/questions/54545764/how-to-enable-tls-ssl-https-in-azure-service-fabric-mesh-for-asp-net-core-applic

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 5669958a-990e-f0c3-36e3-d2d5bd3962cd
Version Independent ID: 8bac9d78-3a71-edae-e554-561aef59a7a4
Content: Configure a Gateway to route requests
Content Source: articles/service-fabric-mesh/service-fabric-mesh-howto-configure-gateways.md
Service: service-fabric-mesh
GitHub Login: @dkkapur
Microsoft Alias: dekapur

Thanks for the question. We are currently investigating and will update you shortly.

@dkkapur @aljo-microsoft do we need to do anything specific for SF mesh to enable HTTPS? I don't find any docs on this. Do we support HTTPS at this time?

We don't have support through the gateway today, but there is still a path to do this. The general requirement here is that you need to get a cert into your container, which can be done by putting it in the container as part of the image or mounting it through a Secret in combination with Key vault. Tagging @aljo-microsoft to provide more details on this front. From what I know, I would recommend the latter path which would then require updates to your yaml in the form of adding a secret, rather than modifying the gateway + port aspects.

@dragav
To provide clarity.

@dkkapur @MicahMcKittrick-MSFT : Thanks for the quick response. Based on the answer provided, I have the following questions:

When would the https support be available with gateways? As I guess that is the minimum/basic security level an API service, exposed to the internet, should provide?
It would be great if you can provide a sample Mesh App (Asp.Net core) which expose through https as per the procedure explained. The official samples do not have any https scenarios covered.

Please NOTE: This (https SSL binding) is the last hurdle we are facing on choosing the new Micro-service architecture we are trying to build from scratch. Kubernetes is the other Orchestration option we are exploring (But we are more interested in SFMesh, as its a fully managed serverless service). So it would be of great help if this is something can be achieved easily here.
Thanks.

@vikramdadwal
SFMesh isn't comparable to AKS; SFRP is. As both SFRP and AKS you can ssh/rdp into host machines you own. SFMesh is a server less platform that abstracts machines away.
Today as Deep stated, binding a certificate to a listener within a container, whether deployed into a private or public network, can be achieved by delivering the certificate to the container its self.
I.E. Container can reach out and download your PKI certificates, and bind them to listeners they create.
E.G. Containers are self contained, so you can whatever you want inside them.
An alternative to encrypting your certificate inside your images, and pass in the decryption password at deployment time (commonly via Environment Variable) to your container to decrypt a certificate and use it how you desire; is to use Secrets, and Secrets/Values SFMesh resources to pass in the certificate as a secret value.
@MicahMcKittrick-MSFT
Please wait for @dragav to provide additional clarity around using the Secrets, and Secrets/Values SFMesh resources to deliver a certificate for binding to a listeners.

@aljo-microsoft . Thanks for providing a descriptive explanation.
I will wait for @dragav response for container implementation.

Also with container certificate approach the thing I still do not understand is that how the gateway will talk to the 443 secure listener of the container i.e. Gateway is still open to internet with 80 port (as mentioned in YAML file).

OR

Are you mentioning that I need to remove the gateway altogether and directly call the container listener ? if yes then how ?  Because of these confusions I need a full working example to understand the concept here.

I am new to containers so forgive me If I am asking very basic stuff.

I was able to enable https binding within the container with certificate. I was able to host the same in SFMesh as shown below the app is running fine:

Now I need information regarding how to access it using public IP (using gateway or any other option). Please suggest.
Thanks.

@vikramdadwal While we wait for a response on your question do you mind sharing in more detail what you were able to configure? I'm also following this conversation to see the options available for accomplishing this.

@andrewdmoreno I was able to accomplish the following:

Create a Mesh project in VS2017
Create a basic Asp.Net Core API
Create secret in the mesh (I have to manually update the ARM json for the same. Check https://github.com/MicrosoftDocs/azure-docs/issues/25070
Bind Asp.NEt core to SSL certificate and listen on port 443 (Check this sample: https://cmatskas.com/enforcing-https-only-traffic-with-asp-net-core-and-kestrel/)

@vikramdadwal Interesting. On my end I tried slighty different approach and was able to get a certificate from key vault passed in to the service via arm / environment variable, which I then pass to the kestrel listen options similar to the article you reference above.
Everything works locally. I can run it using the same image and hit the service as expected. When I deploy to mesh, however, it doesn't run and there are no logs or any other messages that I have been able to find. Container continuously starts/stops. Still trying to figure out the best way to troubleshoot.

@vikramdadwal and @andrewdmoreno
Network topology works the same for all Azure resources.
SF Mesh Gateway resource is a very simple ingress load balancer for Containers managed by the mesh service.
Given both of you have successfully bound your containers listeners to your certificate, and have completed the SSL encryption of HTTP communication and Server Identification part of the SSL authentication flow; what is next is minimum the network topology deployment.
I.E. Your Server within your containers certificate's Common Name or Subject Alternative Name should match the domain name you own, if you don't want browsers to throw errors when clients connect, and hosting your domain in Azure is documented here: https://docs.microsoft.com/azure/dns/dns-delegate-domain-azure-dns.
E.G.
After delegating your domains name servers to your Azure DNS zone name servers, add the following two records to your DNS Zone:
An 'A' record for domain APEX that is NOT an Alias record set to all IP Addresses your custom domain will resolve.
A 'C' record for Microsoft sub domains you provisioned that are NOT an Alias record set. For example, you could use your Traffic Manager or Load Balancer's DNS name.
Your SF Gateway resource doesn't have a parity for all Standard Load Balancer functionality; specifically health probes is a feature not duplicated.
I.E. An example of a network deployment is a client has trusted CA issuer cert or private PKI issuer cert  or intermediate issuer cert installed and requests your custom domain https://<My Custom Domain .Net>; which you delegated to Azure DNS Zone naming servers. You created DNS records for you domain to route to your Traffic Manager, which routes to requests to your Public IP Configured Standard Load Balancer, that is configured with routing rules and health probes to your SF Mesh Container's gateway resource; the gateway resource has routing rules for your Container instances. The container instances have an encrypted CA Issued SSL Encryption and Server Identification certificate built into the image, and use Secrets and Secrets/Values resource to pass in the decryption password at deployment time. The certificate is decrypted and bound to its listener, enabling the SSL handshake to complete with the client.
Soon an SF App MSI will be available, enabling you to obtain a managed identity token, and authenticate to AAD supported resources like Keyvault (By declaring an Application property in your template); which would allow an alternative to building your containers images with an encrypted certificate, as you could use a system assigned identity that you authorize to your KV resources, to authenticate and download your full certificate directly from keyvault. Could also currently manually register a Service Principle with AAD, pass that secret value to your container, and use it to get tokens for authenticating to services.
Something to be mindful of is your clients need to trust server certificate (so self signed shouldn't be used for production, and you should be using a Trusted Certificate Authority issued certificate).
@MicahMcKittrick-MSFT
#please-close as I've answered all the user's questions.

@aljo-microsoft : Thanks for the explanation but that is a lot of azure networking jargon ;) I was looking for a simple solution which is easy to understand by an Application developer. A sample would be great.
My guess is, this will eventually be available in GA and yes I agree MSI will ease lots of azure access related use cases here. Thanks.

@aljo-microsoft - As @vikramdadwal mentioned above, I also don't think that the response to this issue is quite sufficient for closing.
On my machine only I can access my endpoint (which is directly hitting the container) using https albeit with a browser warning, which is expected given the cert I am using was provisioned by key vault.
When I deploy the same image and configuration to mesh is there an additional step that needs to happen for the handshake to occur using the public ip address due to the gateway being in the middle?
Our wireshark trace seem to indicate that the handshake is not happening, nor do any logs get produced from asp net core that would indicate it's reaching that far. We've enabled Trace logging to try and troubleshoot further to no avail. As an aside, if we remove the 's' and connect via http but specifying port 443, we do at least get asp net core logs indicating that it failed which is expected given that our kestrel listener is only allowing https traffic.
2019-02-25T19:38:35.031201913+00:00 stdout F dbug: HttpsConnectionAdapter[1]
2019-02-25T19:38:35.031201913+00:00 stdout F       Failed to authenticate HTTPS connection.
2019-02-25T19:38:35.031201913+00:00 stdout F System.IO.IOException: The handshake failed due to an unexpected packet format.

I assume @vikramdadwal is stuck in the same place as I am and some guidance would be greatly appreciated.

For @vikramdadwal and any others that come across this issue, the problem at the present time is that https cannot be used with the http routing config. I have been able to confirm that switching to tcp variation of routing config with port 443 instead of using http config solved this issue for me and I am able to call my service on the public ip address using https on port 443.
{
    "tcp": [
        {
            "destination": {
                "applicationName": "ApplicationName",
                "endpointName": "EndpointName",
                "serviceName": "ServiceName"
            },
            "name": "TcpRule1",
            "port": 443
        }
    ]
}

@andrewdmoreno I tried replacing the http with tcp as mentioned, but still not able to hit the service with https. Following are the snapshots (service codepackage, gateway and postman) from my arm json. My container image exposed port 443 and is running fine in mesh.

Its simply say no response. Is something I am missing here ?

@vikramdadwal - you confirmed these also I would imagine?

Kestrel listener config was configured to port 443
Docker file was updated to expose 443

@andrewdmoreno: yes they are.

@andrewdmoreno : It worked for me too. Did a silly mistake during destination settings. Thanks.
@dkkapur : In case of tcp how to specify multiple destinations (i.e. if we are hosting more than 1 service)? In http we had this routes concept, but not sure how to achieve the same in tcp ?

@vikramdadwal see https://docs.microsoft.com/en-us/azure/service-fabric-mesh/service-fabric-mesh-howto-configure-gateways#tcp-routing-rules for more info on this. Quick note - tcp routing rules are 1:1 for port:endpoint.

@andrewdmoreno I tried replacing the http with tcp as mentioned, but still not able to hit the service with https. Following are the snapshots (service codepackage, gateway and postman) from my arm json. My container image exposed port 443 and is running fine in mesh.

Its simply say no response. Is something I am missing here ?

@andrewdmoreno I tried replacing the http with tcp as mentioned, but still not able to hit the service with https. Following are the snapshots (service codepackage, gateway and postman) from my arm json. My container image exposed port 443 and is running fine in mesh.

Its simply say no response. Is something I am missing here ?

Hi @vikramdadwal I couldn't help noticing to see that you use secrets there in your service fabric mesh application, I would like to use them too in combination with azure key vault.  Can you link me to any documentation or provide me with a sample on how to use it?

@jancorluy - Yeah I think something must have changed since I reported that I got it working. After subsequent deployments of my application it has stopped functioning for me. I have opened Azure/service-fabric-mesh-preview#353 with a sample git repo just trying to get the out of box asp net core api sample to run using https. Has been quite frustrating.
Not sure if @vikramdadwal is still having success with his solution.

Any update on this?

Is there any documentation or details of how to configure this for older OWIN Self-hosted style applications?
Normally you would use netsh commands to bind certificates.  With Docker I would normally put this in the container startup (rather than build-time so that I can vary which certificate per environment) but with the Service Fabric Mesh Local Cluster this doesn't seem to be executed...

authors: Karishma-Tiwari-MSFT MicahMcKittrick-MSFT aljo-microsoft andrewdmoreno brechtvhb dkkapur jancorluy oatsoda vikramdadwal


text:
Wording about reasons to use Hybrid Azure AD Join

....You have Win32 apps deployed to these devices that rely on Active Directory machine authentication....```

Azure AD Joined devices can be issued Kerbros tickets and function properly with some Win32 apps, I think the phrasing here should reflect this.

---
#### Document Details

⚠ *Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.*

* ID: 8877b198-deb1-6ae9-ea0d-3830370b0b4a
* Version Independent ID: f1a4495c-7da8-0c3f-5d97-4f816a2b696c
* Content: [What is device management in Azure Active Directory?](https://docs.microsoft.com/en-us/azure/active-directory/devices/overview)
* Content Source: [articles/active-directory/devices/overview.md](https://github.com/Microsoft/azure-docs/blob/master/articles/active-directory/devices/overview.md)
* Service: **active-directory**
* Sub-service: **devices**
* GitHub Login: @MicrosoftGuyJFlo
* Microsoft Alias: **joflore**

@RowdyChildren
Thanks for the feedback! We are currently investigating and will update you shortly.

@MicrosoftGuyJFlo
Kindly have a look into the document for the same.

Backlog item created to update doc

#please-close


text:
InvalidTemplate at summary page (azure portal)

When I try to complete all the steps at the summary page in Azure the validation fails with the following message: InvalidTemplateDeployment template validation failed: 'The template parameter 'baseUrl' is not found. Please see https://aka.ms/arm-template/#parameters for usage details.'.
The image selected: "Windows 10 Enterprise multi-session with Office 365 ProPlus"
This image is from the gallery

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 970202b7-165f-18df-e928-c47c45a18755
Version Independent ID: d5393b62-4211-72f5-fc7a-363f68f6d8a2
Content: Create a Windows Virtual Desktop Preview host pool with Azure Marketplace  - Azure
Content Source: articles/virtual-desktop/create-host-pools-azure-marketplace.md
Service: virtual-desktop
GitHub Login: @Heidilohr
Microsoft Alias: helohr

Thanks for the feedback! We are currently investigating and will update you shortly.

Same Error here. Yesterday it worked but Windows VM activation didn´t work...

Same issue, does not work for gallery, blob.  Gallery worked two days ago.

Thanks all for letting us know. I am taking a look at this now.

Attempted to create a new pool today and got the same error (I know you guys are looking at it)
InvalidTemplateDeployment template validation failed: 'The template parameter 'baseUrl' is not found. Please see https://aka.ms/arm-template/#parameters for usage details.'.
Image source
Gallery
Image OS version
Windows 10 Enterprise multi-session with Office 365 ProPlus

I also tried this earlier today with Image source, Gallery and Image OS version, Windows 10 Enterprise multi-session with Office 365 ProPlus
Tried this evening using Windows Server 2016 Datacenter and the same error

Thanks all. I am getting in touch with the WVD devs to see if there are any known issues. Will update when I have more.

Again, it was working fine two days ago, started sometime yesterday.

Just found another thread on this issue

Thanks @BJD1997
I just got confirmation that their is an issue deploying via the portal.
Current work around is deploy via GitHub template.
I requested an ETA on when a fix will be deployed but still waiting to hear back. Will continue to update.

Same here!!

I can´t find Repo on Github, can someone make the Template available?

@mhofmann-hb I think I found the Repo on Github: Link

That is the one I found too.

That is the one I found too.

@judyanndixon @mhofmann-hb I can confirm that this works. Currently deploying :)

@MicahMcKittrick-MSFT which github template?

The one @BJD1997 is correct.
The have a fix in the works so the portal issue should be resolved within a couple days.

Hi,
Is there any update on a fix for this issue as I am trying to create a host pool in order to test the virtual desktop offering? I'm not familiar with git hub and would prefer to use the portal to create the host pool.
Thanks in advance.

Hi @tadhgclifford if you click the link I mentioned before you will see a blue button at the end of the page called “deploy to Azure” if you click that button it will take you to Azure to deploy the solution. The same information is needed as the wizard which currently is broken.

Thank you kindly - that works well!

Hello
After using the Deploy Option via the Link i am seeing this error can anyone assist with this.
[4:08 PM] Akshay Naik
{"code":"DeploymentFailed","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-debug for usage details.","details":[{"code":"Conflict","message":"{\r\n "status": "Failed",\r\n "error": {\r\n "code": "ResourceDeploymentFailure",\r\n "message": "The resource operation completed with terminal provisioning state 'Failed'.",\r\n "details": [\r\n {\r\n "code": "DeploymentFailed",\r\n "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-debug for usage details.",\r\n "details": [\r\n {\r\n "code": "BadRequest",\r\n "message": "{\r\n \"error\": {\r\n \"code\": \"InvalidResourceReference\",\r\n \"message\": \"Resource /subscriptions/e1f5906d-7db3-4ae3-9495-2a5c0aa6f85e/resourceGroups/ GNT_Internal/providers/Microsoft.Network/virtualNetworks/GNT_Azure/subnets/GNT_Azure referenced by resource /subscriptions/e1f5906d-7db3-4ae3-9495-2a5c0aa6f85e/resourceGroups/WVDG001/providers/Microsoft.Network/networkInterfaces/GNTVDIG-0-nic was not found. Please make sure that the referenced resource exists, and that both resources are in the same region.\",\r\n \"details\": []\r\n }\r\n}"\r\n },\r\n {\r\n "code": "BadRequest",\r\n "message": "{\r\n \"error\": {\r\n \"code\": \"InvalidResourceReference\",\r\n \"message\": \"Resource /subscriptions/e1f5906d-7db3-4ae3-9495-2a5c0aa6f85e/resourceGroups/ GNT_Internal/providers/Microsoft.Network/virtualNetworks/GNT_Azure/subnets/GNT_Azure referenced by resource /subscriptions/e1f5906d-7db3-4ae3-9495-2a5c0aa6f85e/resourceGroups/WVDG001/providers/Microsoft.Network/networkInterfaces/GNTVDIG-1-nic was not found. Please make sure that the referenced resource exists, and that both resources are in the same region.\",\r\n \"details\": []\r\n }\r\n}"\r\n }\r\n ]\r\n }\r\n ]\r\n }\r\n}"}]}
Troubleshoot common Azure deployment errorsDescribes how to resolve common errors when you deploy resources to Azure using Azure Resource Manager.aka.ms

@navinjk when looking at your error message it looks like the resourcegroup for the networking of the WVD does not exist. Maybe you made a typo somewhere?

We expect to have a fix deployed by End of Day tomorrow.

Thank you for the update, we were able to deploy but now have an error after user login that ( It looks like your Admin hasn't set up any resources for you yet. Try again later or contact your admin.) Please help.

Still an issue
InvalidTemplateDeployment template validation failed: 'The template parameter 'baseUrl' is not found. Please see https://aka.ms/arm-template/#parameters for usage details.'.

I'm also still getting this error when trying to deploy.
"InvalidTemplate
Deployment template validation failed: 'The template parameter 'baseUrl' is not found. Please see https://aka.ms/arm-template/#parameters for usage details.'."

Looks like the scripts RemoveScript.ps1 and Script.ps1 are not located where the baseUrl says they are.  I found them in directory RDS-Templates\wvd-sh\Update an existing WVD host pool\Scripts.

I'm also still getting this error when trying to deploy.
"InvalidTemplate
Deployment template validation failed: 'The template parameter 'baseUrl' is not found. Please see https://aka.ms/arm-template/#parameters for usage details.'."

I'm also still getting the error.  Just tried it.

Was having the same issue yesterday and this morning. Am no longer getting this error.

We expected to see a fix EOD yesterday but it might have been delayed. I will give it through EOD tomorrow to see if we can get the fix out. Else, I will reach out to the product team again for a new ETA

Help ! When we used the deploy to Azure option via the Link and created a HostPool this HostPool cannot be listed using the WVD PowerShell cmdlet. We are still stuck at the error when we access using the URL we see the message (It looks like your Admin hasn't set up any resources for you yet. Try again later or contact your admin.) Please let me know if we can get this fixed ASAP. Thank you.

I can confirm I was able to deploy from the portal last night without an issue

Help ! When we used the deploy to Azure option via the Link and created a HostPool this HostPool cannot be listed using the WVD PowerShell cmdlet. We are still stuck at the error when we access using the URL we see the message (It looks like your Admin hasn't set up any resources for you yet. Try again later or contact your admin.) Please let me know if we can get this fixed ASAP. Thank you.

Seeing this same issue when running get-rdshostpool from powershell. Also nothing populating on https://rdweb.wvd.microsoft.com/webclient/index.html

I have confirmed the fix has been rolled out. If you experience any further issues with this, please open a thread on Tech Communities so we can take a look further.
https://techcommunity.microsoft.com/t5/Windows-Virtual-Desktop/bd-p/WindowsVirtualDesktop

authors: BJD1997 MicahMcKittrick-MSFT TETZUO VaperWare ggaecke ghanold jgudmundson-RETSD judyanndixon mattm310 mhofmann-hb navinjk nick-lvt pjoneninerone pradorodriguez tadhgclifford


text:
ARM Best Practise

[Enter feedback here]

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: cc11726f-f488-2f7c-c9ea-7c5d260e0d1d
Version Independent ID: 62b563e6-4040-03f7-ab1c-80af86eff4d0
Content: Best practices for Azure Resource Manager templates
Content Source: articles/azure-resource-manager/template-best-practices.md
Service: azure-resource-manager
GitHub Login: @tfitzmac
Microsoft Alias: tomfitz

@timfirmin Thank you for your feedback! We will review and provide an update as appropriate.

@timfirmin This doc - https://docs.microsoft.com/en-us/azure/azure-resource-manager/template-best-practices outlines some of the best practices for leveraging ARM templates. Could you please let us know if you're looking for any specific information and provide more details about your requirement.

yes thanks so much - great document. Sorry - that was an Ed Balls moment (before) - didn't mean to leave anything in the feedback section. Thanks v much ! :)


text:
script name outdated

please replace partitionweblogs.hql with hivescript.hql

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: fc24ebe8-5309-3143-ae92-41b6a5150cf6
Version Independent ID: d0e667a5-9160-73ce-2d29-156915b60a83
Content: Tutorial: Create on-demand Apache Hadoop clusters in Azure HDInsight using Data Factory
Content Source: articles/hdinsight/hdinsight-hadoop-create-linux-clusters-adf.md
Service: hdinsight
GitHub Login: @hrasheed-msft
Microsoft Alias: hrasheed

@vlad-kozlov Thanks for the feedback and bringing this to our notice. At this time we are reviewing the feedback and will update the document as appropriate.

@vlad-kozlov Could you please elaborate more on the issue with script file name?
When I downloaded the script file from https://hditutorialdata.blob.core.windows.net/adfhiveactivity/script/partitionweblogs.hql , i see 'partitionweblogs.hql' as file name and that is what mentioned in the document.

@vlad-kozlov We will now proceed to close this thread as we have not heard back from you. If there are further questions regarding this matter, please tag me in your reply and reopen the issue. We will gladly continue the discussion.

authors: KranthiPakala-MSFT vlad-kozlov


text:
Alternate storage providers, missing example for Azure Service bus, host.json

I'm glad that this feature is added to the Durable Framework, however, I fail to find a good sample code or sample host.json where the Service Bus is used as alternate storage. I'm keen to see how it looks, as it is not clear for me how Service Bus will be used. Perhaps only SB Queues for scheduling and Storage Account to keep the execution logs?

Detalji dokumenta
⚠ Ne uređujte ovu sekciju. Ona je neophodna za povezivanje problema slijedom docs.microsoft.com ➟ GitHub.

ID: 81f6150a-622b-e616-2c1e-af813c02fc9e
Version Independent ID: 837bfb4d-d93e-7bb7-4ed7-059d3783a0e5
Content: Durable Functions preview features - Azure Functions
Content Source: articles/azure-functions/durable/durable-functions-preview.md
Service: azure-functions
GitHub Login: @cgillum
Microsoft Alias: azfuncdf

@jozsefkovacs As the docs mention, only .NET Standard 2.0-compatible providers are supported. The Service Bus provider seems to have been updated to be .NET Standard as part of this PR and its nuget has recently been published.
But I believe support for it hasn't been added to Durable Functions v2. @cgillum Could you please share insights on this?
As for how service bus would be used. you are right. It would be used for control flow state and message passing. Azure Tables would still be required for persistence. You can read more about it how the underlying durable task framework works here.

@jozsefkovacs Just following up here... Hope my previous comment helps.
I believe its best to continue the discussion for this on the azure-functions-durable-extension repo itself. Also, any doc update required for this would be done once its implemented there.
Since there is no action needed at the moment, we will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

Just to echo what @PramodValavala-MSFT said, we have not yet done the work to support the Service Bus provider in Durable Functions. If we get sufficient demand for this and implement it then we will update the docs accordingly. Please do let us know in the azure-functions-durable-extension repo if you would like this feature, and be sure to explain why you think it's necessary - that will help us with prioritization.

Aside what is stated here: https://github.com/Azure/azure-functions-durable-extension/issues/14 for the 7 days limit on Storage Account queue, and the performance limitations stated here: https://github.com/Azure/azure-functions-durable-extension/issues/898 I can't add too much new.
I could only just support the idea to be able to use Cosmos DB with Service Bus, as both are offering more than what Storage Account offers.


text:
Which subscriptions/scope support action group alerts?

From using the Azure portal, I see that sometimes I can set an Action Group alert on a budget, and sometimes I can't (I can only set the email notification). It seems to be related to the scope (EA scope vs mgmt. group vs subscription) but I've not been able to figure it out. Please can you clarify in this doc when Action Groups are supported in Budget Alerts, and when they are not?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 09acb09f-6171-fdd8-a5d4-0d036b467c5a
Version Independent ID: 1bffb9cc-b99e-c000-eb9e-47981e27eedc
Content: Tutorial - Create and manage Azure budgets
Content Source: articles/cost-management/tutorial-acm-create-budgets.md
Service: cost-management
GitHub Login: @bandersmsft
Microsoft Alias: banders

Thanks for your comment. The feedback has been shared with the content owner for further review. Thanks for your patience.

@jtuliani The team is investigating this. When I have their reply, I'll respond here.

@jtuliani Hi there. Here's some clarification from the team about action groups: – Action Groups are currently only supported for subscription and resource group scopes. This is why the customer is not able to set Action Groups at EA scopes.
I'll update the article to clarify.
#please-close

authors: bandersmsft femsulu jtuliani


text:
Authorizing multiple scopes

I'm trying to authorize multiple scopes for a script and having trouble with multiple scopes. If I hit the /devicecode endpoint with two scopes "offline_access 499b84ac-1321-427f-aa17-267ca6975798/user_impersonation https://management.azure.com/user_impersonation" the flow works fine for the user. They go to the site, log in, accept all the scopes and it says they're logged in. Then the /token enpoint returns with "AADSTS28000: Provided value for the input parameter scope is not valid because it contains more than one resource. Scope ....". But now that the user has accepted both scopes, I can do a single /device_code prompt without a scope to get a refresh token, and then get the respective access tokens. It seems that the token endpoint should really accept a scope parameter so that I can get the user to authorize all the scopes, and then get the access tokens for the respective scopes that have been authorized.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 58bc32c3-9e21-a56a-f876-3e750576f228
Version Independent ID: 83231247-55a8-e69b-0712-8c7b1481a02d
Content: Use Microsoft identity platform to sign in users on browser-less devices
Content Source: articles/active-directory/develop/v2-oauth2-device-code.md
Service: active-directory
Sub-service: develop
GitHub Login: @rwike77
Microsoft Alias: ryanwi

@davidcorrigan714 Thank you for your feedback . We will investigate and update this thread.

@davidcorrigan714 Are you suggesting this as a feature request? I am a bit confused about the ask.
AFAIK, you can receive an access token for only one resource at a time and it can contain multiple scopes. So, having multiple scopes from multiple resources at the same time is causing the issue in your scenario.

It's a feature request on the token endpoint (unless there is another way to this that I'm not understanding). The problem is that the device code endpoint is essentially a two in one. It's using the scope parameter to both prompt the user to authorize the desired scopes, and specify the desired access tokens. Prompting the user allows multiple scopes, but getting the access tokens does not. So by allowing the token endpoint to accept a scope parameter in the device code flow it would allow the user to authorize both scopes, and the app to get both tokens. For example say I have scope 1 on Azure DevOps and scope 2 on Graph.
Let's see if I can make this legible with GitHub formatting (assume the client ids & codes are exchanged properly):
Currently an error case:
POST /device_code
scope: scope 1 + scope 2

User opens the browser, it asks for permission for my app to use scope 1 + scope 2. The authorization of the scopes does work.

POST /token
Invalid scope from /device_code to get any access tokens.

What would be nice:
POST /device_code
scope: scope 1 + scope 2

User opens the browser, it asks for permission for my app to use scope 1 + scope 2

POST /token
scope: scope 1

POST /token
scope: scope 2

What I'm currently doing:
POST /device_code
scope: scope 1

User opens the browser, it asks for permission for my app to use scope 1

POST /token
scope: scope 1

POST /device_code
scope: scope 2

User opens the browser, it asks for permission for my app to use scope 2

POST /token
scope: scope 2

Now in the last case and current implementation the user has to do the flow for every separate resource needed by the app but they only have to do it the first time the app needs the resource. After that the app is allowed to use all the resources and the refresh token will work to get all the necessary access tokens. It just seems odd that there doesn't seem to be a way to do it all in one shot up front and adding a scope parameter to the token endpoint for the device code flow would seem to fix that. Another solution would be that an empty scope parameter to the device code endpoint would prompt the user to allow all the app's defined api scopes but it doesn't seem to do that. RFC 6749 section 3.3 says that there should be docs somewhere stating what the predefined scope is when the scope parameter is omitted but I haven't been able to find that doc for Azure. It seems to default to some minimal set of scopes.

I didn't realize that what I was asking for actually works on the v1.0 version of the api. Guess that solves my issue for now.

@davidcorrigan714 I understand. I will pass the feedback to the engineering team regarding this. As you have a workaround for the issue, I will go ahead and close the issue for now.


text:
Multiturn upload using excel

Currently on import and export excel file only support multiturn. But the same is not supported if multi excel files are added as files in QnA. This is really needed feature as multiple contributers with seperate excel files update the content. Please provide this functionality

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 38f6b983-0c19-6439-78df-ea7bdab3f94e
Version Independent ID: 15dc8197-fed8-a94f-4143-2799d5e6a002
Content: Multi-turn conversations - QnA Maker - Azure Cognitive Services
Content Source: articles/cognitive-services/QnAMaker/How-To/multiturn-conversation.md
Service: cognitive-services
Sub-service: qna-maker
GitHub Login: @diberry
Microsoft Alias: diberry

@vikramdadwal Thanks for your comment. We are actively investigating and will get back to you shortly.

@vikramdadwal We have forwarded this feedback to product team. You can also raise a user voice request here so the community can vote and provide their feedback, the product team then checks this feedback and implements the feature in future releases.

authors: KrishnaG-MSFT ram-msft vikramdadwal


text:
Collecting Security Logs

Hi,
I have installed MMA in Windows VM and connect with Log Analytics workspace.
I am able to collect System and Application logs but I am not able to collect Security (Logon/Logoff) logs from my VM.
Is there any guide that will help me achieve this?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 00a00a3e-a0df-7ee5-4733-7231bd7a024f
Version Independent ID: 94361683-e1e7-7e55-6993-86d3c2486a14
Content: Connect Windows computers to Azure Monitor
Content Source: articles/azure-monitor/platform/agent-windows.md
Service: azure-monitor
Sub-service: logs
GitHub Login: @MGoedtel
Microsoft Alias: magoedte

@azr0112 Thanks for your comment. We are actively investigating and will get back to you shortly.

@azr0112 You would have to deploy Security & Audit solution to accomplish your requirement of monitoring security events like logon\logoff, etc. Currently Security & Audit solution solution is included in standard tier of ASC (Azure Security Center) but not directly in Log Analytics. In general, to store data ASC uses Log Analytics. Below one is the Kusto query to get logoff related events. Similarly Event ID 4634 is for logon related events.
SecurityEvent | where EventID == 4624

@azr0112 At this point it appears that there's no edits or updates needed for the referred Azure documentation so closing this issue for now. If there are further questions regarding this matter or feedback on the documentation, please do let us know and we will gladly continue the discussion.


text:
Converting 'IListBlobItem' to 'CloudBlob' throws Invalid Cast exception

UPDATE 2: I was able to resolve this issue by moving the the call to ListBlobsSegmentedAsync to the container and using a prefix.
UPDATE: After taking a closer look at my code vs the sample in the docs, the only difference I can see is that rather than calling ListBlobsSegmentedAsync on a container, I'm calling it on a directory.
private async Task<ICollection<IListBlobItem>> GetFiles(CloudBlobContainer container, string directoryName)
        {
            BlobContinuationToken continuationToken = null;
            var results = new List<IListBlobItem>();
            var directory = container.GetDirectoryReference(directoryName);
            do
            {
                var response = await directory.ListBlobsSegmentedAsync(continuationToken);
                continuationToken = resultSegment.ContinuationToken;
                results.AddRange(resultSegment.Results);
            } while (continuationToken != null);

            return results;
        }

Then, in a separate method, this line now fails:
foreach (CloudBlob filePath in results)
Original
I have code virtually identical to the sample listed here: https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blobs-list. This code used to work perfectly, but now it is throwing this error: Unable to cast object of type 'Microsoft.WindowsAzure.Storage.Blob.CloudBlobDirectory' to type 'Microsoft.WindowsAzure.Storage.Blob.CloudBlob'. This code has been working for several weeks, but is now failing both locally and in Azure.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 49364b8c-01b5-5180-7537-c221c79d5b3d
Version Independent ID: 95ec5f30-8c53-b349-3b3c-71109ae84741
Content: List blobs with .NET - Azure Storage
Content Source: articles/storage/blobs/storage-blobs-list.md
Service: storage
Sub-service: blobs
GitHub Login: @tamram
Microsoft Alias: tamram

@kabirshaikh Could you please post this thread on either Stackoverflow or MSDN Forums to help you further since it doesn't pertain to the docs ?
Directory path file system is not supported yet in storage, all folders are considered a path, more explanation can be found here: https://docs.microsoft.com/en-us/rest/api/storageservices/naming-and-referencing-containers--blobs--and-metadata
We will now proceed to close this thread. If there are further questions regarding this matter, please reopen it and we will gladly continue the discussion.

I just want to clarify that my previous code that used the directory to list the blob items used to work. Was this changed recently? I can understand if I was doing something that I wasn't supposed to do, but why did this work at all previously?

Did you have directory services in for data lake storage enabled previously by any chance ?

authors: Adam-Smith-MSFT kabirshaikh


text:
.net core startup command is incorrect

The startup command for .net core incorrectly states dotnet <myapp>.dll.  The correct value for the field is actually dotnet run <maypp>.dll.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: b421fa01-1f39-28a5-78c2-63dd5700c8c5
Version Independent ID: 10ed9c91-16e0-d371-fcfc-d6d5a7f984b2
Content: Run built-in containers FAQ - Azure App Service
Content Source: articles/app-service/containers/app-service-linux-faq.md
Service: app-service
GitHub Login: @msangapu-msft
Microsoft Alias: msangapu

Hi @sbohlen, thanks for the feedback! As this doc states "The dotnet run command is used in the context of projects, not built assemblies. If you're trying to run a framework-dependent application DLL instead, you must use dotnet without a command." So in this case i don't believe the command in this doc is incorrect.

I'll certainly leave the final determination re: the correct answer to yourselves.  All I can do is report that entering dotnet <mayapp>.dll in the startup field did not result in the deployed application responding to an HTTP request whereas entering dotnet run <myapp>.dll properly resulted in the assembly I'd authored correctly responding to HTTP requests to the app service's published URL.
Its certainly possible that some other factor in my case is the reason for this observed behavior so YMMV (and in any case my specific issue is resolved for myself).  Feel free to close this issue if you're certain the docs are correct.

Thanks for the additional details Steve. We believe the command on doc is correct.
We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

authors: Grace-MacJones-MSFT sbohlen


text:
« into » is repeated

Data comes into into the designer ...

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 0fd665ec-39f3-6f03-bfa6-37481ed5f5d0
Version Independent ID: 7ef82685-2aca-15db-cdd3-c8bfd5ef01ed
Content: Import data - Azure Machine Learning
Content Source: articles/machine-learning/how-to-designer-import-data.md
Service: machine-learning
Sub-service: core
GitHub Login: @PeterCLu
Microsoft Alias: peterlu

@yaniaoulmi , thanks for your eagle-eyed catch. That should definitely not read "into into". The error has been fixed, and you should see the changes live in a few hours.
#please-close

authors: PeterCLu yaniaoulmi


text:
"Domain Controller logs" must be "Pass-through Authentication agent logs"

The XML Query can be used on any server that has PTA agent installed. So the name of this section must be changed to  "Pass-through Authentication agent logs" instead of "Domain Controller logs" which is at https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-pass-through-authentication#domain-controller-logs

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 6150b6e2-33af-97f5-928a-0bcdb7a34e39
Version Independent ID: b49e152b-20d0-670a-f66d-da14c61fb564
Content: Azure AD Connect: Troubleshoot Pass-through Authentication
Content Source: articles/active-directory/hybrid/tshoot-connect-pass-through-authentication.md
Service: active-directory
Sub-service: hybrid
GitHub Login: @billmath
Microsoft Alias: billmath

@tajaber -  Thanks for brining this to our attention. We will investigate it further and update you shortly.

Thanks! I made a pull request to update this but will leave it open for the author, @billmath, as I'm unsure why the domain controller was specified. https://github.com/MicrosoftDocs/azure-docs-pr/pull/121927


text:
Broken URL

The URL for aggregation functions https://docs.loganalytics.io/learn/tutorials/aggregations.html  is broken

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 22f7088d-dd07-e0dd-1204-50da3a29359c
Version Independent ID: 5ff9ae22-13b9-e19d-4e1e-9be42adf02d3
Content: A tour through Analytics in Azure Application Insights
Content Source: articles/application-insights/app-insights-analytics-tour.md
Service: application-insights
GitHub Login: @mrbullwinkle
Microsoft Alias: mbullwin

@AdityaSantoso,
Thanks for your feedback! We will investigate and update as appropriate.

#in-process

There were multiple broken links in this doc. Updates were merged to the private repo. They will go-live in production at 10 AM today.

#please-close

Also if a label of "application-insights" can be added to this issue for reporting purposes.


text:
Display Technical profile DisplayName / Description to the user

Hi!
The docs says that it is possible to display technical provide DisplayName and Description to the user. But I can't find any information on how to enable this in self-asserted technical profile.
And also, can you please clarify if it is possible to include HTML markup into Description? Especially, i'd like to present a multiline text with some words highlighted bold/italic.
Thanks!
Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 388cccb2-2f58-b0fb-fc2f-1828e35e431c
Version Independent ID: c3ca0abf-ae09-e109-8376-01c086ba5abc
Content: TechnicalProfiles - Azure AD B2C
Content Source: articles/active-directory-b2c/technicalprofiles.md
Service: active-directory
Sub-service: b2c
GitHub Login: @msmimart
Microsoft Alias: mimart

@VadimBurshtyn
Thanks for your feedback! We will investigate and update as appropriate.

Thank you for bringing this to our attention. Both the display name and the description are not shown to the user. I have created a pull request to update the doc accordingly.

Thanks for clarification!
In this case, can you please suggest a way to display a message to the user during specific journey step other then adding additional "Paragraph" claim type?


text:
How can access tokens contain the "roles" claim

I am using the OAuth 2.0 auth code grant flow to acquire access tokens, and I hope the token could have roles claim as described in the doc, which should be populated with the roles the user was assigned to on the target application for user tokens.
I have configured my application in Azure Portal in which the appRole property in the manifest is as below, and I assigned one role to a login user.

However, after receiving tokens by Azure AD, I can only find the roles claim in id token rather than access token. So my question is

Is my understanding of this claim in access tokens incorrect: this claim should be populated with the appRole property of a login user?
How can I get it in access tokens?
Is there a way to make the roles claim contains the group information of a login user?

Thanks.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 2471c08b-befe-8e1a-df08-f13e116c231e
Version Independent ID: 0d827d33-2906-6352-9398-13863def9354
Content: Microsoft identity platform access tokens - Microsoft identity platform
Content Source: articles/active-directory/develop/access-tokens.md
Service: active-directory
Sub-service: develop
GitHub Login: @hpsin
Microsoft Alias: hirsin

@yiliuTo Thanks for reaching out. We will investigate and update the thread accordingly.

Hello @yiliuTo thank you for sharing the query. The appRoles that you create in your App Manifest, first needs to be assigned to the user in that app. Let's check the steps below:
I created the following appRoles in the app manifest:

After the appRoles are created in the app manifest, you need to assign them to a user who is already added to access this application under Users and Groups section in the enterprise application.
Then you can request for an access token using the Auth-Code Grant Flow. I tested this and I am sharing the sample request for you to try:
To request the code from /authorize endpoint: https://login.microsoftonline.com/soumimsft.onmicrosoft.com/oauth2/authorize?client_id={App ID}&response_type=code&redirect_uri=http%3A%2F%2Flocalhost%3A1234&response_mode=fragment&resource={App ID}&state=12345
To request the access-token from /token endpoint:

Note: Here you would find that the clientId and the resource have the same value. This is required to fetch the token with the app roles in it.
Access-Token:

How can I get it in access tokens?
Ans: With the above request, I am sure you can fetch the access-token, as Auth-Code grant flow if done, it returns access-token by default.
Is there a way to make the roles claim contains the group information of a login user?
Ans: No, this is not possible.
Hope this helps.

Thanks you so much for such a detailed reply @souravmishra-msft , I can get roles claim now with your help. Now I have a few new questions:

Does roles claim exist only when the resource or scope(I use the V2 endpoints) parameter in access-token request is set as the client-id or client-id/.default? In my scenorios, I hope my application could acquire an access token of a specific resource and permission, e.g., https://graph.microsoft.com/ user.read, and when I set the scope as _https://graph.microsoft.com/user.read_ instead of client-id/.default, then then access token doesn't contain the roles.

Another two questions are about the groups claim in access token: Why does this claim only exists when the aud of an access token is not Graph API like https://graph.microsoft.com? And is there a way to make the content of groups claim to be groups' name instead of groups' object-id?

Thanks~

Hello @yiliuTo, I have updated my previous response, I would request you to please check that once again as I have added few more details and also corrected one of the points.
To get the group claims in the access-token, you need to use the optional group claims. I have updated the previous answer of mine with the new details on Group claims and how to add them in access_token.
Coming to the second part, where you mentioned "Why does this claim only exists when the aud of an access token is not Graph API like https://graph.microsoft.com?", As you remember, while configuring the roles, we are configuring it on the Application's manifest as a property of that application and not for Graph, hence the App Roles property is local to that application where you configured this. So, whenever you want the app-roles to be present in the access-token, you need to mention that app-id where the app-roles are configured. In our test case, we had configured it in that same app, for which we requested the token and hence both the appID/ClientID and the scope/resource parameter had to contain the same clientID.
Hope this helps. Please feel free to let us know if there are more queries around this so that we can help you better.

@souravmishra-msft thank you for your explanation and updates! My new question is about the optional group claims, is there a way to configure the display value of groups claim? I want it to display the name of groups instead of object-id. I have read about these docs: doc1 and doc2, however, all the source attributes to be selected to display I found are as below:

while the value I hope could be displayed in the groups claim is the group name:

Hello @yiliuTo, You cannot get the Group Names (for groups created in AzureAD) in tokens. You only get the group ids as claims in the issued tokens by AAD. Usually, this is good, since the id cannot be changed, unlike the name which can change.
If you want to do authorization based on groups, you can set the ids in a configuration file and then check with the id.
If you want the names for some other purpose, you'll need to query the group's details from Microsoft Graph API. You can find the API documentation here: https://docs.microsoft.com/en-us/graph/api/resources/groups-overview?view=graph-rest-1.0
Hope this helps.

Thanks for your help~~

authors: souravmishra-msft vipulsparsh yiliuTo


text:
Azure Service Fabric Cluster Upgrade error

Register-ServiceFabricClusterPackage as described results in:
Register-ServiceFabricClusterPackage : The file name 'ServiceFabric.msi' is invalid. File should be Microsoft Azure
Service Fabric.....msi
At line:1 char:1

Register-ServiceFabricClusterPackage -Code -CodePackagePath "ServiceF ...

  + CategoryInfo          : InvalidOperation: (Microsoft.Servi...usterConnection:ClusterConnection) [Register-Servic
 eFabricClusterPackage], FabricException
  + FullyQualifiedErrorId : RegisterClusterPackageErrorId,Microsoft.ServiceFabric.Powershell.RegisterClusterPackage

And if you rename the file:
Register-ServiceFabricClusterPackage -Code -CodePackagePath "Microsoft Azure Service Fabric.7.2.413.9590.msi
"
Register-ServiceFabricClusterPackage : The file name 'Microsoft Azure Service Fabric.7.2.413.9590.msi' is invalid.
File should be Microsoft Azure Service Fabric.....msi
At line:1 char:1

Register-ServiceFabricClusterPackage -Code -CodePackagePath "Microsof ...

  + CategoryInfo          : InvalidOperation: (Microsoft.Servi...usterConnection:ClusterConnection) [Register-Servic
 eFabricClusterPackage], FabricException
  + FullyQualifiedErrorId : RegisterClusterPackageErrorId,Microsoft.ServiceFabric.Powershell.RegisterClusterPackage

Funny error message!

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 12f8a9b5-f61a-4e8b-933b-749afcd78e9d
Version Independent ID: 329f7070-dd7e-a6fb-af06-03c120779731
Content: Azure Service Fabric infrastructure as Code Best Practices - Azure Service Fabric
Content Source: articles/service-fabric/service-fabric-best-practices-infrastructure-as-code.md
Service: service-fabric
GitHub Login: @peterpogorski
Microsoft Alias: pepogors

@mcurko To assist you better on your query could you provide us with the link to the document you are referring to ?
In case your query in not related to document content, open a new forum thread either Microsoft Q&A or StackOverflow as it could be better place to get help on your scenario where the community members could provide their expert guidance to you based on their experience.

https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-best-practices-infrastructure-as-code

@mcurko Thanks for sharing documentation link.  We will investigate and update as appropriate.

Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.

Hi @mcurko,
Sorry for the late response. Please can you provide all executed commands including the result here? I am wondering if you have executed Copy-ServiceFabricClusterPackage before as described in the documentation for Register-ServiceFabricClusterPackage. Also, I believe this is only for standalone cluster. We should correct this in the public docs. I'm happy to double check on the latter.
Christian

Hi @mcurko , We are closing this issue.  You can open a new issue if the question is for standalone cluster.
#Please-close this issue

authors: Karishma-Tiwari-MSFT SaurabhSharma-MSFT inputoutputcode mcurko meenasaravanan02


text:
Missing - Creating the Certificates in section "Set-up a custom domain name in API Management"

The most important step of creating the certificates in this page in the above section is missing. Please add steps to actually create the three certificate related files in section "Set-up a custom domain name in API Management".
How do these certificate files magically appear, which are being subsequently being referred to. The documentation does not contain this crucual step of creating these certificates correctly. This is a BIG MISSING step for anyone who follows this doc.
$gatewayCertCerPath = "C:\Users\Contoso\gateway.cer" # full path to api.contoso.net .cer file
$gatewayCertPfxPath = "C:\Users\Contoso\gateway.pfx" # full path to api.contoso.net .pfx file
$portalCertPfxPath = "C:\Users\Contoso\portal.pfx"  # full path to portal.contoso.net .pfx file

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 37c1f253-44c2-bd07-4c74-9d4c77c45e6e
Version Independent ID: 281ce98c-115b-3c39-52b7-3df95dfd8b52
Content: How to use API Management in Virtual Network with Application Gateway - Azure API Management
Content Source: articles/api-management/api-management-howto-integrate-internal-vnet-appgateway.md
Service: api-management
GitHub Login: @solankisamir
Microsoft Alias: sasolank

Thanks for the feedback and bringing this to our notice . At this time we are reviewing the feedback and will update the document as appropriate .

Hello @kprpg, Thank you for your feedback! We have assigned this issue to the author to review further and take the next course of action.

#reassign:dlepow

authors: ChaitanyaNaykodi-MSFT elbarnit himanshusinha-msft kprpg


text:
Deprecated & incorrect info

When creating a new Solidity project the Truffle migration uses truffle-hdwallet-provider. That provider has been deprecated a long time ago and instead @truffle/hdwallet-provider should be used
When trying to interact with the HelloBlockchain contract (via "Show contract interaction page") I get an error "the current provider doesn't support subscriptions: A". If I look at the used provider URI it uses https. If the interaction is supposed to use WebSockets this URI should use wss protocol.
After a few tries it fail to even open the "Show contract interaction page". It just says "no contract deployed" even if I redeploy it. No idea how this could be resolved.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: df32d8b8-aa8f-b8da-3bc6-3fcba16be8bd
Version Independent ID: 71fdb7e0-bb97-f96a-84fc-778eeb590982
Content: Create, build, & deploy smart contracts tutorial - Azure Blockchain Service - Azure Blockchain
Content Source: articles/blockchain/service/send-transaction.md
Service: azure-blockchain
GitHub Login: @PatAltimore
Microsoft Alias: patricka

@microbecode  Thanks for the feedback! We are currently investigating and will update you shortly.
Adding author @PatAltimore as well for further insights.

@microbecode  Thanks for the feedback! We are currently investigating and will update you shortly.
Adding author @PatAltimore as well for further insights.

Hi @microbecode,
I'm sorry about the issue. We're working on a fix to the extension for questions 2 & 3.  See https://github.com/microsoft/vscode-azure-blockchain-ethereum/issues/57.
If you want to send a transaction without the interaction page, you can follow the steps in a previous version of the tutorial. Here's a link to the history: https://github.com/MicrosoftDocs/azure-docs/blob/faf74c90d878347089eb31f6a8457d5bebcc96b2/articles/blockchain/service/send-transaction.md.
Thanks for reaching out. Sorry for the inconvenience.
Hope that helps,
Pat

Hi @microbecode,
I'm sorry about the issue. We're working on a fix to the extension for questions 2 & 3.  See https://github.com/microsoft/vscode-azure-blockchain-ethereum/issues/57.
If you want to send a transaction without the interaction page, you can follow the steps in a previous version of the tutorial. Here's a link to the history: https://github.com/MicrosoftDocs/azure-docs/blob/faf74c90d878347089eb31f6a8457d5bebcc96b2/articles/blockchain/service/send-transaction.md.
Thanks for reaching out. Sorry for the inconvenience.
Hope that helps,
Pat

Hi @microbecode,
I gave the feedback for question 1 to the extension dev team. For 2 & 3, I have a backlog item to update the article with any changes as soon as the interaction page fix is complete.
Thanks again for the feedback. I'm going to request closing this issue for now since we have backlog items for the issues.
Thanks,
Pat
#please-close

Hi @microbecode,
I gave the feedback for question 1 to the extension dev team. For 2 & 3, I have a backlog item to update the article with any changes as soon as the interaction page fix is complete.
Thanks again for the feedback. I'm going to request closing this issue for now since we have backlog items for the issues.
Thanks,
Pat
#please-close

@microbecode I am prepping a release (1.7.0) which will have the update for the hdwallet-provider.  This requires a change to a base template used for new solidity projects and the code extension.  This release is targeted for release at end of January.
For the 2/3 items, the refactored smart contract interaction is still in progress and won't be in release 1.7.0 however I can push the bits up to a dev branch for early access soon.
Apologies on the lag here.

@microbecode I am prepping a release (1.7.0) which will have the update for the hdwallet-provider.  This requires a change to a base template used for new solidity projects and the code extension.  This release is targeted for release at end of January.
For the 2/3 items, the refactored smart contract interaction is still in progress and won't be in release 1.7.0 however I can push the bits up to a dev branch for early access soon.
Apologies on the lag here.

@caleteeter Thanks for the update.
I personally don't need an early access version, but maybe someone else does.

@caleteeter Thanks for the update.
I personally don't need an early access version, but maybe someone else does.

authors: AshokPeddakotla-MSFT PatAltimore caleteeter microbecode


text:
What RBAC Permission Is Needed to Create System Identity?

When I create VM, storage account or web app, I can create system managed identity in the same time?
What RBAC permission is needed?
for example, any  specific operation we need under Microsoft.Compute/*  in order to create system identity for a VM.
or does it require any particular operation from Microsoft.ManagedIdentity/*
[Enter feedback here]

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 72861cc1-7081-cf6e-b7f9-e700a16faa9a
Version Independent ID: c870872d-0559-6b77-280f-f478e8c84776
Content: Managed identities for Azure resources
Content Source: articles/active-directory/managed-identities-azure-resources/overview.md
Service: active-directory
Sub-service: msi
GitHub Login: @barclayn
Microsoft Alias: barclayn

@RonnieQuan
Thanks for your feedback! We will investigate and update as appropriate.

@RonnieQuan
Thanks for your feedback! We will investigate and update as appropriate.

@JamesTran-MSFT  Thanks for the response, this is a critical question, it will be great if you could get back to me ASAP.

@JamesTran-MSFT  Thanks for the response, this is a critical question, it will be great if you could get back to me ASAP.

@RonnieQuan
Thank you for the follow up!
When it comes to what RBAC permissions are required to managed identity on a resource:

System-assigned managed identity: You need write permissions over the resource. For example, for virtual machines you need Microsoft.Compute/virtualMachines/write. This action is included in resource specific built-in roles like Virtual Machine Contributor.
User-assigned managed identity: You need write permissions over the resource. For example, for virtual machines you need Microsoft.Compute/virtualMachines/write. In addition to Managed Identity Operator role assignment over the managed identity.

I hope this helps! If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

@RonnieQuan
Thank you for the follow up!
When it comes to what RBAC permissions are required to managed identity on a resource:

System-assigned managed identity: You need write permissions over the resource. For example, for virtual machines you need Microsoft.Compute/virtualMachines/write. This action is included in resource specific built-in roles like Virtual Machine Contributor.
User-assigned managed identity: You need write permissions over the resource. For example, for virtual machines you need Microsoft.Compute/virtualMachines/write. In addition to Managed Identity Operator role assignment over the managed identity.

I hope this helps! If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

@RonnieQuan
I just wanted to check in and see if you had any other questions? Otherwise, since our FAQ has provided the required permissions/examples for your issue, I'll go ahead and close this out at the end of the day.
Thank you for your time and patience throughout this issue!

@RonnieQuan
I just wanted to check in and see if you had any other questions? Otherwise, since our FAQ has provided the required permissions/examples for your issue, I'll go ahead and close this out at the end of the day.
Thank you for your time and patience throughout this issue!

authors: JamesTran-MSFT RonnieQuan


text:
When will this service come in GA?

we required this service in GA.
it's system requirement.
Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 4ba9a74f-e0b7-5e2c-b066-5f32dc47f950
Version Independent ID: 919e9aef-832f-574f-89b3-0456c5cc3f68
Content: Use Container Storage Interface (CSI) drivers for Azure Disks on Azure Kubernetes Service (AKS) - Azure Kubernetes Service
Content Source: articles/aks/azure-disk-csi.md
Service: container-service
GitHub Login: @palma21
Microsoft Alias: mlearned

@maheshkvis -
Thanks for brining this to our attention. We will investigate it further and update you shortly.

@maheshkvis -
Thanks for brining this to our attention. We will investigate it further and update you shortly.

@maheshkvis - The GA is in March with the Kubernetes Version of 1.20. Hope this helps.
At this moment, Since there is no doc update required, We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

@maheshkvis - The GA is in March with the Kubernetes Version of 1.20. Hope this helps.
At this moment, Since there is no doc update required, We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

authors: MonikaReddy-MSFT maheshkvis


text:
The link to "Pricing Tiers" links back to this page.

[Enter feedback here]
In the doc section "Adjust performance and scale within seconds" the  last sentence: "See Pricing tiers for details." contains a hyperlink which doesn't point to information about pricing tiers, instead it just links back to this page.
Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 8f71a77c-23ce-5496-9da9-f1d1871a62c2
Version Independent ID: f2b69a19-1b25-cd89-e44c-370fa83ea45c
Content: Azure Database for PostgreSQL Single Server
Content Source: articles/postgresql/overview-single-server.md
Service: postgresql
GitHub Login: @sunilagarwal
Microsoft Alias: sunila

@dgpoulet Thank you for the feedback. We are actively investigating and will get back to you soon.

@dgpoulet Thanks for letting us know the issue with the doc. We have created a PR which on review and approval from team shall be made live in few days.
Please let us know if you have any other queries otherwise we will close the thread.

@dgpoulet We will now proceed to close this thread. If there are further questions regarding this matter, please comment and we will gladly continue the discussion.

authors: AnuragSharma-MSFT dgpoulet


text:
YAML is broken

YMAL produces error:
Encountered error(s) while parsing pipeline YAML:
/azure-pipelines.yml: (Line: 5, Col: 10, Idx: 38) - (Line: 5, Col: 10, Idx: 38): Mapping values are not allowed in this context.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 63230b97-2269-3fed-7fca-882bb380c5f6
Version Independent ID: feb2708e-5cea-4ad8-eaaa-f3061e18c11a
Content: Tutorial: Publish Azure Static Web Apps with Azure DevOps
Content Source: articles/static-web-apps/publish-devops.md
Service: static-web-apps
GitHub Login: @scubaninja
Microsoft Alias: apedward

@kp2017 Thank you for the feedback. We are actively investigating and will get back to you soon.

@kp2017, I agree with @phi1osoph0s, manually transcribing will work. See if copying the following will work:
trigger:
- master

pool:
  vmImage: ubuntu-latest

steps:
- task: AzureStaticWebApp@0
  inputs:
    app_location: '/'
    api_location: 'api'
    output_location: ''
  env:
    azure_static_web_apps_api_token: $(deployment_token)

Thank you all, I manually transcribed the YAML and was able to get past it.

authors: AnuragSharma-MSFT RyanHill-MSFT kp2017


text:
Please add documentation for NVIDIA GRID Driver License Type

After lots of frustration and debugging why I couldn't get 2 GPU-powered displays on my Linux NV12s_v3 VM, we finally found that the Azure-provided extension is configuring the license type (aka feature type) to 1 (GRID vGPU), not 2 (GRID Virtual Workstation). The virtual workstation license type is required for multiple monitors.
My request for these docs is to make this configuration option clear to users. The extension configures the NVIDIA control panel to hide the licensing section, so it's really not something you can stumble upon easily. Please update your documentation, explaining how to change the license/feature type, enabling multiple monitors. For us, it involved editing /etc/nvidia/gridd.conf, and setting FeatureType=2. It wouldn't hurt for these Azure docs to also link to a document like this or this, explaining the options and capabilities a bit more clearly.
Finally, I'd also ask that this option be configurable in the extension settings, along with the existing driverVersion setting. This seems like an incredibly fundamental thing to need the ability to configure during the driver installation, instead of forcing users to do it after the fact.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 374c8361-9b31-2488-f04b-766e6305c91b
Version Independent ID: aebb9dd3-d1e6-4319-9ab1-0088bd8416e3
Content: NVIDIA GPU Driver Extension - Azure Linux VMs - Azure Virtual Machines
Content Source: articles/virtual-machines/extensions/hpccompute-gpu-linux.md
Service: virtual-machines
Sub-service: hpc
GitHub Login: @vermagit
Microsoft Alias: amverma

@jsmartt - Thanks for bringing this to our attention.
I'm going to assign this to the document author so they can update the document accordingly.

The manual driver installation docs currently recommend removing the FeatureType=0 config parameter from the gridd configuration file (/etc/nvidia/gridd.conf). This appears to have the same effect as setting it to 2.
The NVIDIA GPU Driver Extension docs do not mention this config file. The extension docs are unclear as to what license is set by the extension and what steps are to be taken to troubleshoot the unlicensed state.

Thanks for your dedication to our documentation. Unfortunately, at this time we have been unable to review your issue in a timely manner and we sincerely apologize for the delayed response. The requested updates have not been made since the creation of this issue, and the timeline for resolution may vary based on resourcing, so we've created an internal work item to incorporate your suggestions. We are closing this issue for now, but feel free to comment here as necessary. #please-close

authors: MonikaReddy-MSFT cynthn diadatp jsmartt


text:
CAS/MCAS missing?

Shouldn't *.cas.ms, *.mcas.ms and *.mcas-gov.us be added to the list?
As per this link

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: d8336877-da93-ecd6-829a-0cc068caaf29
Version Independent ID: 1e70f094-f220-92c6-7e5b-cfaf071101d5
Content: Allow the Azure portal URLs on your firewall or proxy server - Azure portal
Content Source: articles/azure-portal/azure-portal-safelist-urls.md
Service: azure-portal
GitHub Login: @JnHs
Microsoft Alias: jenhayes

Thanks for brining this to our attention. We will investigate it further and update you shortly.

@andrePKI - Thanks again for bringing this to our attention. We have updated the Doc and it will be live once its merged.  We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

authors: MonikaReddy-MSFT andrePKI


text:
screenshot needs to be updated

The screenshot needs to be updated. The portal now calls this radial bubble "Allow storage account key access
", not "Allow shared key access", as shown in the screenshot.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 69f22974-ee84-5d29-d12f-af2a68ca72bc
Version Independent ID: 6ed5e442-6ab8-b87b-0a13-c0479c2ba152
Content: Prevent authorization with Shared Key - Azure Storage
Content Source: articles/storage/common/shared-key-authorization-prevent.md
Service: storage
GitHub Login: @tamram
Microsoft Alias: tamram

Thanks for reporting this. I have assigned the issue to the content author to investigate further and update the document as appropriate.

authors: DerekHerman-MSFT Mike-Crowley


text:
the link in the text may be not right.

I'm going to mention about the following section in Azure Firewall Standard.

Issue
Description
Mitigation

Network   filtering rules for non-TCP/UDP protocols (for example ICMP) don't work for   Internet bound traffic
Network   filtering rules for non-TCP/UDP protocols don't work with SNAT to your public   IP address. Non-TCP/UDP protocols are supported between spoke subnets and   VNets.
Azure Firewall uses the Standard Load Balancer, which doesn't support SNAT for IP protocols today. We're exploring options to support this   scenario in a future release.

I think the link which doesn't support SNAT for IP protocols today in the Mitigation would be Limitations instead of What is Azure Load Balancer? - Azure Load Balancer | Microsoft Docs because there is a text about SNAT and ICMP in Limitations but not in What is Azure Load Balancer? - Azure Load Balancer | Microsoft Docs.
In Limitations, we can see the following text.
Load balancer doesn't support ICMP for outbound NAT.
Could you take a look at this section in Azure Firewall Standard.
Best regards,
Shiho

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 474ba3cb-afa1-4ec5-37df-6553a5523dbb
Version Independent ID: 56096558-1943-3f6b-9609-7722200272fb
Content: What is Azure Firewall?
Content Source: articles/firewall/overview.md
Service: firewall
GitHub Login: @vhorne
Microsoft Alias: victorh

Issue	Description	Mitigation
Network filtering rules for non-TCP/UDP protocols (for example ICMP) don't work for Internet bound traffic	Network filtering rules for non-TCP/UDP protocols don't work with SNAT to your public IP address. Non-TCP/UDP protocols are supported between spoke subnets and VNets.	Azure Firewall uses the Standard Load Balancer, which doesn't support SNAT for IP protocols today. We're exploring options to support this scenario in a future release.

@twinkle13531
Thanks for your feedback! We will investigate and update as appropriate.

Thanks @twinkle13531! I made a pull request to update the link. https://github.com/MicrosoftDocs/azure-docs-pr/pull/189214


text:
Update Cross-region Replication peerings list to include all regions

The list for "azure-cross-region-replication-pairings-for-all-geographies" can be confusing for customers given some regions only replicate one way in the pair.
Take example US West 3 and East US. We need to explicitly call out that you cannot replicate (automatically with GRS) traffic between East US and West US 3 - because East US replicates already to West US (not 3). We can achieve this either by listing every region in pair A column and its replica in Pair B or highlighting the pair only replicates one Way.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 09a788e4-0130-73f2-d985-6fc3aec77974
Version Independent ID: a9f4ec3f-f0a3-b050-020b-f487c74c5179
Content: Cross-region replication in Azure
Content Source: articles/availability-zones/cross-region-replication-azure.md
Service: azure
GitHub Login: @awysza
Microsoft Alias: rarco

@samgoudie  Thanks for the feedback! I have assigned the issue to the content author to evaluate and update as appropriate.

To learn more about your region's architecture and pairing, please contact your Microsoft sales or customer representative.
#please-close


text:
Replaced CodePen samples in article: Connect to a WFS service

Replaced CodePen samples in article: Connect to a WFS service

@dubiety

Can you review this PR?
IMPORTANT: When this content is ready to merge, you must add #sign-off in a comment or the approval may get overlooked.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

source: gharchive/pull-request

authors: Jak-MS stevemunk


text:
Update azure-stack-hci.md

added a note that the host pool name should not contain spaces.

Hi @cpuck - thanks for adding this. I've had to do this in a separate PR as I can't sign it off otherwise.  The change should be visible later today.
#please-close

authors: cpuck dknappettmsft


text:
flexbyok

We did a repro and it seems we don't have a validation on the key vault retention, so any values should work.
This is also confirmed with Qingqing, no validation exists for the retention, we have validation on purge protection ..etc

@GennadNY
Can you review the proposed changes?
When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.
#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team


text:
Update directory-assign-admin-roles.md

Documented ability for Helpdesk Admin and User Admin to invalidate refresh tokens

@VinceSmith : Thanks for your contribution! The author, @curtand, has been notified to review your proposed change.

@ktoliver : Thanks for your contribution! The author, @curtand, has been notified to review your proposed change.


text:
Fix typo

Github -> GitHub

@changeworld : Thanks for your contribution! The author, @diberry, has been notified to review your proposed change.

@changeworld Hi Takashi, Thank you for taking the time to submit this correct. #sign-off

authors: PRMerger10 changeworld diberry


text:
fix: articles/active-directory/develop/active-directory-signing-key-rollover.md

Escape elements

@nschonni : Thanks for your contribution! The author, @CelesteDG, has been notified to review your proposed change.

Verified editorial correction. Thanks


text:
Update docs to reflect breaking changes to API

The prototype to create_queue was changed in a breaking release v0.5, this change reflects the changes to the API

@henrycjc : Thanks for your contribution! The author, @axisc, has been notified to review your proposed change.

@spelluru can you please review this PR request?

Thank you @henrycjc
#sign-off

@spelluru: I'm sorry - only the author of this article, @axisc, can sign off on your changes. But we do have an exception process - if you are on the Microsoft content or product team for this product area, you can ask the PR review team to review and merge it by sending mail to the techdocprs alias.

@KetanChawda-MSFT - please assign the issue to @axisc (Ashish Chhabria). Thanks.

@axisc Can you please provide a sign off this request.

@axisc following up in case you missed.


text:
chore: Renormalize line endings

Ran git add --renormalize .

@nschonni : Thanks for your contribution! The author, @bandersmsft, has been notified to review your proposed change.

@SyntaxC4 this is something better done internally. Guess there might have been some old branches merged in after the initial .gitattributes setup

@SyntaxC4 Assigning for resolution.

@SyntaxC4, please advise.

authors: PRMerger18 chbain jborsecnik nschonni


text:
Update sql-database-business-continuity.md

I thought I had proposed this change before. The current wording is unclear - it could be taken as "service updates connection string after failover" in which case the meaning becomes the opposite of what is intended.
Feel free to change the wording if it doesn't fit in the chart or the style guide, but it needs to be clearer. Particularly when localized, the meaning can be distorted.

@dcbrown16 : Thanks for your contribution! The author(s) have been notified to review your proposed change.

Looks good to me. Thanks @dcbrown16


text:
Update Sign in a user code example

Adding BroadcastService to the list of imports under step 3 of Configure the application. Adding ngOnInit() to app.component.ts under Sign in a user.

@ashmatty : Thanks for your contribution! The author(s) have been notified to review your proposed change. @hahamil

Flagging @hamiltonha to review this public contribution. Haley, can you sign off if all is good to go? Thank you.

authors: CelesteDG PRMerger6 ashmatty


text:
Update safe-url-list.md

Corrected referenced Event ID to 3701

@RKauf00 : Thanks for your contribution! The author(s) have been notified to review your proposed change.

@Pavithir is a PM and approved the update, so we'll merge the PR. Thanks for the review.

Thanks!

From: Kristine Toliver notifications@github.com
Sent: Wednesday, July 22, 2020, 17:06
To: MicrosoftDocs/azure-docs
Cc: Rick; Mention
Subject: Re: [MicrosoftDocs/azure-docs] Update safe-url-list.md (#59536)
@Pavithirhttps://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FPavithir&data=02|01||69cc79c7089441aec86108d82e831d30|84df9e7fe9f640afb435aaaaaaaaaaaa|1|0|637310487942227078&sdata=QAA9q8PbV3%2B7PdIyy9y8nc3HtS6iUAYP0vhVMonUOQ4%3D&reserved=0 is a PM and approved the update, so we'll merge the PR. Thanks for the review.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fpull%2F59536%23issuecomment-662696580&data=02|01||69cc79c7089441aec86108d82e831d30|84df9e7fe9f640afb435aaaaaaaaaaaa|1|0|637310487942237073&sdata=ykeG3Mnx%2FsYsWM%2F%2FLtXTAmS4E45PfHcKAMUxIpvmNxg%3D&reserved=0, or unsubscribehttps://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAGIFLUBHN4PF4AI37MDAYVTR45IFTANCNFSM4PFAXFHA&data=02|01||69cc79c7089441aec86108d82e831d30|84df9e7fe9f640afb435aaaaaaaaaaaa|1|0|637310487942237073&sdata=kk4Gw8C9dUzBcGfzTcePxwc6wlSHAiX4i9RpHGDWLac%3D&reserved=0.


text:
Typo "Azure blob storage"→"Azure Blob Storage"

https://docs.microsoft.com/en-us/azure/databox/data-box-limits

@hyoshioka0128 : Thanks for your contribution! The author(s) have been notified to review your proposed change.

@hyoshioka0128 : Thanks for your contribution! The author(s) have been notified to review your proposed change.

The change aligns with current guidance in the internal cloud style guide; merging.

The change aligns with current guidance in the internal cloud style guide; merging.


text:
Clarifying Individual vs multiple cert requirement

Clarifying Individual vs multiple cert requirements

#sign-off

authors: PPacentMSFT jeffgilb


text:
Link to actual latest ntttcp release

The link to download ntttcp points to what was the latest release at the time, but fixes have been made to ntttcp since then. Use github's special "latest" link so that the link doesn't become stale.
There is also an irrelevant link to the toplevel github page, which I'm sure people will be able to find from the release page if they are interested. I've removed it.

@maolson-msft : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#label:"aq-pr-triaged"

#sign-off

Due to the upcoming Ignite conference, all merging and publishing is on hold until the morning of October 12.
This PR is ready for merge on 10/12.

authors: PRMerger9 jborsecnik ktoliver maolson-msft steveesp


text:
CLI command had an incorrectly cased parameter

The az cli command should be publisherName not publishername. A straight copy/paste doesn't work correctly.

@DustinEwers : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#label:"aq-pr-triaged"

authors: DustinEwers Jak-MS PRMerger17


text:
Adding CA rbac info

Same as in the non preview page, we had to add new RBAC to control access to CA data as a response to an MSRC security issue

@besiler : Thanks for your contribution! The author(s) have been notified to review your proposed change.

@markusvi
Can you review the proposed changes? IMPORTANT: When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.
#label:"aq-pr-triaged"

@shlipsey3 can you add this on your side since it's so stale? Then we can just close this one.

reassign:shlipsey3

#reassign:@shlipsey3

For whoever picks this up - I'm about to sign off, but this is a stale PR so was started before I was added to this content group. Please let me know if there's anything needed to resolve the changes.

#sign-off

#please-close


text:
Update azure-stack-sql-resource-provider-2-0-13.md

support for 2306 declaration missing

@yang-git-editor,
Can you review the proposed changes?
When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.
#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

repo: MicrosoftDocs/azure-stack-docs


text:
Create Node V3V4 migration walkthrough examle similar to Dotnet

We need a sample walkthrough parallel to the dotnet walkthrough example
Reference
Dotnet Example

This is live now.

authors: JonathanFingold scheyal

repo: MicrosoftDocs/bot-docs


text:
No HTML title attribute on https://dev.botframework.com/

The page renders with title "https://dev.botframework.com/" as the title

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 1217f5b5-6736-e72c-c420-773fc968aff3
Version Independent ID: 3a139655-6959-d8fd-a982-fe527db4d04a
Content: Additional support resources for the Bot Framework - Bot Service
Content Source: articles/bot-service-resources-links-help.md
Service: bot-service
GitHub Login: @RobStand
Microsoft Alias: kamrani

This appears to be fixed. Thanks!