text:
ALLUSER=1

Hi, in "VDI Installation" point number 2 you have this command line:
msiexec /i <path_to_msi> /l*v <install_logfile_name> ALLUSERS=1
This should be ALLUSER instead of ALLUSERS
msiexec /i <path_to_msi> /l*v <install_logfile_name> ALLUSER=1
You also refer to this page, and that one mentions the right command:
https://docs.microsoft.com/en-us/MicrosoftTeams/teams-for-vdi

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: b2f71d9c-6b35-72c9-dd94-7f62319c1656
Version Independent ID: 86172986-6cc8-eee5-1309-704d9de0dcd0
Content: Install Microsoft Teams using MSI via SCCM
Content Source: Teams/msi-deployment.md
Service: msteams
GitHub Login: @LanaChin
Microsoft Alias: v-lanac

@denniskn @ Thank you for submitting feedback and contributing to the docs. We are currently investigating this.

@officedocsbot assign @scanum

@denniskn Thank you for reaching out and helping improve MS Docs.  I've just had a look at the article and it is currently reading ALLUSER=1. Please let me know if it's reading correctly on your side as well now.

Yes it's OK now. Thank you!

authors: denniskn lindspea scanum


text:
GA, preview, test, do we have mess...? And support?

Hi,
On the page you say:

Teams PowerShell is available on PowerShell Gallery in two release types.
General Availability (GA)
Public Preview

How do I know what version is GA? Currently it looks that 1.1.4 GA and 1.1.3 is in preview?? Which sounds strange. How previous version could be in preview? :)
Then you do have tests available as well? Current test version is 1.0.25.
How shall we understood the differences on these versions?
GA is obviously which is supported to be run on production tenant, but how about preview versions? So far, I have understood that "test versions" should not be used in production?
Is there differences between EULA on GA and public previews versions?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: e5720e37-e8dd-1e3e-ccfa-cf4db31e8cff
Version Independent ID: 93a36eb2-3554-0e86-e787-759eaaafe5e1
Content: Microsoft Teams PowerShell Overview - Microsoft Teams
Content Source: Teams/teams-powershell-overview.md
Service: msteams
GitHub Login: @brandber
Microsoft Alias: brandber

@Petri-X Thank you for submitting feedback.
I think the best way forward is if you open a service ticket in your tenant so this can get resolved ASAP. Based on the outcome let me know if it is something that can be called out in the docs.
Please follow this link to contact support for business products:https://docs.microsoft.com/office365/admin/contact-support-for-business-products
Please keep us posted here on the resolution so we can feed whatever information you discover into the content.

@scanum
That is a bit unexpected answer  :)
So basically you are asking me to pay money to Microsoft to get answer for these fundamental questions, and then ask me to give the answer back to Microsoft so that you could use the answer for improving Microsoft's own documentation.
I'm not sure why I must pay on this?
In my mind, it would be much more fair if Microsoft pays all of us who are doing reviews (by free) for these documents.

Hi @Petri-X ,
Thanks for taking the time to submit your feedback regarding several aspects of our updated PowerShell documentation. As the author of this content, I understand your points and will work on updates to address.
Thanks again for taking the time to share your feedback with us!!

source: gharchive/issue

authors: Petri-X brandber scanum

license_type: permissive

license_source: github-api


text:
Page is not clear about Firefox support

This document is not fully clear on Firefox support, or lack thereof! There are two issues.... the lack of support for Firefox itself, which appears to be arbitary, rather than technological in basis.... and then how this document reports the support (or lack thereof).
Firstly the lack of support for Firefox itself, (which is noted in the browser list for Firefox on this page, as being "not supported"). It appears that Mozilla have fixed all the issues middle of last year, and if you tell your Firefox browser to pretend to be Edge in the user agent string, then everything works properly including video calls. So reporting this as "unsupported" appears to be based not on technological limitations, which seems to be an odd choice... (given that encouraging ease of call and meeting attendance without download, must surely reduce barriers to takeup of the product, and encourage more to use it). Can we reduce this arbitary limitation, and start supporting Firefox now, since it clearly already just works! There is even Firefox add-on to change user agent for you, but not practical to tell non-techy users to download add-ons or plugins.... (or Teams clients for that matter!).... just to join one call!
Here's the Add-on that pretends to be Edge to makes Teams work in Firefox browser:
https://addons.mozilla.org/en-US/firefox/addon/teams-phone-fix/
In terms of the feedback on this page itself, we noted that this page, in the browser table, lists Firefox browser as "not supported", yet lower down the page we have a purple box which appears to contradict that, by saying:
Note As long as an operating system can run the supported browser, Teams is supported on desktop computers. For example, running Firefox on the Linux operating system is an option for using Teams.
This infers that Firefox is a supported browser, and is therefore a way to run Teams on Linux... however, this is clearly not what the browser list says higher up the page.
Would be great to get Firefox officially supported for all Teams meeting and call features alongside the other main browsers (especially since it seems to already work just fine!). But until then, this page might need tidying up (especially in the purple box) to better reflect the current situation.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 0c86f401-cff4-93b3-ff69-b9787a87e644
Version Independent ID: c0808bd3-cf63-0625-4c3c-65469c26fb3e
Content: Get clients for Microsoft Teams - Microsoft Teams
Content Source: Teams/get-clients.md
Service: msteams
GitHub Login: @dstrome
Microsoft Alias: dstrome

Thank you for submitting feedback and contributing to the docs. We are currently investigating this.

Thank you for submitting feedback. We understand that this issue has been resolved.
Please feel free to re-open this issue if there is a specific area of the docs that we can improve or make better. Thank you.

authors: dariomws emardee scanum


text:
Update direct-routing-connect-the-sbc.md

Adding subdomain clarification, as this issue can be prevalent for customers whom rely on a large number of subdomains.

@JohanFreelancer9 Copy editing is needed for this PR. Thanks.

@JohanFreelancer9 Copy editing is needed for this PR. Thanks.

@CarolynRowe PR has been copyedited and is ready for final review, could you please check and merge? Thanks!

source: gharchive/pull-request

authors: cowitkow scanum


text:
Small updates to design-a-hierarchy-of-sites.md

Removed note tag, fixed broken link.

Thank you @ipv89 for finding and fixing these issues. Unfortunately for your contribution, I've already addressed them in our 1806 content, which is staged to release soon. So I'm closing this pull request to avoid merge conflicts. I look forward to seeing your next contribution on SCCMDocs! :)

repo: MicrosoftDocs/SCCMdocs


text:
Add documentation for the map chart OM

I think there are supposed to be headers on the new files here, but I can't find the documentation for how to generate them. Please advise.

Docs Build status updates of commit 17f92b0:
:x: Validation status: errors
Please follow instructions here which may help to resolve issue.

File
Status
Preview URL
Details

:x:Error

Details

[Error] Run script failed with no detailed information. Please retry building your content again. If the issue still happens, open a ticket in http://SiteHelp and include the error report for our team to troubleshoot

For more details, please refer to the build report.
Note: If you changed an existing file name or deleted a file, broken links in other files to the deleted or renamed file are listed only in the full build report.

@SudoNhim You can copy and paste header info from other markdown files in this repo or find more information in the contributor guide. Thanks for taking the time to update! Please add header metadata and make sure you get a build with no errors then I can merge this PR.

Docs Build status updates of commit 7f8ee44:
:white_check_mark: Validation status: passed

File
Status
Preview URL
Details

api/Excel(enumerations).md
:white_check_mark:Succeeded
View

api/Excel.Series(object).md
:white_check_mark:Succeeded
View

api/Excel.Series.GeoMappingLevel.md
:white_check_mark:Succeeded
View

api/Excel.Series.GeoProjectionType.md
:white_check_mark:Succeeded
View

api/Excel.Series.RegionLabelOptions.md
:white_check_mark:Succeeded
View

api/Excel.XlChartType.md
:white_check_mark:Succeeded
View

api/Excel.XlGeoMappingLevel.md
:white_check_mark:Succeeded
View

api/Excel.XlGeoProjectionType.md
:white_check_mark:Succeeded
View

api/Excel.XlRegionLabelOptions.md
:white_check_mark:Succeeded
View

api/TOC.md
:white_check_mark:Succeeded
View

For more details, please refer to the build report.
Note: If you changed an existing file name or deleted a file, broken links in other files to the deleted or renamed file are listed only in the full build report.

repo: MicrosoftDocs/VBA-Docs


text:
WebView on Windows Server 2016

I am trying to run the WebView control based project on Window Server 2016 but i don't find any resource with Prerequisites for Windows Server 2016

The FAQs on the WebView page address this: Is WebViewControl available on Windows Server?
Short answer: using the WebView on Windows Server is not supported and that's why there aren't any resources for it.

Closing this issue now since the answer has been provided with the link.

authors: Kyaa-dost mrlacey rmodiiclosings


text:
Clarification on how the 5,000 credit are applied

It's not clear if the 5,000 credit included in the per user plan are usable by the organization or only by the user. I receive questions from customers asking if it's applied to the tenant level or user level. I validated with Cedrick that it's at the tenant level and will suggest we update the documentation to reflect this.

@sboulanger86 - Thanks for contacting us. As this issue concerns an understanding/clarification of licensing guidance, it isn't something that we should add to the documentation. Please see https://go.microsoft.com/fwlink/?linkid=2085130, page 9, "Power Automate per user with attended RPA plan", Notes section. It says, "AI Builder service credit capacity is pooled at the tenant level".
For licensing issues, please contact Sales at the bottom of this pricing page: https://powerautomate.microsoft.com/en-us/pricing/. Closing this issue.
cc: @CedrickBellarosa

repo: MicrosoftDocs/ai-builder


text:
Centralized App secrets

The page states that for a key vault:

To use these scenarios, the sign-in identity must [...] have explicit access policies for retrieving the secrets in Azure Key Vault.

I didn't test it yet, though I would expect the new (in preview) KeyVault roles?
Eg:

Key Vault Crypto User : can perform cryptographic operations on keys and certificates.
Key Vault Secrets User : can read secret contents.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 336f0bcf-8699-ed68-82e6-e0b2ee103680
Version Independent ID: eaa88128-433a-09eb-7ff8-0b65e3f6afb6
Content: Centralized app configuration and security - Azure Solution Ideas
Content Source: docs/solution-ideas/articles/appconfig-key-vault.md
Service: architecture-center
Sub-service: solution-idea
GitHub Login: @sowmyans
Microsoft Alias: pnp

Thanks for reporting - this issue is under review.  This is a Microsoft Internal DevOps Bug ID AB#267956

Yup, I would expect the same as well.  If the application identity exists within an access policy or associated with an Azure RBAC role that grants secret list/read access, you should be good to go.  The client's HTTP request for this information is the same either way, this is a server-side resolution concern.
As with anything preview, ensure you are testing in a non-production environment.
I wouldn't go with a Built-in role more permissive than Key Vault Reader (Preview) though, since it doesn't need the access, at least from the Azure App Configuration service perspective, more than that -- and make sure that permission is scoped to just the resource(s) needed.
Thanks for reaching out @Styxxy.  Have a good day.

authors: Styxxy absheik ckittel

repo: MicrosoftDocs/architecture-center


text:
Error in Defender exclusion PowerShell script

In the PowerShell for Defender exclusions, this line has an extra line break, which causes a syntax error. Also, the variable is not used in the script. Please correct it:
  $StorageAcct = "
  storageacct"  # Storage Account Name

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 6386653c-9f82-1ea7-8f29-377be4e5e3b7
Version Independent ID: a5db2b47-afaf-5917-40cd-740168cad8b6
Content: FSLogix for the enterprise - Azure Architecture Guide
Content Source: docs/example-scenario/wvd/windows-virtual-desktop-fslogix.yml
Service: architecture-center
Sub-service: azure-guide
GitHub Login: @christiaanbrinkhoff
Microsoft Alias: pnp

Thanks for reporting - this issue is under review. This is a Microsoft Internal DevOps Bug ID # 527348

@JLambEJG Thank you for catching that error in the docs! I have submitted a PR to fix the issue, the change is merged internally and will go-live in the public docs shortly.


text:
Update devsecops-in-azure-content.md

Contributors formatting.

Learn Build status updates of commit f732e82:
:white_check_mark: Validation status: passed

File
Status
Preview URL
Details

docs/solution-ideas/articles/devsecops-in-azure-content.md
:white_check_mark:Succeeded

For more details, please refer to the build report.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
For any questions, please:Try searching the learn.microsoft.com contributor guidesPost your question in the Learn support channel


text:
App not running because of dependencies

Thank you for the post, it was very well detailed and simple to follow.
However I have a problem, the app is not running.

I went through the issues and set my SCM_DO_BUILD_DURING_DEPLOYMENT = false as instructed.
I tried installing the requirements through my requirements.txt file however a particular library PyODBC needs an ODBC driver to work. Is there a way to put an instruction in the requirements file for ODBC to also be installed? Particularly these 3 commands
"a)apt-get update
b)apt-get install g++
c) apt-get install unixodbc-dev"
When trying to install them through the bash cloud shell I got an error stating below
"E: Could not open lock file /var/lib/dpkg/lock-frontend - open (13: Permission denied)
E: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), are you root?"
without these installations my requirements.txt file might not run.
How can I solve this please been on it for over 3 days.
Article Url: https://docs.microsoft.com/en-us/azure/devops/pipelines/ecosystems/python-webapp?view=azure-devops

Thanks for your question. It looks like you're working through an issue with your scenario or implementation, rather than an issue with the documentation. Here are a couple of options where you might consider asking your question:

Azure DevOps Support Bot
Azure DevOps on Stack Overflow

cc @kraigb for awareness

repo: MicrosoftDocs/azure-devops-docs


text:
Update ci-triggers1.md

Update tips about wildcard use cases according to latest release notes regarding wildcards in trigger paths: https://docs.microsoft.com/en-us/azure/devops/release-notes/2021/sprint-192-update#support-for-wild-cards-in-path-filters

@PavloAndriiesh : Thanks for your contribution! The author(s) have been notified to review your proposed change.


text:
Fix phrasing in what-is-azure-devops.md

The current phrasing looks like either a typo or wrong phrasing. Specifically, "support teams" aren't the main target audience of Azure DevOps as far as I can tell.

@johananl : Thanks for your contribution! The author(s) have been notified to review your proposed change.

@johananl : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#label:"aq-pr-triaged"

#sign-off


text:
Should document that fetchDepth defaults to 0

There was a recent change to update the default of the fetchDepth to 0. This broke some pipelines for customers that depended on fetching the entire repository for evaluation bu tools like gitversion. The default should be documented here.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: b28abf7f-ecdf-8037-acd9-722690424372
Version Independent ID: b28abf7f-ecdf-8037-acd9-722690424372
Content: steps.checkout definition
Content Source: content/steps-checkout.md
Product: devops
Technology: devops-cicd
GitHub Login: @steved0x
Microsoft Alias: sdanie

This has been added to the documentation and should be live shortly.
https://learn.microsoft.com/en-us/azure/devops/pipelines/yaml-schema/steps-checkout?view=azure-pipelines#remarks
https://learn.microsoft.com/en-us/azure/devops/pipelines/repos/azure-repos-git?view=azure-devops&tabs=yaml#shallow-fetch
Thank you for letting us know.

repo: MicrosoftDocs/azure-devops-yaml-schema


text:
Typo 'cul' instead of 'curl'

Typo in page.
'cul' instead of 'curl'

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: e7895b9a-9a6a-cd98-6947-0e4a26eda9a3
Version Independent ID: a3f27295-3e2e-a36d-02c2-8897295fc443
Content: Install the Azure CLI for Linux manually
Content Source: docs-ref-conceptual/install-azure-cli-linux.md
Service: azure-cli
GitHub Login: @dbradish-microsoft
Microsoft Alias: dbradish

@awkto Thanks for the feedback. We shall evaluate and update the document as appropriate.

@awkto Thanks for bringing this to our attention. I have submitted a PR to fix the issue that's in review. The changes should reflect shortly after it is merged.
We will now proceed to close this thread, but if there are any further questions regarding the documentation, please tag me in your reply and we will be happy to continue the conversation.

authors: BhargaviAnnadevara-MSFT awkto

repo: MicrosoftDocs/azure-docs-cli


text:
Availability of backup items in the paired region after enabling the Cross Region Restore feature

[Enter feedback here]
Please clarify why it might take up to 48 hours for the backup items to be available in secondary regions, when one enables the cross-region restore feature of a Recovery Services Vault. In the same paragraph, it says "Currently, secondary region RPO is 36 hours. This is because the RPO in the primary region is 24 hours and can take up to 12 hours to replicate the backup data from the primary to the secondary region." Why does it take an additional 12 hours to make the backups in the secondary region available for a restore?

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 69268ae4-6370-b8f1-bcca-cd5e03cb4495
Version Independent ID: 1407e54c-5913-da1d-823c-7be7d39dcfda
Content: Create and configure Recovery Services vaults - Azure Backup
Content Source: articles/backup/backup-create-recovery-services-vault.md
Service: backup
GitHub Login: @v-amallick
Microsoft Alias: v-amallick

@yertaylan67
Thanks for your feedback! We will investigate and update as appropriate.

@yertaylan67 There could be a number of reasons why it might take an additional 12 hours to make the backups in a secondary region available for a restore. Some possible reasons could include:
Data transfer time: It could take some time to transfer the data from the primary region to the secondary region, especially if the regions are far apart geographically.
Data replication time: The data in the secondary region may need to be replicated across multiple availability zones or data centers to ensure durability and availability. This replication process could take some time to complete.
Data verification: The data in the secondary region may need to be verified to ensure that it is complete and consistent. This process could take some time to complete.
Data recovery process: Restoring data from a backup in a secondary region may involve a more complex process than restoring from a local backup. This process could take some time to complete.
Ultimately, the specific reason for the additional 12-hour delay will depend on the specific backup and recovery system being used and the specific processes and procedures that are in place.

@SwathiDhanwada-MSFT  thanks a lot for the quick response. All valid points that you listed, but data transfer, replication and verification times should all be covered by the secondary region RPO of 36 hours, as described in the article. Data recovery process and time is more about the RTO and not RPO. Why we need additional 12 hours in case of an active Cross Region Restore feature on top of the initial 36 hours is still not clear to me.

@yertaylan67 RPO for primary region is 24 hours and to replicate this data to secondary region, it can take upto 12 hours. So, the total time taken for data available in secondary region is 36 hours. The statement does not mean it takes additional 12 hours on top of 36 hours.
In short, data will be available in both primary and secondary regions takes from 24hours to 36 hours.
As there are no further documentation changes, we will close the issue for now. If you have additional questions, please revert and I will be happy to assist you.

@SwathiDhanwada-MSFT please check the following statement in the same article "After you opt in, it might take up to 48 hours for the backup items to be available in secondary regions." I just wanted to know where those 48 hours (=additional 12 hours) come from although the maximum RPO for the data in the secondary region is 36 hours.

repo: MicrosoftDocs/azure-docs


text:
Source repeats itself

Hello,
please check this sentence in the Information box: "Azure Monitor managed service for Prometheus requires an Azure Monitor workspace to support Azure Monitor managed service for Prometheus."
It seems to repeat itself.
Kind regards,
Anne H., QC

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 67132248-4b0e-eb52-8dc8-3d3ff717d53c
Version Independent ID: dddc69ef-5517-54f3-ee75-c0dbd946fe60
Content: Monitor Kubernetes clusters using Azure services and cloud native tools - Azure Monitor
Content Source: articles/azure-monitor/containers/monitor-kubernetes.md
Service: azure-monitor
Sub-service: containers
GitHub Login: @bwren
Microsoft Alias: bwren

@QueryCoordinator Thanks for the feedback! I have fixed the referenced change, and the change should reflect on the doc within 24 hours.We will now proceed to close this thread. If there are further questions regarding this matter, please revert and we will gladly continue the discussion.

authors: QueryCoordinator SwathiDhanwada-MSFT


text:
JavaScript code sample uses archived dependency for token validation

[Enter feedback here]
The JavaScript section for single-page web apps includes a link for "Call Node.js web API". The referenced tutorial uses the "passport-azure-ad" library for validating tokens and protecting the API. That library appears to be deprecated and is no longer receiving even critical security updates. The tutorial needs to be updated to either not rely on an external dependency, or to at least use external dependencies that are not archived.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: b90331e5-cca5-b157-eaa1-6f8f90003b32
Version Independent ID: 4b1b803d-e30d-10b2-90a1-3f0ccd8d7d44
Content: Code samples for Microsoft identity platform authentication and authorization - Microsoft Entra
Content Source: articles/active-directory/develop/sample-v2-code.md
Service: active-directory
Sub-service: develop
GitHub Login: @OwenRichards1
Microsoft Alias: owenrichards

@samschurter
Thanks for your feedback! We will investigate and update as appropriate.

@samschurter
Thanks for bringing this to our attention.
I'm going to assign this to the document author so they can take a look at it accordingly
@OwenRichards1
Can you please check and add your comments on this doc update request as applicable.

@samschurterThanks for your feedback - this repo is currently undergoing a migration. I am required to close this issue, although it has been assigned in product backlog and will be addressed when migration is complete.

#please-close

authors: ManoharLakkoju-MSFT OwenRichards1 RamanathanChinnappan-MSFT samschurter


text:
Defender for App Service is misleading

We say "A supported App Service plan associated with dedicated machines. Supported plans are listed in Availability."
Then, in the Availability section we include also the Free plan that, as far as I know, has nothing to do with a dedicated machine.
This has been confirmed to be misleading by PG on ICM 415646809.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 04416a52-f2e8-105d-1115-6c5c31279470
Version Independent ID: 07629d50-c6dd-5eff-1c80-9afb5de53e15
Content: Microsoft Defender for App Service - the benefits and features - Microsoft Defender for Cloud
Content Source: articles/defender-for-cloud/defender-for-app-service-introduction.md
Service: defender-for-cloud
GitHub Login: @dcurwin
Microsoft Alias: dacurwin

@garis
Thanks for your feedback! We will investigate and update as appropriate.

#reassign:elazark

#label:"backlog-item-created"

Thank you for your comment. We'll investigate and get back to you.

@garis the relevant parties are looking in to this and should have a response soon.

#reassign:alizabernstein

@garis Per the PM, the clarification is that all plans except for dynamic functions are supported. This isn't a documentation issue and requires further investigation. The best way to get help is to open a support ticket.
#please-close

@AlizaBernstein - this issue is an outome of an Azure ticket - the issue was submitted by the support engineer as a condition for the closure of the Azure ticket.

@garis, Please reach out internally with us and the product team on this.

authors: AlizaBernstein ElazarK ManoharLakkoju-MSFT garis marcindulak rayne-wiselman


text:
Additional RTT Data Chart

Hi!
In the Additional RTT Data Chart, at first glance it is not clear what the source/destination region is. I would suggest adding labels for the source and destination regions in the chart. It would be super helpful!
Thanks!

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 311b6efb-2d93-6130-96a9-867fad56bd52
Version Independent ID: a17faabf-04c6-c3da-9a37-a86b0d00cbfd
Content: Azure network round-trip latency statistics
Content Source: articles/networking/azure-network-latency.md
Service: virtual-network
GitHub Login: @mbender-ms
Microsoft Alias: mbender

@brethompson309
Thanks for your feedback! We will investigate and update as appropriate.

@brethompson309
Thank you for bringing this to our attention.
I've delegated this to content author @mbender-ms who will review it and offer their insightful opinions.

Thanks for the feedback @brethompson309.
In the intro of the article, we explain the layout of the table. It states the first row is the source region.
For readability, each table is split into tabs for groups of Azure regions. The tabs are organized by regions, and then by source region in the first column of each table. For example, the East US tab also shows the latency from all source regions to the two East US regions: East US and East US 2.
I'll see if I can make the chart clearer within the constraints of our platform.

Thank you @mbender-ms!

Added issue to backlog work item for latency article.
Currently working on updates and engineering comms.
#please-close

authors: ManoharLakkoju-MSFT Naveenommi-MSFT brethompson309 mbender-ms


text:
How is the "sub" claim value derived?

How is the "sub" claim value derived?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 2906fe9e-319d-3625-441d-d28c9251b450
Version Independent ID: 168fde63-9b86-41a9-f1cc-7b5a0e2e5d7a
Content: Learn about the different token and claim types supported by Azure AD
Content Source: articles/active-directory/develop/v1-id-and-access-tokens.md
Service: active-directory
GitHub Login: @CelesteDG
Microsoft Alias: celested

Is it derived based on AD attribute objectGUID or something else? If not where is the value persisted for this in ADFS

Hello @vinitkhera - Thank you for your question. The sub claim is the is the hash of client ID + anchor claim value. To learn more, see this topic: https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/overview/ad-fs-faq#developer
Thank you.

What's the hash algorithm used (SHA256 ?) and how can I generate myself a similar value based on client id and anchor claim. I tried few examples with SHA256 alg but wasn't able to match ADFS generated sub claim. The documentation link doesn't have the details.
Regards,
Vinit Khera
-------- Original message --------
From: Celeste de Guzman notifications@github.com
Date: 10/4/18 14:23 (GMT-08:00)
To: MicrosoftDocs/azure-docs azure-docs@noreply.github.com
Cc: vinitkhera vinitkhera90@hotmail.com, Mention mention@noreply.github.com
Subject: Re: [MicrosoftDocs/azure-docs] How is the "sub" claim value derived? (#16150)
@vinitkherahttps://github.com/vinitkhera - Please let us know if the provided response answers your question. Thank you.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://github.com/MicrosoftDocs/azure-docs/issues/16150#issuecomment-427174271, or mute the threadhttps://github.com/notifications/unsubscribe-auth/ASzeuJI7iRqvBTv-BGjf62yfbsKBme0wks5uhnxagaJpZM4XHA-X.

Thank you, @vinitkhera - I'm adding my colleague, @billmath who would be better able to help answer your questions.

I have been investigating this myself, and what I have determined is that the client id is prepended to the anchor value (which, in my deployment, is the Windows account name), this is converted to a byte array using little endian, and appended to this byte array is a PPID Privacy Entropy byte array.  This resulting byte is then processed with SHA256, and encoded with base64.  However, while searching for nearly all day, I was unable to figure out where this PPID Privacy Entropy exists or from what it is derived.

@MohitGargMSFT - Please reassign the issue to @billmath so that it shows up on his radar. Thank you.

With some more searching, I was able to find xml data in the adfs configuration database, in the IdentityServerPolicy.ServiceSettings table.  At the node /ServiceSettingsData/SecurityTokenService/PpidPrivacyEntropy is a base64 encoded value.  When taking a byte array of UTF-16LE of the client id, appending the byte array of UTF-16LE of the anchor value, and finally appending the byte array of the PpidPrivacyEntropy, performing a SHA256 hash of said byte array, and finally converting the resulting byte array to base 64, it will be identical to the sub value generated for that client.
I do not believe this is a proper answer, as it relies on reading large XML data directly from the database, and it feels like an implementation detail.  I would like to believe that there is a more correct way of pulling this information rather than direct access to the database.  However, if you are either needing to satisfy your curiosity, or you are needing this for some one time process such as a one time data migration, the method I outlined should work.

Thanks
This was helpful.
-------- Original message --------
From: TheJayMann notifications@github.com
Date: 10/11/18 09:42 (GMT-08:00)
To: MicrosoftDocs/azure-docs azure-docs@noreply.github.com
Cc: vinitkhera vinitkhera90@hotmail.com, Mention mention@noreply.github.com
Subject: Re: [MicrosoftDocs/azure-docs] How is the "sub" claim value derived? (#16150)
With some more searching, I was able to find xml data in the adfs configuration database, in the IdentityServerPolicy.ServiceSettings table. At the node /ServiceSettingsData/SecurityTokenService/PpidPrivacyEntropy is a base64 encoded value. When taking a byte array of UTF-16LE of the client id, appending the byte array of UTF-16LE of the anchor value, and finally appending the byte array of the PpidPrivacyEntropy, performing a SHA256 hash of said byte array, and finally converting the resulting byte array to base 64, it will be identical to the sub value generated for that client.
I do not believe this is a proper answer, as it relies on reading large XML data directly from the database, and it feels like an implementation detail. I would like to believe that there is a more correct way of pulling this information rather than direct access to the database. However, if you are either needing to satisfy your curiosity, or you are needing this for some one time process such as a one time data migration, the method I outlined should work.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://github.com/MicrosoftDocs/azure-docs/issues/16150#issuecomment-429028832, or mute the threadhttps://github.com/notifications/unsubscribe-auth/ASzeuM5fxSZlYe-CX8wFj3avmg20YGqhks5uj3TugaJpZM4XHA-X.

I have not heard back from engineering yet.  At this point I am going to open up a work item for this so that we can investigate this further.
#please-close

Is there a chance to add "sub" claim in the access token in ADFS as Azure AD does?

authors: CelesteDG TheJayMann alsanma billmath vinitkhera


text:
Name of the page?

The VS tool is called "Azure Data Lake and Stream Analytics Tools" and it's "More Information" link is directed here. I think it would be helpful for new users if this page should reflect the fact that it's not all about Data Lake.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 6210b41f-15f2-45cd-774a-4cab95bce57c
Version Independent ID: 0305886f-77d4-86f0-5a1d-75de82b0d342
Content: Get started with Azure Data Lake Analytics using Visual Studio
Content Source: articles/data-lake-analytics/data-lake-analytics-data-lake-tools-get-started.md
Service: data-lake-analytics
GitHub Login: @saveenr
Microsoft Alias: saveenr

@kamigash Thanks for the feedback! We are currently investigating and will update you shortly.

@saveenr could you take at look at this?

@kamigash Thanks for the feedback. I have updated the article and it should go out tomorrow morning (Redmond time) at the latest.  The Stream Analytics docs are separated at this point, and its hard to change the More Info links, so I did what I could do to make it clearer.
The Stream Analytics docs are over here:
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-tools-for-visual-studio-install
Thanks, Jason

authors: JasonWHowell jason-j-MSFT kamigash


text:
Which Azure services get access to the SSIS IR because of the 'Allow Azure Services Access'

When creating a SSIS Integration Runtime the tick box for 'Allow Azure Services Access' can't be unchecked. So what Azure services are included here? Does this allow a VM or a WebApp in Azure from another subscription (another Azure customer) also access?
Kind regards,
Dennis

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 92818fbb-9c13-edc7-60e2-e104b0851585
Version Independent ID: d93ea6f4-c11a-95ae-d23f-51dc7e31f7fe
Content: Create Azure-SSIS Integration Runtime in Azure Data Factory
Content Source: articles/data-factory/create-azure-ssis-integration-runtime.md
Service: data-factory
GitHub Login: @swinarko
Microsoft Alias: sawinark

To be more specific, when provisioning Azure-SSIS IR, the "Allow Azure services to access
" checkbox on the SQL Settings blade is to allow SSIS IR itself to access your Azure SQL DB, so it can create/manage SSISDB on your behalf.  You can remove that checkbox by configuring your Azure SQL DB w/ VNet service endpoints and joining your SSIS IR to the same VNet/subnet.

authors: Nimleth swinarko


text:
Lots of "Undefined symbols for architecture arm64" when building in Xcode

By following exactly the documentation here, after clicking "Build" in Xcode, the following Buildtime errors occur:
Undefined symbols for architecture arm64:
"OBJC_CLASS$_ARObjectScanningConfiguration", referenced from:
objc-class-ref in ARKitNativeObjectDetection.o
"OBJC_CLASS$_AREnvironmentProbeAnchor", referenced from:
objc-class-ref in ARSessionNative.o
objc-class-ref in AREnvironmentProbe.o
"OBJC_CLASS$_AROrientationTrackingConfiguration", referenced from:
objc-class-ref in ARSessionNative.o
"OBJC_CLASS$_ARWorldTrackingConfiguration", referenced from:
objc-class-ref in ARSessionNative.o
"OBJC_CLASS$_ARImageAnchor", referenced from:
objc-class-ref in ARSessionNative.o
"OBJC_CLASS$_ARSession", referenced from:
objc-class-ref in ARSessionNative.o
"OBJC_CLASS$_ARReferenceObject", referenced from:
objc-class-ref in ARWorldMap.o
objc-class-ref in ARSessionNative.o
objc-class-ref in AREnvironmentProbe.o
objc-class-ref in ARKitNativeObjectDetection.o
"_ssc_get_error_details", referenced from:
_NativeLibrary_ssc_get_error_details_m1D0CB3B71927A18E6B7A00CDF2DF071DB5970C69 in Assembly-CSharp.o
(maybe you meant: _NativeLibrary_ssc_get_error_details_m1D0CB3B71927A18E6B7A00CDF2DF071DB5970C69)
"_ssc_near_anchor_criteria_create", referenced from:
_NativeLibrary_ssc_near_anchor_criteria_create_m5DB31872248D53FC51782BB1374EBC9DD51AB074 in Assembly-CSharp.o
_NearAnchorCriteria__ctor_mAF01DEF96672EA4191A2AE9C2824E2DBF6245C3E in Assembly-CSharp.o
(maybe you meant: _NativeLibrary_ssc_near_anchor_criteria_create_m5DB31872248D53FC51782BB1374EBC9DD51AB074)
"_ssc_near_anchor_criteria_set_distance_in_meters", referenced from:
_NativeLibrary_ssc_near_anchor_criteria_set_distance_in_meters_mE933C601DB873A630ACE4AFE74BC48A448D04A65 in Assembly-CSharp.o
... it goes long way with the errors above.
Is there any missing libraries or trick in Xcode to build this App to an iPhone 8 device?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 42599e6f-3abc-e5c3-fdb7-f59b68cf2b6e
Version Independent ID: 4f3b38e7-1ac0-569c-b1ba-13c0e2c4df3f
Content: Quickstart - Create a Unity iOS app with Azure Spatial Anchors
Content Source: articles/spatial-anchors/quickstarts/get-started-unity-ios.md
Service: azure-spatial-anchors
GitHub Login: @craigktreasure
Microsoft Alias: crtreasu

Thanks for the feedback! We are currently investigating and will update you shortly.

@marcelohsilva Are you still facing this issue? Did you installed cocoapods as described in the tutorial? Also are you opening the project in Xcode by opening the .xcodeproj file instead of the .xcworkspace file?

@marcelohsilva Do you have any updates?

@marcelohsilva Do you have any updates?

Hello Alberto, I figured out I'm using a Beta version of Unity. I'll give it a new try tonight with the official 2019.1 version.
Please, feel free to close this topic as Unity Beta version does not apply in this context.
Thanks for the feedback.

@marcelohsilva Our current recommendation is to stick with Unity 2018.3, as stated in the guide, until we officially support Unity 2019.

Hi @marcelohsilva I am glad to hear that you figured out the issue? @craigktreasure Thanks for the help. We will now proceed to close this issue

I'm experiencing this same issue when building MixedReality-SpectatorView with ASA support. I have been using our platform switcher that seems to configure things correctly when ASA is removed from the project:
https://github.com/microsoft/MixedReality-SpectatorView/blob/68874ae626d99bad80d1edf7d1fe236d2a297604/src/SpectatorView.Unity/Assets/SpectatorView.Editor/Scripts/PlatformSwitcherEditor.cs#L48
EditorUserBuildSettings.SwitchActiveBuildTarget(BuildTargetGroup.iOS, BuildTarget.iOS);
PlayerSettings.iOS.cameraUsageDescription = "Camera required for AR Foundation";
PlayerSettings.defaultInterfaceOrientation = UIOrientation.Portrait; // Currently needed based on Marker Visual logic
PlayerSettings.SetArchitecture(BuildTargetGroup.iOS, 1); // Set Architecture to ARM64
We are using commit 61a1e390cb09ab7544da9304460f5b88e331a3ef for ASA

I am using Unity 2018.3.6f1 and am building the ios app with il2cpp

Actually, it seems like ASA has some pod update steps that are missing from SpectatorView's documentation. Using the xcode workspace compared to the xcode project + running the pod install steps described in the ASA documentation seems to unblock.

Pod documentation where? @chrisfromwork

authors: Alberto-Vega-MSFT MicahMcKittrick-MSFT chrisfromwork craigktreasure marcelohsilva oyvind-soroy


text:
Confusing title

Since “Azure Web Apps” are a first-class product this page is titled poorly. This should use cloud services in the title instead, as it talks about cloud services not web apps.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 74cdb18f-aff3-4de9-455d-2107d5a00bc6
Version Independent ID: b266f482-0992-686b-091d-aa78c14a1025
Content: Using PowerShell to setup Application Insights in an Azure
Content Source: articles/azure-monitor/app/powershell-azure-diagnostics.md
Service: application-insights
GitHub Login: @mrbullwinkle
Microsoft Alias: mbullwin

Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.

@jlorich thank you for bringing this to our attention. The H1 has been updated for this article.

#please-close


text:
Sending sensor data through hardware gateway

Hi, What if I cannot add required properties to device's message? In my case, there's a single third party gateway device that collects telemetry from multiple sensors and sends it as a JSON array to configured endpoint. I cannot modify the message.
Is there a way to support this case without adding another gateway/web app or something between the existing gateway device and Digital Twins?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: ed7028fa-961b-c7da-212d-686ba8672130
Version Independent ID: 55d0fa05-72e8-47a0-660f-828fd0504e31
Content: Device connectivity and telemetry ingress with Azure Digital Twins
Content Source: articles/digital-twins/concepts-device-ingress.md
Service: digital-twins
GitHub Login: @alinamstanciu
Microsoft Alias: alinast

@xelossan Thanks for the feedback! We are currently investigating and will update you shortly.

No, the gateway has its own message format that cannot be modified without changing its firmware, which cannot be done without manufacturer's help.
The message looks like this:
{"d0f01843e9cd":{"Time":"7","Type":"Care T","Rssi":"-74","Name":"","Batt":"2.88","Alarms":"4","Temperature":"25.58"},"d0f01843e9cc":{"Time":"0","Type":"Care T","Rssi":"-89","Name":"","Batt":"3","Alarms":"0","Temperature":"9.60"}}
so actually it's not even a JSON array, but a dictionary, where the key is sensor's hardware ID.
I'm pretty sure that most of hardware gateways has some proprietary message formats that end users may not be able to modify, so the question is: is there a way (or any plans to add it in future) to somehow preprocess the telemetry message on Digital Twins service side before running matchers and UDFs, something like a special UDF that fires for every message and can modify it so it has a correct format and every required property.

Hi @xelossan - Thank you for your great question! First things first, you'll absolutely want to upgrade your firmware to the latest spec regardless. Many vendors supply important security updates along with new features.
To answer the question regarding format interoperability:
Presently, messages that are submitted to ADT must conform to the Message entity specified in the Azure IOT SDK. Specifically, Device Client Message which must be sent through the Device Client namespace. There are a variety of protocols supported (MQTT, HTTP) and JSON is one of the message formats you can use (providing quite a bit of flexibility). You can, for instance, specify the contents of a message using a Map and add filterable Properties (that are intercepted and can be used for routing).
However, even in those circumstances, you'd still want to serialize your message into the appropriate format. One way to accomplish that is to submit the Gateway's telemetry to an API where it can be serialized using custom code and then send that further downstream. In fact, you may find that useful even with an update to your firmware. On the other hand, it's probably easier to accomplish that using custom programming on your device itself.
PS - I will make sure to relay your observations surrounding format interoperability to the PM and Engineering teams. Thanks!

Thanks for your answer @KingdomOfEnds, in that case using additional API between the gateway and ADT is the way to go for us.
I've got one more question - where can I post issues related to ADT but not to any specific docs page? We've encountered some strange behavior: we have 4 sensors added to the same Device in ADT graph, and one of them is working correctly, but values from the rest are ignored with a message like: Ignoring telemetry received from Device Id '3b8449a8-4f88-454f-82dd-aca586afcea2' due to no identifiable Sensor Id. Sensor Hardware ID: [d0f01843e9cc].
But the sensor with this ID is defined:
{         "pollRate": 0,         "spaceId": "ab817e89-2e79-4077-a77e-01d8bc393ea5",         "deviceId": "3b8449a8-4f88-454f-82dd-aca586afcea2",         "id": "7d7f99af-93a3-4e1b-bc6b-94ffbe574624",         "portTypeId": 8,         "dataUnitTypeId": 38,         "dataTypeId": 18,         "dataSubtypeId": 5,         "typeId": 9,         "hardwareId": "d0f01843e9cc"     }

@xelossan For product feedback (feature requests or similar) you can find the link called "This Product" at the footer of each doc in Azure docs

Another good source for development questions is StackOverflow and also you could open a support ticket if you have access to a support plan?

@KingdomOfEnds Thanks for the help! @xelossan We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.


text:
'Multi-turn question example as shown in Excel' is missing

Please provide.

Document details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: bc39a5b4-4471-adb5-c92d-43e544687650
Version Independent ID: a657a76a-320f-d550-ebb8-ead2353fce06
Content: Importing from data sources - QnA Maker - Azure Cognitive Services
Content Source: articles/cognitive-services/QnAMaker/Concepts/knowledge-base.md
Service: cognitive-services
Sub-service: qna-maker
GitHub Login: @diberry
Microsoft Alias: diberry

@DarylArmstrong we will review your feedback and get back to you shortly.

Hello @DarylArmstrong, I believe the author is referring to this example:

Thank you GiftA-MSFT, the image was not displaying for me.
Do you know if is it possible to get a downloadable copy of this Excel template? Thanks.

@diberry please can include a downloadable copy of the excel sheet in this document? I was unable to upload a sample file to the data-source-formats directory. Thanks.

@gitfA-msft @DarylArmstrong I can't include the exact file but I can create a file with those fields. Does that work?

@diberry sounds great. Thanks.

@DarylArmstrong doc is uploaded here. I'll add link to doc.

The doc should be published around 4pm PST. Can we please close @GiftA-MSFT ?

Excellent, thank you very much!

authors: DarylArmstrong GiftA-MSFT diberry


text:
Create a virtual machine from an unmanaged image - Link Incorrect

Hello,
The link "Create a virtual machine from an unmanaged image" is going to https://github.com/Azure/azure-quickstart-templates/tree/master/101-vm-from-user-image.md (page not found)

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 7bfcfbec-b7ca-57e2-67cc-e5891fdbefd7
Version Independent ID: 16b54c4d-07de-9d14-2a74-38e321361069
Content: Create Windows Virtual Desktop host pool PowerShell - Azure
Content Source: articles/virtual-desktop/create-host-pools-powershell.md
Service: virtual-desktop
GitHub Login: @Heidilohr
Microsoft Alias: helohr

Thanks for the feedback. In the meantime, please refer to this stack overflow post for the steps:
https://stackoverflow.com/questions/45307612/create-an-azure-vm-with-an-unmanaged-disk

I have created a PR with the update, changes will be live shortly.
Thanks for bringing this to our attention. We will now close this issue. If there are further questions regarding this matter, please tag me in a comment. I will reopen it and we will gladly continue the discussion.


text:
Databricks Runtime 6.0 is out of support

The docs state to always use Non-ML Runtime 6.0 (scala 2.11, spark 2.4.3), but this Runtime version is now out of support.  Is there a newer Runtime version that can be used for the cluster configuration?  If so, the docs should be updated.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 955b2d92-2d6a-787e-6612-d226e09b9a9a
Version Independent ID: 734d767b-f22d-2ba6-aabf-98b07bf5abfc
Content: Set up a Python development environment - Azure Machine Learning
Content Source: articles/machine-learning/how-to-configure-environment.md
Service: machine-learning
Sub-service: core
GitHub Login: @rastala
Microsoft Alias: roastala

@mjmaldonado
Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.

@mjmaldonado, thanks for your report.
Generally ml-core should work with the latest runtime. We are  testing runtime version compatibility with auto-ml and will update the doc when that completes.

@mjmaldonado, the team has successfully tested with version 6.5. I'll update the doc and #please-close this issue.
Thanks again for the report!

authors: PeterCLu YutongTie-MSFT mjmaldonado


text:
Azure function app caching issue with key vault reference

My Application settings of Azure function app, has keyvault reference like @Microsoft.KeyVault(SecretUri=https://myvalut.vault.azure.net/secrets/mySecret/), whenever new version of "mySecret" introduced in keyvault, Azure function still renders the old/stale value not the latest value/version of "mySecret".
If I open up app setting using KUDU (https://myhttpfunc.scm.azurewebsites.net/api/settings) I can see "mySecret":"onemoretry" where "onemoretry" is the old value. Only Azure func app restart updates "mySecret" with new value.
How to make Azure function which uses keyvault reference to fetch latest value/version of the targeted keyvault secret as & when it get updated, without Azure function restart?
Can you please clarify whether the value returned would be cached on the Azure function app or if it would incur a request to KeyVault every time that App Setting was queried by the code?
If function app needs to be restarted everytime after keyvault secret vault update then what is the purpose of the below keyvault reference support without version number?
@Microsoft.KeyVault(SecretUri=https://myvalut.vault.azure.net/secrets/mySecret/),

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 7feaa3d0-7233-a3cb-cb9b-a9a55b1f0d7a
Version Independent ID: f41f9d51-52f8-1f45-1043-1344a3b74458
Content: Use Key Vault references - Azure App Service
Content Source: articles/app-service/app-service-key-vault-references.md
Service: app-service
GitHub Login: @mattchenderson
Microsoft Alias: mahender

Some quick update would be appreciated.

The scope for these doc issues is to help identify gaps and issues with the documentation. Is there something in any specific Azure doc you are looking to have updated or are having issues with?
If yes, please provide us with the link to the documentation you are referring to so we can better assist.
Else, if you are looking for help with debugging issues I would suggest reaching out to the MSDN and Stack Overflow communities. Our team will help you there.

It is not about the document it more about the functionality of app services as I have mentioned in my original post. Can you move this concern or tag right team to answer/clarify the query?

@TestUser0811 I believe this is the current intended behavior. The secret is fetched when the function first warms up and if the function were to scale down to zero, it will pick the latest secret at the time of warming up again.
@mattchenderson Could you please confirm and share more insights here?
We are assigning this issue to the content author for further review and to update the docs accordingly.

@PramodValavala-MSFT "The secret is fetched when the function first warms up and if the function were to scale down to zero" this statement of yours is not true. Only function app restart is fetching the latest secret & it is painful to restart function app every time you update the keyvault secret version & it is definite caveat Microsoft has to patch out.
Even tried out updating the function app's application settings with the newly version of keyvault secret by using the REST API & the application settings value get updated as expected but still function is rendering the previous value of the keyvault secret not the latest value. Function App considering the latest version of the secret only after its restart.
Help me with the possible solution where function can able to pick up the latest value of key vault secret version with out Function App restart.
Format of Keyvault reference configured Function App's application setting, @Microsoft.KeyVault(SecretUri=https://myvalut.vault.azure.net/secrets/mySecret/),

some update would be appreciated.

Does restarting the function app pick up the latest value? It didn't seem to work for me. What I had to do is to make a minor update to the url. Actually removed the "/" at the end and saved it. Then it picked up the latest.

We are facing this as well. Tried restarting the function app, removed the "/" from key vault url, but the function app picks up the old secret value.

This really needs to be fixed - a restart should clear any cache being used!

Use the "SecretVersion" in your configuration reference.
@Microsoft.KeyVault(VaultName=myvault;SecretName=mysecret;SecretVersion=ec96f02080254f109c51a1f14cdb1931)
Use Key Vault reference

Use the "SecretVersion" in your configuration reference.
@Microsoft.KeyVault(VaultName=myvault;SecretName=mysecret;SecretVersion=ec96f02080254f109c51a1f14cdb1931)
Use Key Vault reference

That would mean updating configuration when keyvault value has a new version added, which is not viable or acceptable in most cases.

Is there any update on this obvious problem? It really needs to be resolved - restarting and stopping and then starting the function app has no effect on the function app seeing the new KV value.

Restarting my FA didn't pick up the latest KV value :(

I am also facing the same issue. Was there any resolution around this?

I see an issue where the function app is caching the original application setting value from the KV despite the following scenarios:

The KV value was updated with a new version, and the new version was explicitly referenced in the application settings value.
The application settings value was updated directly without using the KV.
The application setting was removed (the function app still somehow picked up the original value).
A new application setting with the same name was added with a new value not using KV.

Same issue. Refreshing the app-service doesn't fetch newest value.
I need to make a change in the config of the app service and save that. It will ask for a refresh and that will trigger it.

@PramodValavala-MSFT @Karishma-Tiwari-MSFT @mattchenderson Also having the same issue with AppServices, restarting isn't enough to get the most recent secret value. I can even disable all older versions in my keyvault and it still uses the old version. Because of this I'm fairly certain that this is a caching issue.
After a certain time and restarting it just works. I guess this happens when the cache TTL is finally reached.

Any update on this issue? Function restart is not picking the latest version of the KeyVault secrets, only configuration change refreshes the latest version of the KeyVault secrets. Its high maintenance to continue with workaround if secret is referenced in multiple functions/app services.

My solution for now is to specify ;SecretVersion=... in the config, but this is a mayor pain point as you need to update this everytime you update your secret

I have the same issue. This "cache" persists even through multiple app restarts and code redeployments.
Using a SecretVersion is not a solution but a workaround and it means I have to write even more automation to handle this.

same here.
in our case, the cache can live up to 5 hours and even we restart the function app and it still cannot flush the cache.

This madness caused us a 6-hour P1 recently.

This is burning me too and I say that this is nothing more than pure poop! MSFT, can you please fix this?

I am also suffering on this. Function (v4 isolated) is still seeing the old value even though the function is restarted. Pls fix this!

Same here with Function App v4 (P1V3). Looking forward on getting this fixed to save hours of troubleshooting in the future 😅

+1 for this issue to be fixed - should pick up latest version by default

+1

We would also appreciate a fix for this. A restart should not use the cached value

Same problem here. Please fix it.

Adding on to the pile, here. At minimum, a function app restart or code redeployment should cause a cache refresh. With a properly set up CI/CD, it's a mere button click to restart/redeploy to pick up new value, and I don't mind that.

So I dug around the Googles more, and I found documentation about using key vault references and it says that key vault references are refreshed every 24 hours. https://learn.microsoft.com/en-us/azure/app-service/app-service-key-vault-references?tabs=azure-cli#rotation. Or the alternative approach as mentioned here, is to do a force config update.
IMO, that still doesn't cut it. You can plan your key/secret rotations to avoid your key/secret from expiring and causing production downtime, but where you have emergency rotations such as compromised keys/secrets, you still require a forced update. Can't simply be down for a day until the secret/key refreshes itself.

Just having a button to trigger a refresh makes a lot of sense to me, especially since the cache updates every 24 hours anyway. There shouldn't be a need for downtime to force an update.
It would make key rotation so much smoother - currently my catch-all approach is to just redeploy the relevant apps.

Any updates on this one? Not the slickest of password rotation methods currently!

Any updates? This completely ruins the use of password rotation

Same issue here. Please put this on your roadmap.

+1

As referenced by @bcline760, it seems the secrets get rotated every 24 hours by default unless an appsetting change is made and saved. As part of my pipelines I've started using az webapp config appsettings set ... --settings DummyTimestamp=$([datetime]::UtcNow.ToString("s")) to trigger a key vault update

The 24-hour cache and a force-update-through-restart behavior has since been added to the article already. There is a lot of feedback related to the feature itself that should be best submitted with https://feedback.azure.com/.
For any content feedback, please feel to continue to use this GitHub channel. Thank you. #please-close

We really need a solution for this - we are rotating a system credential which is stored in key vault (by an ops team). This credential is then read by an app service using a key vault reference. We need the app service to read the updated credential otherwise our api will stop working. This causes us P1 issues - Please fix!

authors: AaliAlikoski AlphaWong CharlesEkkel Karishma-Tiwari-MSFT KostovBG PramodValavala-MSFT TestUser0811 avanti-ac bcline760 bencoughlan7 cephalin dhardie idusortus jarkkojarvinen johnmc-tc jwevans kkurkowski kmnalluri kunle-e m3talstorm milkyware oscarwest pbhakuni phazlett plamber sit-md stefan-schweiger tlaukkanen tonitakala twilson-gl vechkar xigolle


text:
Cannot properly create "representation"

When following the step:  "Enter "application/json" into the search box and select the application/json content type."
The search fails and I cannot add the proper representation. When looking in the dev console of my browser, I see a failed network call for the content-types.json. I suspect this is related.
This makes it difficult to follow the tutorial.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 4df5cb3a-5bb7-c6c0-dbef-9cf9b51ea264
Version Independent ID: 68e97872-e73c-83a4-6856-3705a705e23c
Content: Mock API responses with the Azure portal
Content Source: articles/api-management/mock-api-responses.md
Service: api-management
GitHub Login: @vladvino
Microsoft Alias: apimpm

@esunder Thank you for your feedback! We will review and update as appropriate.

Hey @esunder If you're able to consistently reproduce this issue, could you share a screenshot of the console error as well as provide info on your browser?

Hi Mike,
I am not able to reproduce the issue today. You can close.
Thanks!
On Mon, Apr 13, 2020 at 3:32 AM Mike Urnun notifications@github.com wrote:

Hey @esunder https://github.com/esunder If you're able to consistently
reproduce this issue, could you share a screenshot of the console error as
well as provide info on your browser?
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/MicrosoftDocs/azure-docs/issues/52002#issuecomment-612807130,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AACXK6WKOZ4UAVWLER5UO4LRMLE3PANCNFSM4MEDDXXQ
.

Glad to hear that the issue is resolved, @esunder! We will now proceed to close this thread. If there are further questions regarding this matter, please reopen it and we will gladly continue the discussion.

authors: esunder mike-urnun-msft


text:
Inaccurate information

In the "Best practice for loading data into SQL Server"section, it does not appear possible to create and use a temporary table from within the Data Factory pipeline. I'm not sure why this page is recommending using a workflow that is not possible to create.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: a2e7af17-5daf-eebf-92b4-433eca93d328
Version Independent ID: cce235ca-d882-4f70-cacc-b3c2c7feae13
Content: Copy data to and from SQL Server - Azure Data Factory
Content Source: articles/data-factory/connector-sql-server.md
Service: data-factory
GitHub Login: @linda33wj
Microsoft Alias: jingwang

@Will-Hyde
Thanks for the feedback and bringing this to our notice. At this time we are reviewing the feedback and will provide an update as appropriate.

Hi @linda33wj , could you please have a look at the feedback from @Will-Hyde. Thanks!

Thanks for the feedback and sorry for the incorrect doc earlier. The section has been updated to clarify the current supported capabilities. We will continue evaluating the need to further smooth it. Please suggest/vote on https://feedback.azure.com/forums/270578-data-factory site.
#please-close

authors: KranthiPakala-MSFT Will-Hyde linda33wj


text:
No able to add below parameters fore Recurrence

Hello  i am trying to add on these days/on these hours from the code view as I don't find those parameters on the Designer. Now i am able to use only hours/min/timezone/start from parameters.
Save logic app failed
6:43 PM
Failed to save logic app TriggerEBM_Dashboardbuild. The template validation failed: 'The template trigger 'Recurrence' at line '1' and column '238' is not valid: "Could not find member 'weekDays' on object of type 'FlowRecurrence'. Path 'weekDays'."

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: f9106dab-3f70-7388-1be0-da02b5728827
Version Independent ID: 13613736-0637-a17c-f5b4-a1476e294032
Content: Schedule recurring tasks and workflows - Azure Logic Apps
Content Source: articles/connectors/connectors-native-recurrence.md
Service: logic-apps
GitHub Login: @ecfan
Microsoft Alias: estfan

@uajvi Can you please share the document link you are following.

Hello Vikas,
I am following below link
https://docs.microsoft.com/en-us/azure/connectors/connectors-native-recurrence
Thanks,
Ajay
On Thu, Apr 23, 2020 at 9:01 PM VikasPullagura-MSFT <
notifications@github.com> wrote:

@uajvi https://github.com/uajvi Can you please share the document link
you are following.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/MicrosoftDocs/azure-docs/issues/53192#issuecomment-618759941,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AL7LHDU2YS2NFAG2LXPBQMTRODXGTANCNFSM4MPUUUBQ
.

Hello Vikas,
I am using below link
https://docs.microsoft.com/en-us/azure/connectors/connectors-native-recurrence
Thanks,
Ajay
On Thu, Apr 23, 2020 at 9:01 PM VikasPullagura-MSFT <
notifications@github.com> wrote:

@uajvi https://github.com/uajvi Can you please share the document link
you are following.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/MicrosoftDocs/azure-docs/issues/53192#issuecomment-618759941,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AL7LHDU2YS2NFAG2LXPBQMTRODXGTANCNFSM4MPUUUBQ
.

@uajvi Thanks for the question! We will review and get back to you!

@uajvi Could you share your workflow code for the trigger? Based on the docs, weekDays should be under a schedule object and based on the error message, I believe you are placing it under recurrence itself.

Hello below was my json, please let me know where should I add
On these days
On these Hours
Like the below document:
https://docs.microsoft.com/en-us/azure/connectors/connectors-native-recurrence
{
"definition": {
"$schema": "https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#",
"actions": {
"Queue_a_new_build": {
"inputs": {
"body": {
"sourceBranch": "development"
},
"host": {
"connection": {
"name": "@parameters('$connections')['visualstudioteamservices_1']['connectionId']"
}
},
"method": "post",
"path": "/@{encodeURIComponent('FHLBProductPortfolio')}/_apis/build/builds",
"queries": {
"account": "Collection-1",
"buildDefId": "2314"
}
},
"runAfter": {},
"type": "ApiConnection"
}
},
"contentVersion": "1.0.0.0",
"outputs": {},
"parameters": {
"$connections": {
"defaultValue": {},
"type": "Object"
}
},
"triggers": {
"Recurrence": {
"recurrence": {
"frequency": "Minute",
"interval": 15,
"startTime": "2020-04-23T17:36:00Z",
"timeZone": "Central Standard Time"
},
"type": "Recurrence"
}
}
},
"parameters": {
"$connections": {
"value": {
"visualstudioteamservices_1": {
"connectionId": "/subscriptions/05ab78c5-37aa-4625-j4567-0bd12a06dacb/resourceGroups/rgcepvststest01/providers/Microsoft.Web/connections/visualstudioteamservices-5",
"connectionName": "visualstudioteamservices-5",
"id": "/subscriptions/05ab78c5-37aa-4625-j4567-0bd12a06dacb/providers/Microsoft.Web/locations/centralus/managedApis/visualstudioteamservices"
}
}
}
}
}

Hi @uajvi, the options to specify weekDays and hours are available only when you use these frequency values:

weekDays: Set frequency to week.
hours: Set frequency to day or week.

Looks like your Recurrence trigger uses minute as the frequency, thus the error. Here's the syntax for the Recurrence trigger:
https://docs.microsoft.com/azure/logic-apps/logic-apps-workflow-actions-triggers#recurrence-trigger

Thanks a lot Ecfan, its helpful

@ecfan Thanks for helping out!
@uajvi Glad you were able to resolve your issue.
We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

authors: PramodValavala-MSFT VikasPullagura-MSFT ecfan uajvi


text:
Password manager service on CentOS

When installing from source on CentOS 7 and running, there's an error message saying that a password manager service is required but not installed. If I don't want to use snap what can I install for this?

@dontmesswithbill Thank you for your question!
Since this channel is for driving improvements towards MS Docs, could you provide the URL of the specific documentation that your feedback is applicable to? That way, we are able to make sure your feedback is addressed by the right team.

@dontmesswithbill Any update on the issue. Can you please share the document URL.

@dontmesswithbill  I will proceed to close this issue. You can either open a new issue by providing Feedback directly on the document or If you have the document URL then please share so that we can reopen this issue.

authors: VikasPullagura-MSFT dontmesswithbill


text:
WebLogic Landing Page

External issue for https://dev.azure.com/devdiv/DevDiv/_workitems/edit/1090284 .
This page should exist:
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/oracle/weblogic
Its content will be the same as the CONTACT ME page in the Marketplace.

Please assign this to @edburns .

@BorisB2015 You may want to keep an eye on this .

https://github.com/MicrosoftDocs/azure-docs-pr/pull/114915

#reassign:edburns

This issue has been fixed.  The page now exists at https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/oracle/oracle-weblogic
#please-close

authors: DavidCBerry13 edburns shashishailaj


text:
Clarify permissions for user-assigned MI

Doc states we need: "A user-assigned managed identity with the contributor's role to the target resource-group."
Does this really need the contributor role? Granting full contributor access may be problematic in some least-privilege security scenarios. For example, a customer delegating access to a partner under Lighthouse might not want to allow the 'contributor' role to be used.
It would be much better if the doc could describe EXACTLY what permissions are required (in the same format as used when defining 'actions' in a custom RBAC role definition).
For example, I would expect permission for the storage account, ACI, and resources manipulated by the script itself are required, but no more.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: b5c4c8c5-7757-a969-5800-17f2f2312649
Version Independent ID: 9ced8dd5-43ca-6d1f-c054-842299db8327
Content: Use deployment scripts in templates - Azure Resource Manager
Content Source: articles/azure-resource-manager/templates/deployment-script-template.md
Service: azure-resource-manager
Sub-service: templates
GitHub Login: @mumian
Microsoft Alias: jgao

@jtuliani Thanks for the comment!
Assigning @mumian for visibility, review, to help provide insights and for document enhancement consideration.

authors: KrishnaG-MSFT jtuliani


text:
TDE protector is not set at server level for Synapse Analytics (formerly SQLDW)

Hello, I don't believe the statement about the TDE protector being set at the server level is correct for Synapse Analytics. In the portal it states "To enable encryption, go to each database" at server level

Document details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: a44a0e0d-f0a8-fe91-8ae5-a901e103f89e
Version Independent ID: 834b8bc9-d661-0204-9ece-1f370067ec96
Content: Transparent data encryption - Azure SQL Database & SQL Managed Instance & Azure Synapse Analytics
Content Source: articles/azure-sql/database/transparent-data-encryption-tde-overview.md
Service: sql-database
Sub-service: security
GitHub Login: @jaszymas
Microsoft Alias: jaszymas

@hurtn We are checking this and will get back to you.

@hurtn TDE protector is set at server level and TDE is set at Database level.
The document does mention to set the TDE at DB level in portal.

Also if you see the Powershell or REST commands, it does give commands to create/update TDE protector on Server level

Hope this helps.

@hurtn Please let us know if you need any further help.

@hurtn We are going ahead and closing this request. Please get back to us if any other issue.

authors: NavtejSaini-MSFT hurtn


text:
Issues with Blazor Tutorial, Also Request to Update to .NET 5?

I've followed this flow (nicely written with explanations of the steps by the way!), but have hit issues getting this to work.
Here are the errors I'm seeing:

404 Error requesting: https://graph.microsoft.com/v1.0/me?$select=displayName,mail,mailboxSettings,userPrincipalName
This client error stating the Microsoft Graph API resource is not found:

blazor.webassembly.js:1 fail: OurGov.Client.Graph.GraphUserAccountFactory[0]
      Graph API error: Code: ResourceNotFound
      Message: Resource could not be discovered.
      Inner error:
      	AdditionalData:
      	date: 2020-11-13T14:54:18
      	request-id: aaa8183f-c20e-4b8a-9b30-60bcbf52be3f
      	client-request-id: aaa8183f-c20e-4b8a-9b30-60bcbf52be3f
      ClientRequestId: aaa8183f-c20e-4b8a-9b30-60bcbf52be3f

Any idea why I would be hitting these errors / what I may have done wrong here? Also noting that previous to following this tutorial I have been using AzureAD to authenticate and sign in without issues so I don't believe I have App Registration issues.
Some other thoughts on the tutorial:

It seems like we changed the entire HttpClient base address, which seems unlikely that someone would register the standard HttpClient to point to Microsoft Graph rather than the server base address.
I'm using Blazor in .NET 5 which recommends using disabling Implicit Grant here.

Also, copying @guardrex just noting that this Blazor Graph tutorial is out there in case they want to link to it from the Secure Blazor Apps sections.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: d60e8edb-2347-c809-8d6e-3a09b65b6762
Version Independent ID: 1110826c-8c31-19b2-c9da-c9dba4777a05
Content: Tutorial - Sign in users and call a protected API from a Blazor WebAssembly app - Microsoft identity platform
Content Source: articles/active-directory/develop/tutorial-blazor-webassembly.md
Service: active-directory
Sub-service: develop
GitHub Login: @knicholasa
Microsoft Alias: nichola

@taylorchasewhite
Thanks for your feedback! We will investigate and update as appropriate.

@taylorchasewhite ... We have a different approach in our doc set that you might want to take a look at ...
https://docs.microsoft.com/aspnet/core/blazor/security/webassembly/graph-api?view=aspnetcore-5.0
We're featuring a Graph Service Client approach that results in less boilerplate for when many components need to access Graph, as you can see in the example we have here :point_right: ...
https://docs.microsoft.com/aspnet/core/blazor/security/webassembly/graph-api?view=aspnetcore-5.0#call-graph-api-from-a-component-using-the-graph-sdk
... but further down the doc, we also have a named client approach, which is what the tutorial here uses.
Also note that this tutorial is on Identity v1.0. Our bits for 5.0 have moved on to Identity v2.0. The Graph API parts of the tutorial might be fine, but you can ignore the rest of what you see here if you want to go with 5.0.

@guardrex, thanks, I overlooked that page(!).
I do want to use v2, where is that actually "defined" in the templates / how can I tell if I've correctly "updated" to v2?
When I check the outgoing network requests, I see https://graph.microsoft.com/v1.0/me which seems to imply I am on v1, not v2, but I'm not entirely sure that's the case to be honest. Is v2 in beta (https://docs.microsoft.com/en-us/graph/api/overview?view=graph-rest-beta)?

It's v1.0 of the Graph SDK/API, not Identity. If you want to use Graph latest (future release), they use "beta" in the request URI.
Use 5.0 documentation approaches and packages from our docs (ASP.NET Core repo) for Identity v2.0. You'll know because the old packages are replaced with Microsoft.Identity.Web packages ... https://docs.microsoft.com/en-us/aspnet/core/migration/31-to-50?view=aspnetcore-5.0&tabs=visual-studio#update-the-server-project-of-a-hosted-blazor-solution ... along with the other migration changes described. I think ... hope 🤞 ... we have all of the migration bits in the migration topic.

... that's also something that @knicholasa and I were about to discuss offline.
@knicholasa, our migration topic should have what you need (the content around that :point_up: link). I say should 🍀 because the paint might not be quite dry given that it was all just updated last week and there were a lot of updates. I hope we have everything, but you can let me know if we missed something.
WRT the CLI command with blazorwasm2 here. I think that happens because there might have been a separate Identity template install in addition to the SDK. It's not our guidance, and devs shouldn't see two Blazor templates for each hosting model ... just one for Blazor WASM and one for Blazor Server. The 5.0 SDK has the latest bits for Identity v2.0 in its template. If anyone is seeing two for each hosting model, IIRC there is an issue buried in the product unit repo that discusses it and includes a command to get rid of the extra templates. I don't have the link; but if searched, I think it will turn up in closed issues over there.
https://github.com/dotnet/aspnetcore/issues?q=is%3Aissue+is%3Aclosed

Thank you @taylorchasewhite for your thoughtful feedback on the doc and @guardrex for your help as well. I have added a note that points to the documentation @guardrex mentioned to the top of this doc, and I am kicking off a discussion about merging the sample code here with other samples we have on GitHub which should make it more canonical.

Thank you @taylorchasewhite for your thoughtful feedback on the doc and @guardrex for your help as well. I have added a note that points to the documentation @guardrex mentioned to the top of this doc, and I am kicking off a discussion about merging the sample code here with other samples we have on GitHub which should make it more canonical.

#please-close

#please-close

authors: MarileeTurscak-MSFT guardrex knicholasa taylorchasewhite


text:
Is it possible to get navigator.userAgent as a part of the login Claims?

Hi, I want to know if it's possible to get the value of the UserAgent (operating system) as a part of a claim similar to {Context:IPAddress}.
I need to limit login access for certain User agents, for example, windows 7, and show an error message in the login flow that says that this operating system is not supported in our applications.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 4fc94d79-52c2-d03a-9821-32c048ffa020
Version Independent ID: e4303183-d476-6104-fcaf-00e3beb23787
Content: Claim resolvers in custom policies - Azure AD B2C
Content Source: articles/active-directory-b2c/claim-resolver-overview.md
Service: active-directory
Sub-service: b2c
GitHub Login: @msmimart
Microsoft Alias: mimart

@glomaga
Thanks for your feedback! We will investigate and update as appropriate.

Client side you can use MSAL.js (or any other Auth lib) that adds the value to the authorization request as an extra query parameter (&userAgent=xxxx) and read it from the custom policy using OAuth2 key-value resolvers. Or, you can use a REST technical profile which will read the useragent string and return it to the custom policy as a claim.

Hope this helps! If you have further questions feel free to tag me in the comments.

authors: MarileeTurscak-MSFT glomaga


text:
Virtual WAN ASN Typo

There is a typo in the ASN for Virtual WAN.
BGP setting
On the Virtual network gateway Configuration page, you can configure the BGP ASN. Change the BGP ASN. The BGP ASN cannot be 65515. 66515 will be used by Azure Virtual WAN.
It should be 65515.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 124ec59c-bf0d-50e1-8972-63ebb8870302
Version Independent ID: 025b232f-8fc9-0a2a-3220-a646866b4bbc
Content: Connect a virtual network gateway to an Azure Virtual WAN
Content Source: articles/virtual-wan/connect-virtual-network-gateway-vwan.md
Service: virtual-wan
GitHub Login: @cherylmc
Microsoft Alias: cherylmc

Thanks! Fixing in a different PR. #please-close

authors: cherylmc kodubeau


text:
What happens if source storage account has firewall enabled and blocks the destination storage account?

The article states that when we copy blobs between storage accounts, the copy is performed service-to-service. Based on another older announcement and some Storage Log analysis, it appears that the destination Storage Account attempts to read the blobs from the source Storage Account. What happens if we have the Storage Account firewall enabled on the source Storage Account that would inadvertently block the copy operations from the destination Storage Account? If this would halt or block the overall copy operation, would it be recommended that we include in this article that the source Storage Account Firewall should allow connections from the destination Storage Account's IP in order for a service-to-service operation to be successful?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 59827b34-a728-ac8d-0ba0-0b60cde2321d
Version Independent ID: 8daf39eb-e037-b5e5-874e-c9b556cc2433
Content: Copy blobs between Azure storage accounts with AzCopy v10
Content Source: articles/storage/common/storage-use-azcopy-blobs-copy.md
Service: storage
Sub-service: common
GitHub Login: @normesta
Microsoft Alias: normesta

@milope Thank you for reaching out to us with your query, our team will review and get back to you at the earliest.

@milope According to the documentation: Your client must have network access to both the source and destination storage accounts. To learn how to configure the network settings for each storage account, see Configure Azure Storage firewalls and virtual networks.
I tested this by creating two blob storage accounts, in the firewall settings I only allowed my IP for both source and destination accounts. AzCopy command completed without issue.


text:
Document that this breaks serial console

I walked through these steps and found out that this breaks serial console on linux vms. This should be documented! See the below error I received trying to open the serial console after following these steps. Resolving the authorization issue causes another problem. Bottom line is, it appears serial console is based off cloud shell. Following these steps really messes everything up.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 3fa2de5d-8601-6a7c-4d41-88d32305ecaa
Version Independent ID: 9163153c-bcac-9f7f-2fe9-f53632b77132
Content: Azure Serial Console errors - Azure Virtual Machines
Content Source: articles/virtual-machines/troubleshooting/serial-console-errors.md
Service: virtual-machines
GitHub Login: @asinn826
Microsoft Alias: alsin

Thanks for brining this to our attention. We will investigate it further and update you shortly.

@jabbera - Can you please provide us with the document that you followed for reproducing the issue? What are the steps?

@jabbera - Can you please provide us with the document that you followed for reproducing the issue? What are the steps?

Yes, I'm on the Serial Console team and I'm very interested in knowing which document caused this issue so we can fix it.

Sorry for the delay: https://docs.microsoft.com/en-us/azure/cloud-shell/private-vnet

Sorry for the delay: https://docs.microsoft.com/en-us/azure/cloud-shell/private-vnet I walked through these steps and the serial console stopped working. It's trying to use the relay deployed for cloud shell for some reason when using the serial console.

Hey @jabbera thank you for getting back to us on this. We are investigating this now and will provide an update once we are finished.

We have completed our investigation and can confirm this does break Serial Console due to its current architecture. We are transitioning to a new architecture, but until then we need to add a note in this document informing customers aware that this is a known issue. Thank you for catching this @jabbera.

@kof-f  - Thank you for providing your insights.
@jabbera - I hope @kof-f has answered your question.
Thanks again for bringing this to our attention. We have updated the Doc and it will be live once its merged.  We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

authors: MonikaReddy-MSFT jabbera kof-f


text:
Must add  -TypeHandlerVersion paramater for Set-AzVMExtension

Must add the -TypeHandlerVersion paramater for this script to work:
Set-AzVMExtension -Name AMAWindows -ExtensionType AzureMonitorWindowsAgent -Publisher Microsoft.Azure.Monitor -ResourceGroupName  -VMName  -Location CanadaCentral -TypeHandlerVersion 1.0

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 8201f331-0fa7-a801-9f4d-75d65cd77625
Version Independent ID: 86a66791-11bb-4f20-f77d-42fe58f5dcf4
Content: Install the Azure Monitor agent - Azure Monitor
Content Source: articles/azure-monitor/agents/azure-monitor-agent-install.md
Service: azure-monitor
Sub-service: agents
GitHub Login: @bwren
Microsoft Alias: bwren

@yvesgermain Thanks for your comment. We will review the issue and get back to you shortly.

@yvesgermain Thanks for your feedback. I have made necessary changes to the document and they will be live soon.
We will close the issue for now. If there are further questions , please revert and we will be glad to assist you.

authors: SwathiDhanwada-MSFT yvesgermain


text:
Using the page's instruction to get sql query tracking gives an obsolete warning

I added the line
services.ConfigureTelemetryModule<DependencyTrackingTelemetryModule>((module, o) => { module. EnableSqlCommandTextInstrumentation = true; });
As instructed in the documentation to get the full SQL query being generated and used by entityframework, while it works and does give me the queries, It gives the following warning:
Method 'Microsoft.Extensions.DependencyInjection.ApplicationInsightsExtensions.ConfigureTelemetryModule<T>' is obsolete: Use ConfigureTelemetryModule overload that accepts ApplicationInsightsServiceOptions.
I tried using the overload mentioned in the warning, however, I can't find a property that achieves the same result. If there is a new recommended way to do this, the documentation page should be updated, otherwise, it should be added as it is sometimes necessary when debugging.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: c4ded2ce-d8c3-7118-bec9-865f6225dbe0
Version Independent ID: a4089752-177c-866c-7237-3ac02c7750d9
Content: Dependency Tracking in Azure Application Insights - Azure Monitor
Content Source: articles/azure-monitor/app/asp-net-dependencies.md
Service: azure-monitor
Sub-service: application-insights
GitHub Login: @lgayhardt
Microsoft Alias: lagayhar

services.ConfigureTelemetryModule<DependencyTrackingTelemetryModule>((module, o) => { module. EnableSqlCommandTextInstrumentation = true; });
The above code won't show the warning you pasted. Can you check again if you are using right method?
The following is the obsolete method which would throw the warning:
services.ConfigureTelemetryModule<DependencyTrackingTelemetryModule>((module) =>
            {
                module.EnableSqlCommandTextInstrumentation = true;
            });

There is no doc issue. If there is warning when using the recommended method, then please open an issue in https://github.com/Microsoft/ApplicationInsights-dotnet
please-close

authors: Etiennepicard cijothomas


text:
No Reference to Cloud Service resource being added to template.

The instructions for this page seem a bit disjointed - Step 2 is to add a public IP resource to your ARM Template, which then flows into step 3, "Adding a networkProfile to your cloud service". There is no step prior to this where the user adds the parent "Microsoft.Compute/cloudServices" resource. As such, people may be confused as to the location of where to put the networkProfile. The only location this is mentioned is in step 7, where Microsoft provides a full template example.
This page would flow better if there was an step between 2 & 3 to add the cloud service.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 738edf60-4147-32ab-04ca-1f8a0d63d3c6
Version Independent ID: 9b2f7bcc-a62d-b2ba-5cc1-ef1f77716d09
Content: Deploy a Azure Cloud Service (extended support) - Templates
Content Source: articles/cloud-services-extended-support/deploy-template.md
Service: cloud-services-extended-support
GitHub Login: @gachandw
Microsoft Alias: gachandw

Have raised a pull for this document and what I believe it should look like.
https://github.com/MicrosoftDocs/azure-docs/pull/74725

Thanks for contributing to the documentation.
The PR is assigned to the author to review.

Hi @Karishma-Tiwari-MSFT .
This Issue can be closed, PR has has been merged.

authors: Karishma-Tiwari-MSFT jameswestall


text:
The ICSA Certification shouldn't be on this page

Azure Premium Firewall has not been certified by the ICSA - the logo should be taken off this page

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: bef38298-89c0-6c77-fb9d-7bf6bd5dc030
Version Independent ID: 335d7b03-3e6f-61b6-fe19-19441c1b6b36
Content: Azure Firewall Premium Preview features
Content Source: articles/firewall/premium-features.md
Service: firewall
GitHub Login: @vhorne
Microsoft Alias: victorh

@danx1000 Thanks for bringing this to our attention. Your feedback has been shared with the content owner for further review.

Removed until certification completes.
#please-close

authors: SumanthMarigowda danx1000 vhorne


text:
The screenshot attached are not correct

[Enter feedback here]
If we look closely the screenshot for both Primary and the secondary shows the DB is created in the US East Region, which does not seem correct. though you have the line "Location: Choose a location from the drop-down, such as East US. This location can't be the same location as your primary server" But the screenshot for secondary also shows East US.  Maybe you could have it updated as West US if the secondary is in West US as shown in the later screenshot
Kindly look into it

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 01266e6f-278d-f627-24d4-043e9471b0e6
Version Independent ID: 5e63bc56-ff03-77f3-8499-e213d48638e3
Content: Tutorial: Add a database to a failover group - Azure SQL Database
Content Source: articles/azure-sql/database/failover-group-add-single-database-tutorial.md
Service: sql-database
Sub-service: high-availability
GitHub Login: @BustosMSFT
Microsoft Alias: robustos

@manishjha2088 Thank you for the feedback. We are actively investigating and will get back to you soon.

@manishjha2088 I have observed the same. Thanks for pointing out. This is being assigned to the content author to evaluate and update as appropriate.

Hi @manishjha2088 , thanks again for contacting Microsoft and helping improve our docs! My apologies for the delay but we've processed a change to update the image, it should be live later this week. I'll go ahead and close out this Git Issue but please feel free to comment should you need further.
Thanks once more, and I hope you have a wonderful rest of your day!
Masha from the SQL Docs team
#reassign:MashaMSFT
#please-close

GitHub user BustosMSFT has been removed from the MicrosoftDocs organization, so they were automatically removed as an assignee.


text:
Documentation does not note that blob trigger paths with binding expressions MUST contain a container name

The following generates an exception on startup, Invalid blob trigger path '{filename}'. Container paths cannot contain {resolve} tokens.
[BlobTrigger("{filename}", Connection = "BlobStore:ConnectionString")] Stream file,

I don't know why this limitation exists, but it's not documented anywhere.
This also implies there's no way to capture the full path of a blob, including container name.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 77fbaa31-cfcc-4b8c-abe0-4efeaee3e4f0
Version Independent ID: db65fc3d-d8b3-1f19-91a0-4f3696fbca69
Content: Azure Functions bindings expressions and patterns
Content Source: articles/azure-functions/functions-bindings-expressions-patterns.md
Service: azure-functions
GitHub Login: @craigshoemaker
Microsoft Alias: cshoe

Thanks for the feedback! I have assigned the issue to the doc author to update appropriately.

authors: IanKemp SamaraSoucy-MSFT


text:
Consider including Azure Stack in supported environments

The DSC extension is included as a downloadable extension within the Azure Stack marketplace. Please consider including which Azure Stack versions are compatible with which DSC extensions.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 3d2d7d54-74a4-6a49-66f4-3cf4083c1434
Version Independent ID: 005cf301-2333-9671-df9d-4188d94c2576
Content: Work with Azure Desired State Configuration extension version history
Content Source: articles/automation/automation-dsc-extension-history.md
Service: automation
Sub-service: dsc
GitHub Login: @MGoedtel
Microsoft Alias: magoedte

@CHDAFNI-MSFT Thanks for your feedback.
Assigning to content author  @MGoedtel for review.

authors: CHDAFNI-MSFT SwathiDhanwada-MSFT


text:
Command to get credentials for Azure/login GitHub action is not sufficient in this page

[Enter feedback here]
Using the command az ad sp create-for-rbac -o json is not sufficient to generate credentials for azure/login action because this required a clientSecret and clientId and tenantId as seen here. If this values are not passed, the action will fail to login.
A more appropriate command to get the credentials would be:
az ad sp create-for-rbac --role contributor --sdk-auth

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 9659eab1-b7f7-d163-ff0a-577b7496b5c8
Version Independent ID: 0892de76-78f8-4c1c-c09c-60af3f275320
Content: Handle AKS node upgrades with GitHub Actions - Azure Kubernetes Service
Content Source: articles/aks/node-upgrade-github-actions.md
Service: container-service
GitHub Login: @mlearned
Microsoft Alias: mlearned

Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.

This article has been updated, and the issue has been addressed.
#please-close

authors: Karishma-Tiwari-MSFT everspader rayoef


text:
Unclear where to configure operations

After some researching, I was able to understand that Spatial Analysis operations are configured in the deployment manifest of the container, but this is not clearly explained. I would suggest a phrase or 2 explaining this
Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 1a8cc3d0-b223-a511-a3ce-cc5aa9e8428f
Version Independent ID: b69ff1b3-9e8d-05a5-e981-d7e12d82fe1a
Content: Spatial Analysis operations - Azure Cognitive Services
Content Source: articles/cognitive-services/Computer-vision/spatial-analysis-operations.md
Service: cognitive-services
Sub-service: computer-vision
GitHub Login: @PatrickFarley
Microsoft Alias: pafarley

@SeryioGonzalez, Thanks for taking time to share your valuable feedback! We are taking a look into this and will get back to you soon.

@PatrickFarley Could you please review the above feedback and update as required. I believe this guidance can be added in the Configure operations section of setting up the container page.
@SeryioGonzalez Thanks for the feedback. Our content author will review the guidance and update the document as appropriate.

added mention
#please-close

authors: AjayKumar-MSFT PatrickFarley RohitMungi-MSFT SeryioGonzalez


text:
Azure SQL Trigger for Python Functions or only C#?

Hello,
After reading this doc, it's unclear to me whether the new Azure SQL Trigger bindings for Azure Functions are ONLY for C# or are also available for Python (and PowerShell, JavaScript, etc).
Thank you

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 99bd9dab-e42f-0329-c6b9-fa39d90677a6
Version Independent ID: 3a86dae9-f4ac-76e2-96a0-2842d4a93dc2
Content: Azure SQL bindings for Functions
Content Source: articles/azure-functions/functions-bindings-azure-sql.md
Service: azure-functions
GitHub Login: @dzsquared
Microsoft Alias: drskwier

Well...as soon as I navigated beyond the initial page, I see the other runtimes available!
https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-azure-sql-input?tabs=csharp
Disregard ! :)

SeaDude, No worries. Thanks for leveraging Azure docs feedback channel to raise this question and much appreciate the follow-up.

thanks for dropping a note @seadude!  I'll make it more clear on the first page as well.
just as a heads up, we're working on the Python support as well: https://github.com/Azure/azure-functions-sql-extension/issues/172

authors: AjayKumar-MSFT SeaDude dzsquared