Azure Resource Manager

How can we improve the Azure Resource Manager?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  1. Enable Azure AD Domain Services in an Azure Resource Manager

    Azure AD Domain Services can currently only be enabled in a classic Azure virtual network. Enable Azure AD Domain Services in an Azure Resource Manager.

    1 vote
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  Flag idea as inappropriate…  ·  Admin →
    • Ability to add Tags to a Resource Group from an ARM template

      Currently you cannot add Tags to a Resource Group that is created using an ARM Template, it must be added using the portal or Powershell.

      6 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        I agree to the terms of service
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        0 comments  ·  Flag idea as inappropriate…  ·  Admin →
      • VM/VMSS extensions conditions support

        I have a Service Fabric Cluster in Azure and for prod/preprod environment I'm monitoring it with OMS.
        For Dev environment - we don't need OMS, because it will generate a lot of noise.
        To monitor VMSS or VM- we are using VM extension with OMS agent configured in arm template, but currently "Conditions" supported only on resource level, and not on a property level or resource extension method.

        Add support of condition not only on resource level, but also on a resource extension level.

        https://github.com/rjmax/Build2017/blob/master/Act1.TemplateEnhancements/Chapter05.ConditionalResources.NewOrExisting.json

        3 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          I agree to the terms of service
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          0 comments  ·  Flag idea as inappropriate…  ·  Admin →
        • Ability to retrieve Principal ID

          In my ARM template I am provisioning Key Vault and I need the user that is deploying the ARM template to be added as a Principal.

          Since there is currently no way to retrieve the Principal ID from the ARM template we currently have to add the Principal manually.

          I would rather automate this step by getting the Principal Id similar to how we can get the subscription ID (subscription().subscriptionId). Something like principal().principalId

          3 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            I agree to the terms of service
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            1 comment  ·  Flag idea as inappropriate…  ·  Admin →
          • Add more information about tenants

            Current api endpoint for tenants (https://docs.microsoft.com/en-us/rest/api/resources/tenants) returns only ids.

            Please add more information about them:
            - domainName;
            - displayName;
            - isSignedInTenant (if user use token for common tenant).

            7 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              I agree to the terms of service
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  Flag idea as inappropriate…  ·  Admin →
            • Make custom domains a seperate purchasable resource

              Azure now supports direct purchase of custom domains (for, e.g., web apps): https://docs.microsoft.com/en-us/azure/app-service-web/custom-dns-web-site-buydomains-web-app

              These are already seperate resources, as they can be used in multiple web apps. Please make it possible to automate the purchase / registration of these domains via JSON / Azure Automation / PowerShell, and do not make this dependent on any existing web app (which it now is in the web interface)

              3 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                I agree to the terms of service
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                1 comment  ·  Flag idea as inappropriate…  ·  Admin →
              • Fix tags to be an array, to allow tag array manipulation

                Currently, tags are an object, meaning they can be defined but not extended:

                "tags": {
                "Tag 1": "Value 1",
                "Tag 2": "Value 2"
                }

                I would like to see Tags become an array, allowing the appending of additional tags based on a baseline:

                ...
                "tags": [
                { "Tag 1": "Value 1" },
                { "Tag 2": "Value 2" }
                ],

                "additionalTags": [
                { "Tag 3": "Value 3" },
                { "Tag 4": "Value 4" }
                ]
                },
                "resources": [
                { // Create the SQL Server
                "name": "[parameters('sqlServerName')]",
                "type": "Microsoft.Sql/servers",
                "apiVersion": "[parameters('configuration').global.apis.sql]",
                "location": "[parameters('configuration').global.location]",
                "tags": "[union(variables('tags'), variables('additionalTags'))]",
                ...

                3 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  I agree to the terms of service
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                • Import-AzureRmAutomationDSCResource - Support URI or content link

                  Like several other cmdlets in AzureRm.Automation, add functionality to Import-AzureRmAutomationDSCResource, so that it can source files from URIs so configurations can be imported directly from storage accounts or repositories.

                  At the moment, it only support -SourcePath that has to be an on-disk, location.

                  New-AzureRmAutomationModule has the -ContentLink parameter, although this has to be a ZIP file. A DSC configuration file needs to be a .ps1.

                  Thanks

                  12 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    I agree to the terms of service
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                  • Automation script should copy storage account settings

                    Azure Portal can export its Automation script in order to deploy from ARM template, of course in case of Azure Functions on dynamic hosting plan.
                    However, the Portal currently never generates appSettings in ARM template.
                    Functions saves the connection string of the storage account in appSettings, so if we recover from the template, it always fails because of the lack of storage account information.
                    (Deployment would be successful, but newly created Functions never works well.)

                    Do you have a plan to fix this?
                    I know some template samples in Github can create Dynamic Functions successfully, but Azure Portal can't generate…

                    4 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      I agree to the terms of service
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                    • conditional output from ARM template

                      ARM template supports condition for resources which is a great feature. I can now include a storage account resource in the ARM template, but it will only be created under certain condition. However, if I would like to output the storage account's keys using reference() function, there will be an error when the resource isn't actually created. This would cause a deployment failure and no other output will be returned.

                      I would love to have the ability to set conditions on outputs so the reference() function won't be evaluated if the condition is not met.

                      33 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        I agree to the terms of service
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                      • Simplify Enabling Diagnostics In Web Apps

                        I'd like to be able to enable diagnostics on a web/api app in an ARM template like this:

                        properties:{
                        "DIAGNOSTICS_ENABLED": true,
                        "DIAGNOSTIC_BLOB_CONTAINER": "foo"
                        }

                        As it stands, I am required to create the storage account before running the ARM template, use powershell to create a container and generate a SAS token then feed that in to the ARM template.

                        3 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          I agree to the terms of service
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                        • Support using count to deny resource creation in Azure Resource Policies

                          Please add support to deny the creation of a resource in a resource group if the number of items of that resource type is greater than or equal to a certain value.

                          6 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            I agree to the terms of service
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            1 comment  ·  Flag idea as inappropriate…  ·  Admin →
                          • Make "moving resources" actually work

                            Having moved a lot of resources to a new subscription, I can tell you:

                            (1) Sometimes it works

                            (2) Sometimes it fails, and if you do it again it works

                            (3) Sometimes it works, but your resources are missing, and you have a heart attack for 10-15 minutes until they magically reappear

                            (4) Sometimes it works, but stays in stuck in "Moving resources" for hours, and Google says maybe it will time out eventually (this is where I'm at now)

                            All this in a small business account in afternoon. Is anything tested at Azure?

                            3 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              I agree to the terms of service
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                            • Moving a resource group to a new subscription should be easier

                              When I started playing around with Azure, I didn't fully understand subscriptions and realized late in the process that my MSDN subscription didn't allow production use, and this needed to be a Pay-As-You-Go subscription.

                              Moving resources to a new subscription seems to require some substantial rummaging around behind the scenes, and the Move-AzureRmResource functionality (and exposed via the portal) is fantastically buggy. Like "maybe it'll all move on the third try, and be ready to nuke it all redeploy" buggy.

                              Shouldn't it be as simple as UPDATE SubscriptionId = B WHERE SubscriptionId = A when someone wants to pay you…

                              3 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                I agree to the terms of service
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                              • String array function Join

                                in some cases, I need to concatenate several references (variables) which have rather long names (or complex object structures).

                                The standard approach (Concat(...)) makes for a very long lines.

                                Since multi-line values aren't supported (another area for improvement), the current approach I use is to create an array of each segment, since each member of the array can be its own line.

                                Ideally I'd like to take that array and just Join(string[], "_")... but currently I can't, so I'm forced to concat(var[0], "_", var[1], "_", var[2]).

                                The inclusion of a JOIN function would SIGNIFICANTLY simplify the variable's definition.

                                2 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  I agree to the terms of service
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                • Provide option to execute ARM template in preview mode ("This is what I plan to do")

                                  I would love to be able to run an ARM template with an optional PowerShell parameter that tells the deployment not to make any changes, but instead to report back with the changes it intends to make.

                                  22 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    I agree to the terms of service
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Enable the enforcement of Transparent Data Encryption on databases using Resource Policies

                                    Please provide an alias to enable the enforcement of Transparent Data Encryption on databases using resource policies.

                                    12 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      I agree to the terms of service
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      1 comment  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Application Gateway management operations are agonizingly slow

                                      [Originally posted to Azure Portal forum - however should have been submitted here]

                                      Most creates and updates for application gateway configuration (back-end pools, rules, listeners, certificates, etc.) take 5-10 minutes to apply. This is not a portal issue as it takes just as long via the API / CLI. (This is with even a single instance App Gateway)

                                      Applying these same settings on Windows Server ARR directly takes only a minute or less, so I'm not sure where the performance issue lies, but there is tremendous room for improvement.

                                      As it is currently, it provides waaaay too much time while…

                                      21 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        I agree to the terms of service
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Enforce Resource Naming convention using ARM Policies

                                        Enforce Resource Naming convention using ARM Policies using for example Regular Expressions.
                                        The challenge we are facing is figure out a way to enforce a naming convention on the azure environment of our customers. We have detected for example that we are not allowed to use two “*” on a “like” condition. We also tried to use regular expressions (REGEX) but apparently doesn’t work also. We would like to know if there is any solution for this or any code/example that you could share with us that could help our customers enforcing a naming convention on their environments, because right…

                                        9 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          I agree to the terms of service
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Shrink Managed disk

                                          I'd like the ability to shrink a managed disk.

                                          I'm creating a managed image from a marketplace windows server base, installing a bunch of third party software and using DevTest labs and VSTS to automate the build of a base image that I use for a large number of VM deployments.

                                          The managed disks created from my image are 128gb of which I use about 40gb. I'd like to shrink the managed disk used in the image to 64gb so the VMs I deploy from my image fit in the S6 managed disk pricing bracket.

                                          15 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            I agree to the terms of service
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4 5 10 11
                                          • Don't see your idea?

                                          Azure Resource Manager

                                          Feedback and Knowledge Base