Currently Support Requests (https://docs.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-support-request) can not be directly linked to, which makes tracking them in my own internal system and sharing them with my coworkers an difficult and time wasting hassle of copying and pasting just the identifier which they then have to search for themselves in the portal. Communication and information transfer would be much faster with simply a hyperlink pointing to the generated support ticket resource. Nearly every other resource has links which work like this.

I would like to have the possibility to rename the vnet

currently header comments are not maintained in Create View statements in DW. Please update the functionality so that this will remain and allow one to script out the objects with the comments and provide comments for development and re-use.

Create View vw_Name
-- Comment
-- Comment
AS
Select *
From Object

As part of Azure.AD authentication assertion, make sure you return the group membership details, the user belongs to. This will help the service provider to make authorization decision based on group membership

I would like to add a watermark to a document of the person who printed it.

Currently it only allows a watermark of the document owner.

I really like the Learning Plans you have posted, and I'd like to see additional Learning Plans for the following topics:

• Virtual Networks / Networking


• Azure Active Directory - Operations


• Storage

Having these plans would really help those studying for the 70-533 and, of course, with understanding infrastructure topics for operations.

I would be willing to contribute to these, but I do not see the Learning Plans anywhere on the GitHub repo.

Hi,

Currently, on the PIM, we can assign Azure roles and Azure resources temporarily to groups/users.
It would be essential for Microsoft to add the feature to assign groups membership to users temporarily.

Meaning that, we would like to have users temporarily assigned to some groups through the PIM and once it expires, they are removed from those groups. That would allow us to enforce the security following best practices.
It will be essential since a lot of permissions are set according to groups, to access tier service through SAML, to access AKS Kubernetes clusters at different permission levels etc...

We rely on Conditional access policy to secure o365 resources to Hybrid joined devices. On Non-Persistent VDI resources this process fails on initial logon and requires a user to lock the device before receiving the Primary refresh token. I would consider this a bug. With the need of more remote work options this has become more important to our organization.

is it possible to have a datacenter in Italy, maybe Milan?

https://azure.microsoft.com/en-us/updates/
Click on the Subscribe button and it links to the XML RSS Feed - https://azure.microsoft.com/en-us/updates/feed/
Not the expected behavior.

In addition to monthly budget, I would like to be able to set an alert on a daily consumption in order to react immediately and take corrective action to stay in my monthly budget.

“Memory-preserving updates” should be notified to users. Because this maintenance influences the Linux CentOS users. This notification make many azure users so happy.

When configuring role assignments on an Azure resource, you're not able to change those assignments which are inherited. I have a situation where I need to lock down a resource so very few have the ability to modify/delete. The list of users who should be able to make changes, does not include those that currently have the 'Owner' role at the subscription level. I'd like to be able to disable inheritance at the resource level and be able to reassign the roles.

I'm trying to setup Authorized IP ranges on my Azure AKS but can't find GitHub Actions GitHub-hosted IP's ranges to use in az aks update -n NAME -g GROUP --api-server-authorized-ip-ranges

Also, for all GitOps out there, it would be great to be able to do
az aks update -n NAME -g GROUP --api-server-authorized-ip-ranges MY_IP_ADDRESS,githubactions

Initial posted on https://twitter.com/TigPT/status/1264146818901979136

replace CSP transfer form with a digital online form the current word doc is awful

To be able to dismiss all users flagged for risk.

It would be helpful to add support for MSI to automation accounts.

The vision is that one could run runbooks against resources authenticating with a "System Assigned Managed Identity" rather than than a service principal or the certificate-based "AzureRunAsConnection", which need manual rotation and falls under the same security governance as service principals.

Using MFA with Microsoft Authenticator, we can only see the username. It woulde be useful get also the application and the devices that is requesting the approval. It is difficult to determine if it is right when multiples applications are in use (Outlook, OneDrive, Skype...)

use a managed identity to pull an image from Azure Container Registry when creating a container group