(General Feedback)
Do you have an idea or suggestion based on your experience with Azure? We would love to hear it! Please take a few minutes to submit your idea in the one of the forums available on the right or vote up an idea submitted by another Azure customer. All of the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.
This forum (General Feedback) is used for any broad feedback related to Azure. If you have feedback on a specific service such as Azure Virtual Machines, Web Apps, or SQL Database, please submit your feedback in one of the forums available on the right.
Remember that this site is only for feature suggestions and ideas!If you have technical questions or need help with Azure, please try StackOverflow or visit our MSDN forums
-
For each resource creation save the date and the user
Usually when you create a resource you do not know when was created and by whom, the information in logs is available only for a determined period of time and then lost, that is something that will be very helpful to include in the Overview section.
47 votes -
Create the ability to remove or change inherited permissions at the resource group level.
We have a managed service provider and some customers that need a degree of permissions at the subscription level. There are several resource groups that I do not want them to have the same level of access they have at the subscription level. For instance, I would like to remove them from the Azure Automation RG or provide them read level access to our OS image folder.
41 votes -
Prevent Creation of Classic Machine Learning Web Services so Tags can be Enforced
Prevent Creation of Legacy Machine Learning Workspace Commitment Plans and classic web services so Tags can be Enforced.
Our organization sets a Tag policy on resource groups so that newly created resources within that resource group will inherit tags. The main tag is 'Department Code', and is used for Chargeback for resource usage. Any Machine Learning 'classic' web services, that were created using the Machine Learning Studio portal will be created outside of the standard tagged resource group and thus, will not inherit standard tags used for Chargeback.
We also need a migration method for existing classic web services to…
38 votes -
Make DNS CAA records visible and manageable through the Azure web portal
Currently these records can only be managed with Powershell, CLI or API.
37 votes -
Application gateway should have the capability to store certificate in Azure Key Vault
Currently Application gateway does not store certificate in Azure Key Vault. We believe that Application gateway should have the capability to do that. This will give customer more control over their certificate than saving it in Microsofts encrypted storage.
35 votesThis capability will soon be supported and will be announced.
-
Allow firewall rules on Azure SQL DB to be removed via ARM templates
Currently it seems that because the firewall rules for an Azure SQL DB are just proxy resources in an ARM template that you can not remove them via this mechanism. If you remove them from the ARM template, they are not removed from the Azure SQL DB resource. This means that it is not possible to properly source control the configuration as the source controlled configuration can differ from reality. I think it is vital to allow people to properly manage the Azure SQL DB as code that you work allow the rules to be removed via the ARM template.
34 votes -
Add support for Remote Desktop to the Azure Application Gateway
Add Azure Application Gateway (With WAF) support for RD Gateway traffic.
Currently I can only route traffic for RD Web through the application gateway. It would be useful if I could route all RD traffic through the application gateway and not have to have multiple public IPs and Traffic Manager profiles and split RD Broker/Web and RD Gateway traffic.
At the moment I can't even route RD Gateway traffic through Application Gateway even with WAF disabled.
34 votes -
When moving a resource
When moving a resource (or resource group) to a new subscription.
ask for real movement after the validation, this would enable a dry test upfront for planning33 votes -
SQLCMD Unexplained behaviour returning output starting with square brackets
complete explanation at https://social.msdn.microsoft.com/Forums/sqlserver/en-US/b0c08c5d-a6aa-4ec7-9b54-87807cf81548/sql-server-2012-sqlcmd-unexplained-behaviour-returning-output-containing-square-brackets-?forum=sqltools
Basically, SQLCMD does not behave the same way since SQL 2012 when a message starts with an opening bracket.
The following command returns an empty string when previous version returned the entire text:
sqlcmd -b -E -S -Q "RAISERROR('[A][B][C]',10,1)"
this one removes the firs value between brackets:
sqlcmd -b -E -S -Q "RAISERROR('[A] [B][C]',10,1)"32 votes -
Add slider bar
Add slider bar in Choose VM Size pane in portal.azure.com when you do View all so you don't get the whole sha-bang all the time
30 votes -
Azure Cosmos DB should support static columns
Cosmos DB can be used with Cassandra API but it is not possible to create table with static columns. Cosmos DB should support static columns.
30 votes -
Support using Azure SignalR in ASP.NET (OWIN)
Azure SignalR SDK only runs on ASP.NET Core, which is a blocker for lots of companies / existing projects.
Please also support ASP.NET (OWIN runtime).
30 votes -
assign Security Group to Authentication Method
Add the option to assign a security group to specific authentication methods.
i.e, Security Group "Azure Security Question" can be assigned to the Security Question authentication method. So that only objects in the group are given the Security Question method.30 votes -
B2B invitation status
Azure Active Directory B2B account.
Now there isn't possiblity to generate report, if B2B user has activated account or not. It would be good to have feature to list not activated users from administrative perspective. Example when doing acocunt clean up.
There are fields in profile like Source which contain Invited user or Resend invitation button is visible. Those indicates if user hasn't activated invitation.
Or even have automatic removal on directory, if invitation hasn't been approved within X days, B2B account is removed automatically. As if account hasn't been activated, it cannot be used anywhere.
28 votes -
Allow Subscription Owners to Filter VMs by Service Principals
Currently, I don't see any way to filter resources (either in the UI or via the CLI) in such a way that I can see what any given Service Principal has on the subscription. This is important for me, as I've got multiple Principals which are each tied to a different user, and I'd like to be able to have insight into what sort of resources & usage each user on my Subscriptions are consuming.
It would be very useful to have this in both the UI for quick checks, as well as in the CLI so reports can be…
27 votes -
api management - import OpenApi from internal URL
It would be interesting to allow import an openapi definition from an internal URL (through VNET integration). The request should resolve with custom dns and go through VPN or Express Route.
Now, you get errors that the URL is not publicly available.So, the target would be to load openapi specifications from onpremise through VNET and VPN
Regards,
25 votes -
Let Web Apps to be PCI compliance
Despite that PCI compliance is promoted at Azure, a Web App created at Azure is non compliant by default, and cannot be set-up appropriately.
I understand that a Web App is not as isolated as an ASE (that still is not compliance by default, needs advanced set-up), with instances sharing system level settings with other clients (so cannot be changed independently), and I understand some set-up changes that apply to all clients, even ones that do not require PCI, can lead to problems to some of them.
I propose an option to opt-in to PCI compliance at Web App level;…
24 votes -
Allow tagging of "hidden" resources
Currently, you can tag most types of resources using portal.azure.com, Powershell or any other tool for that matter. Tagging "hidden" type of resources (for example Microsoft.Network/networkWatchers) is hidden on the portal, but they can be tagged by using a Powershell script which for example tags every resource inside a resource group.
This behaviour is inconsistent, because after this, listing tags on the portal show that the specific tag key:value pair is in use, but you won't see which resources use it. You need to rely on Get-AzureRmTag or other means to actually reveal which resources are tagged.
As of currently,…
24 votes -
Add description field to NSG Rule
It would be nice to have a way to describe the reason for a given NSG rule.
This would greatly simplify, for instance, bookkeeping for PCI DSS 3.1 item 1.1.6 which demands a business notification for each NSG rule.
Name field allows 80 chars but type description there is just not the right thing. Specially when you need to refer to a given rule while using CLI tools. Huge plus if it appears as a column while listing rules.
24 votes -
Ability to view Support plans in the Azure Portal
The support plans to be able to be viewed in Azure Portal. When monthly statements get sent out support plans are unable to have the statement attached in PDF form automatically. This needs to be added.
24 votes
- Don't see your idea?