(General Feedback)

Do you have an idea or suggestion based on your experience with Azure? We would love to hear it! Please take a few minutes to submit your idea in the one of the forums available on the right or vote up an idea submitted by another Azure customer. All of the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.

This forum (General Feedback) is used for any broad feedback related to Azure. If you have feedback on a specific service such as Azure Virtual Machines, Web Apps, or SQL Database, please submit your feedback in one of the forums available on the right.

Remember that this site is only for feature suggestions and ideas!

If you have technical questions or need help with Azure, please try StackOverflow or visit our MSDN forums

I suggest you ...

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Azure Policy For Preventing Public Blob Containers

    There are no ARM REST API properties for Blob containers which means we can't create an Azure Policy for not allowing people to ever create public blob containers.

    This is how every AWS breach has occurred due to accidentally setting storage to public.

    92 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      4 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
    • Internal load balancer vnet peering

      Currently when you connect 2 VNETS using a global vnet peer you cannot access internal load balancer between the networks. E.g if you have a resource behind a load balancer in vnet1 and you try to connect to the load balancer from vnet2 then you cannot connect.

      This causes problems for SQL Server Availability groups running over 2 regions meaning you need an internal load balancer in each region. If you then have a web farm spread over the 2 regions only web servers within the region hosting the listener address can connect to the listener. This basically removes one…

      83 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        4 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
      • Migrating from Azure MFA Server to MFA Cloud

        Need a migration method for migrating from Azure MFA Server to Azure MFA Cloud, without all our users having to re-register.

        71 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          2 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
        • Make DomainDNSName,NetbiosName & Samaccountname attributes avaialble to public to use AAD Join without AAD Connect

          We use okta for synchronizing accounts to Azure AD.

          We plan to use AAD Join for our windows10 devices, it works well with AAD Connect(As AAD Connect synchronizes attributes DomainDNSName, NetBIOS name & Onpremisesamaccoutnanme)

          Okta could not update these attributes, I want to find a way to update the attributes(by using PowerShell or GraphAPI?).

          And also would like to know if there is any possibility to sync MSDS-Keycredentiallink attribute to on-premise without using AAD Connect so that I can use windows hello.

          59 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            0 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
          • Azure Portal Time Out Enforcement

            would like to a way to force portal timeout via policy in the Azure Portal AND Azure Stack

            51 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              2 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
            • Query Azure AD Devices BitLocker recovery key via PowerShell

              Please allow query Azure AD Devices BitLocker recovery key via PowerShell

              49 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                1 comment  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
              • Block Azure MFA (cloud) Enrollment from External Networks

                I feel like I have been to the end of Google and back and thought I'd just reach out to this feedback hub.

                We would love the ability to block Azure MFA (cloud) enrollment from external networks with Azure Conditional Access Policies or another method.

                It doesn't look like the "MFA Setup" page is a "Cloud App" to build conditions on...

                My other thought is the ability to build out a dynamic group based on if a user has enrolled, but the Azure Dynamic group queries seem limited at this point.

                46 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  0 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                • Moving IBM Mainframes to Azure

                  we need an easy way to lift and **** Mainframes/ AS400 to lift and **** to Azure. instead of replatforming if Microsoft can build a layer which AS 400 or Mainframe apps can run on, can help drive consumption of Azure. Hopefully Microsoft can do it before AWS

                  44 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    1 comment  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                  • NSG/ASG management and monitoring

                    add capability to modify and monitor NSGs and ASGs.

                    33 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      3 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                    • Add support to Azure AD B2C for the on-behalf-of flow.

                      In order for a web API to call another downstream web API as the user, Azure AD B2C needs to support the OAuth on-behalf-of flow.

                      According to the following reference, this isn't supported in B2C: https://docs.microsoft.com/en-us/azure/active-directory-b2c/active-directory-b2c-apps#web-api-chains-on-behalf-of-flow

                      I also cannot find this feature on the Azure Roadmap.

                      30 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        0 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                      • Enterprise Applications Search Improvement

                        We are unable to use the Enterprise Applications blade to find our applications. The interface only lists the first 20 applications. You cannot even download a list of them. In order to search for one on the list you have to know what letters the application name starts with. You cannot do partial search on part of the name, you must start with the first name. This is a HUGE problem if we forgot the name of an application.

                        For example. We created an Application called Ameris Webex. It is not listed in the first 20 applications, therefore we have…

                        30 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          2 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                        • Azure Sql Import Bacpac slow

                          We are testing a production database migration to Azure SQL. The database is 50GB and even on the S3 tier we are going on 30 hours still and the import isn't complete (pegged at 100% DTU). At this point I couldn't even tell you when this will finish. I understand I could have chosen the highest premium tier to import this and it might have been quicker, however I only want to test this database and right now I've lost 3-4 days on this (importing at S0, S1 tiers). My suggestion is to allow an option when going through the…

                          27 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            3 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                          • Fix Reservations IAM

                            As the Account Administrator for my enrolment, I have no view of RIs which have been provisioned under the enrolment by default unless “Owner” access is explicitly provided by the “Contributor” who purchased the RI.

                            In effect, I have no ability to manage RI resources by default; and I may potentially not even know of their existence until I receive the quarterly invoice.

                            Please make the RIs accessible as per the standard IAM policy which applies to all other Azure resources (ie. Account and Service Administrators by default can view).

                            The Azure Doc (link below) states that "By default, the…

                            26 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              1 comment  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                            • Enable pausing Azure SQL DB/Azure SQL Managed Instance

                              Enable the ability to pause Azure SQL DB and Azure SQL Managed Instance like what is available in Azure SQL DW or VM.

                              Importing/exporting the data is not a viable option for most dev/test environments that need to be started/stopped quickly and easily.

                              25 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                0 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                              • Azure MFA needs anti-phishing features such as include location details and notification to users about new devices

                                Users can sometimes approve MFA notifications on their device because they do not know whether it is their device authenticating or a hacker who has phished their credentials. Therefore, to help users know why they are being asked to accept authentication include additional details such as the application name, IP address and location in the MFA prompt. Apple includes the location and a map of the location in their own two-factor implementation.

                                Additionally, users should be notified with an email any time a new device is used to authenticate to their account.

                                25 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                                • AAS as a Data Source.

                                  Hi Team,

                                  Currently Azure is not supporting AAS as a datasource. Suppose i created the Datamodel in AAS and i want to use same in another AAS model, it is not working. Can we have any idea when it will support AAS as a datasource

                                  25 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    2 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Provide a description field for Azure Key Vault secrets

                                    When creating a 'secret' in Azure Key Vault you mainly got Name, Value and Content type fields to populate. It would be great to have a Description field as well to provide some verbose description/notes about the particular secret.

                                    24 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      0 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Azure Price calculator to show EA agreement prices

                                      We find the Azure price calculator very usefull (https://azure.microsoft.com/en-us/pricing/calculator/), however it provide the "list" prices and not our own EA discounts. One option is to build our own calculator but I assume that will be a costly development project so the question is: Is there any plan to make the price calculator "tuned" with our coroprate prices. E.g that we can logon with our AzureAD credentials and then get the correct prices?

                                      Or alternative solution, that the export from the price calculator to Excel inlcude the part-number (and service name) so we can do some macro in Excel…

                                      24 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        10 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Add SQL Database & Data Warehouse as trusted Microsoft services in Azure Storage firewall settings

                                        When we enable auditing & threat detection on SQLDB or SQLDW, we should be able to set up the firewall setting of Azure Storage. SQLDB & SQLDW is not included in the trusted Microsoft services now.

                                        22 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Allow Comments to be maintained in Create View Syntax

                                          currently header comments are not maintained in Create View statements in DW. Please update the functionality so that this will remain and allow one to script out the objects with the comments and provide comments for development and re-use.

                                          Create View vw_Name
                                          -- Comment
                                          -- Comment
                                          AS
                                          Select *
                                          From Object

                                          22 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  azure.microsoft.com  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4 5 59 60
                                          • Don't see your idea?

                                          (General Feedback)

                                          Feedback and Knowledge Base