Currently, only global administrator can block/unblock MFA for users. However, the global administrator has too much authority, so please allow other roles as well. I want Privileged Authentication Administrator and Authentication Administrator to be able to do these things.

extend trial period

We have developed an integration for App Insight sourced alerts to call a function via an action group to promote those to our On Prem Event Mgt platform. We need this action group to be globally available across all subscriptions and all resource groups

Allow to apply a license to a nested group, it could be very helpful for us since by doing this it will be easier assigning licenses one by one in different groups. As an example, when working with a school, we want that by belonging to the group "All students" their e-mails can be assigned to the different grades.

MCAS File policy with specified folder now supports Box, SharePoint, DropBox and OneDrive.

Could you consider to support Google Drive.

Machine Learning workbench requires Internet connection, but please also support connection via VPN and via Express Route.

Also, I want you to be able to use some functions even in an environment without internet connection.

----In Japanese---
Machine Learning workbench はインターネット接続が必須ですが、VPN 経由での接続やExpress Route 経由での接続もサポートしてほしい。

また、インターネット接続がない環境でも、一部の機能だけでも使用できるようにしてほしい。

France has many laws regarding datas security, and in some sector like healthcare, it's impossible to host stuff outside of France.

I'd be a very good news for us that Microsoft could open a datacenter in France :)

Develop a native Azure diagramming tool similar to the old ISABPA Network diagrammer, but better.

"Services deployed in the same region as the storage account use private Azure IP addresses for communication. Thus, you cannot restrict access to specific Azure services based on their public inbound IP address range."

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security#grant-access-from-an-internet-ip-range

So when we are faced with this issue, we need to disable the Firewall or deploy Storage Account in the different region.

If we could use Storage Account which is Firewall enabled, and other services in the same region, it will be more useful for users. I'd like you to make this possible.

If a customer has a tenant/subscription with the same partner who has the other tenant, you should allow the partner to do the transfer of directory.

I want you to be able to transfer the learned model in Chainer and Tensorflow directly to Machine Learning.

The self service portal for MFA methods does not show enough information for users and supporters in our company to determine which Authenticator App entry is 'old' and can therefore be deleted. Users do have sometimes multiple Authenticator App entries configured as MFA method. For example when they need to add the authenticator app again in case of issues.

When Subscription Ownership Transfer is executed, A Service Administrator will also be changed to the destination account and a Co-Administrator is removed.

It may happen in the case of the destination account is already registered as one of the Co-Administrators, because a single account cannot be registered as both a Service Administrator and a Co-Administrator.

I request an additional option which gives a source account administrator to leave the co-administrator setting or not.

I beleive including a free SQL Database (MSSQL) to the DreamSpark subscription will be greatly beneficial in the education process of many students. Having a reliable MSSQL Server that can be used for learning SQL Server is very important. There's a MySQL database included in the subscription, but I believe having experience in at least two flavors of SQL is a lot better for students, especially TSQL if they intend to work with Microsoft technologies in the future.

Currently ExpressRoute does not support manual route summarization, for example:

Currently the routes are learning with /24 which needs to be summarized to /16

Customer is not able to summarize the route in Azure, and they will need to summarize on their on-premises devices through BGP, before further route propagation.

Please consider to add such feature in ExpressRoute.

Azure VPN Client for MacOS

It's known that MacOS is a very commonly adopted OS in certain areas.
For example in development.

Developers who work in Azure infra for their customers should have the possibility to have a client like this and all the features that come along with it (simple MFA configuration for example)

When adding users to an Enterprise Application, the search only shows the first 50 result. I would suggest that this gets expended, as it a pain, if you have more then that.