Currently, only global administrator can block/unblock MFA for users. However, the global administrator has too much authority, so please allow other roles as well. I want Privileged Authentication Administrator and Authentication Administrator to be able to do these things.

extend trial period

Currently if an application contains multiple password secrets, admin will not be able to tell which secret an application is using. Is it possible to add application secret ID column in AAD sign-in logs so that admin could cross check with the secret ID in the application object?

We have developed an integration for App Insight sourced alerts to call a function via an action group to promote those to our On Prem Event Mgt platform. We need this action group to be globally available across all subscriptions and all resource groups

Allow to apply a license to a nested group, it could be very helpful for us since by doing this it will be easier assigning licenses one by one in different groups. As an example, when working with a school, we want that by belonging to the group "All students" their e-mails can be assigned to the different grades.

"Services deployed in the same region as the storage account use private Azure IP addresses for communication. Thus, you cannot restrict access to specific Azure services based on their public inbound IP address range."

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security#grant-access-from-an-internet-ip-range

So when we are faced with this issue, we need to disable the Firewall or deploy Storage Account in the different region.

If we could use Storage Account which is Firewall enabled, and other services in the same region, it will be more useful for users. I'd like you to make this possible.

Machine Learning workbench requires Internet connection, but please also support connection via VPN and via Express Route.

Also, I want you to be able to use some functions even in an environment without internet connection.

----In Japanese---
Machine Learning workbench はインターネット接続が必須ですが、VPN 経由での接続やExpress Route 経由での接続もサポートしてほしい。

また、インターネット接続がない環境でも、一部の機能だけでも使用できるようにしてほしい。

MCAS File policy with specified folder now supports Box, SharePoint, DropBox and OneDrive.

Could you consider to support Google Drive.

With this current specification, customers will eat up their data capacity in the future if they don't remove them on a regular basis. This is very inconvenient.

1.This is not a bug that VM rebooting does not delete these files.
2. So, If 1 is correct , Cx need to delete these files manually periodly.
2.There are no means to delete these files automatically.
3. No ETA to the function that Azure backup delete these files automatically

France has many laws regarding datas security, and in some sector like healthcare, it's impossible to host stuff outside of France.

I'd be a very good news for us that Microsoft could open a datacenter in France :)

If a customer has a tenant/subscription with the same partner who has the other tenant, you should allow the partner to do the transfer of directory.

Develop a native Azure diagramming tool similar to the old ISABPA Network diagrammer, but better.

Azure VPN Client for MacOS

It's known that MacOS is a very commonly adopted OS in certain areas.
For example in development.

Developers who work in Azure infra for their customers should have the possibility to have a client like this and all the features that come along with it (simple MFA configuration for example)

I want you to be able to transfer the learned model in Chainer and Tensorflow directly to Machine Learning.

The self service portal for MFA methods does not show enough information for users and supporters in our company to determine which Authenticator App entry is 'old' and can therefore be deleted. Users do have sometimes multiple Authenticator App entries configured as MFA method. For example when they need to add the authenticator app again in case of issues.

When Subscription Ownership Transfer is executed, A Service Administrator will also be changed to the destination account and a Co-Administrator is removed.

It may happen in the case of the destination account is already registered as one of the Co-Administrators, because a single account cannot be registered as both a Service Administrator and a Co-Administrator.

I request an additional option which gives a source account administrator to leave the co-administrator setting or not.