Lester W
My feedback
-
2 votesLester W
shared this idea
·
-
83 votestriaged · 14 comments · Azure Active Directory » Domain Services · Flag idea as inappropriate… · Admin →
An error occurred while saving the comment Lester W
supported this idea
·
-
10 votes
Thank you for the feedback. We have released the Tag Contributor role (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#tag-contributor).
However, we would appreciate further feedback about what this role is missing and how we can make it more usable for your scenarios.
Lester W
shared this idea
·
-
3 votesLester W
shared this idea
·
-
1 voteunder review · 1 comment · Azure Governance » Azure Resource Graph · Flag idea as inappropriate… · Admin →
An error occurred while saving the comment Lester W
commented
Look at the "-contains" PowerShell Operator, which will tell you if at least one entry is true. To see if all are true (at least for True/False, then test for -Contains $false)
-
67 votes16 comments · Azure Active Directory » Role-based Access Control · Flag idea as inappropriate… · Admin →
Just wanted to leave a quick update, we’re continuing to work on this feature and will share details in the near future.
Cheers,
/Stuart and BalajiAn error occurred while saving the comment Lester W
commented
This feature is available NOW (programmatically). In PowerShell, you add a management group as an assignable scope. For example: $Role.AssignableScopes.Add("/providers/Microsoft.Management/managementGroups/<management group ID>")
Duplicate Feedback of
https://feedback.azure.com/forums/911473-azure-management-groups/suggestions/34391878-allow-custom-rbac-definitions-at-the-management-gr?Lester W
supported this idea
·
-
309 votes
Updating the status to indicate that this is a valid suggestion and in our backlog for the future. Please keep the comments/votes coming, knowing more about how you intend to use this helps us prioritize and design better features.
/Elisabeth
An error occurred while saving the comment Lester W
commented
Such a simple UI change to make, yet this still remains "unplanned"... really?!? Even with 211 votes?
See the attached mock-up...
An error occurred while saving the comment Lester W
commented
The way we want to use this is that we have Microsoft consulting in doing some work for us. We have provisioned the consultants as guest users but certain Azure DevOps (formerly VSTS) functions don't work as well, so we want to promote certain guests to member status. Currently we have to do this with PowerShell.
Lester W
supported this idea
·
-
207 votes
Custom RBAC is supporting the management groups scope with a few limitations. The MG team and Identity teams are working on removing these limitations but no timeline is available yet.
To keep updated please see https://docs.microsoft.com/en-us/azure/governance/management-groups/overview#custom-rbac-role-definition-and-assignment
An error occurred while saving the comment Lester W
commented
How can one get on the Preview?
Lester W
supported this idea
·
-
13 votes
An error occurred while saving the comment Lester W
commented
By the way, you can view and manage via the API just fine. It appears go be purely the Azure portal that is stopping access.
Lester W
shared this idea
·
-
1 voteLester W
shared this idea
·
-
7 votesLester W
supported this idea
·
-
1 voteLester W
shared this idea
·
-
7 votes
An error occurred while saving the comment Lester W
commented
The "Schedule" panel should ideally behave like other blade user experiences. Display the list of schedules with a menu bar at the top which allows you to link and unlink (or add new) schedules.
Lester W
shared this idea
·
-
2 votesLester W
shared this idea
·
-
4 votesLester W
supported this idea
·
An error occurred while saving the comment Lester W
commented
I suspect a leak somewhere in the storage library. This also manifests itself with AzureRm.Storage cmdlets in PowerShell.
-
15 votesLester W
shared this idea
·
-
5 votesLester W
shared this idea
·
-
6 votesLester W
shared this idea
·
Any update on this much needed feature?? I have all these Microsoft consultants accessing our systems and we keep having to create local AD accounts for them. I'd really rather use the B2B access.