Lester W
My feedback
-
2 votesLester W
shared this idea
·
-
105 votestriaged · 17 comments · Azure Active Directory » Domain Services · Flag idea as inappropriate… · Admin →
An error occurred while saving the comment Lester W
supported this idea
·
-
13 votes
Thank you for the feedback. We have released the Tag Contributor role (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#tag-contributor).
However, we would appreciate further feedback about what this role is missing and how we can make it more usable for your scenarios.
Lester W
shared this idea
·
-
4 votesLester W
shared this idea
·
-
1 voteunder review · 1 comment · Azure Governance » Azure Resource Graph · Flag idea as inappropriate… · Admin →
An error occurred while saving the comment Lester W
commented
Look at the "-contains" PowerShell Operator, which will tell you if at least one entry is true. To see if all are true (at least for True/False, then test for -Contains $false)
-
74 votes16 comments · Azure Active Directory » Role-based Access Control · Flag idea as inappropriate… · Admin →
Just wanted to leave a quick update, we’re continuing to work on this feature and will share details in the near future.
Cheers,
/Stuart and BalajiAn error occurred while saving the comment Lester W
commented
This feature is available NOW (programmatically). In PowerShell, you add a management group as an assignable scope. For example: $Role.AssignableScopes.Add("/providers/Microsoft.Management/managementGroups/<management group ID>")
Duplicate Feedback of
https://feedback.azure.com/forums/911473-azure-management-groups/suggestions/34391878-allow-custom-rbac-definitions-at-the-management-gr?Lester W
supported this idea
·
-
327 votes
Thanks for the great feedback and comments. We are working on this, but don’t have an ETA yet. We will share an update when we are closer to release.
An error occurred while saving the comment Lester W
commented
Such a simple UI change to make, yet this still remains "unplanned"... really?!? Even with 211 votes?
See the attached mock-up...
An error occurred while saving the comment Lester W
commented
The way we want to use this is that we have Microsoft consulting in doing some work for us. We have provisioned the consultants as guest users but certain Azure DevOps (formerly VSTS) functions don't work as well, so we want to promote certain guests to member status. Currently we have to do this with PowerShell.
Lester W
supported this idea
·
-
226 votes
Custom RBAC is supporting the management groups scope with a few limitations. The MG team and Identity teams are working on removing these limitations but no timeline is available yet.
To keep updated please see https://docs.microsoft.com/en-us/azure/governance/management-groups/overview#custom-rbac-role-definition-and-assignment
An error occurred while saving the comment Lester W
commented
How can one get on the Preview?
Lester W
supported this idea
·
-
97 votes
We will soon have a feature that will let all Enterprise Administrators to see and manage all reservations, without being explicitly added to them.
An error occurred while saving the comment Lester W
commented
By the way, you can view and manage via the API just fine. It appears go be purely the Azure portal that is stopping access.
Lester W
supported this idea
·
An error occurred while saving the comment Lester W
commented
Global admins SHOULD be able to view (or at least manage permissions) of Reserved Instance reservations in the Azure portal. Currently, only the purchaser and account owner can manage the permissions. This is contradictory to everything else in Azure, where a Global Admin alywas has the capability to change permissions (acting as a User Access Administrator).
On a secondary note, Read-only admins in the Enterprise Agreement portal should also have the ability to view reserved instance data.
-
1 voteLester W
shared this idea
·
-
7 votesLester W
supported this idea
·
-
1 voteLester W
shared this idea
·
-
7 votes
An error occurred while saving the comment Lester W
commented
The "Schedule" panel should ideally behave like other blade user experiences. Display the list of schedules with a menu bar at the top which allows you to link and unlink (or add new) schedules.
Lester W
shared this idea
·
-
2 votesLester W
shared this idea
·
-
4 votesLester W
supported this idea
·
An error occurred while saving the comment Lester W
commented
I suspect a leak somewhere in the storage library. This also manifests itself with AzureRm.Storage cmdlets in PowerShell.
-
15 votesLester W
shared this idea
·
-
7 votesLester W
shared this idea
·
-
6 votesLester W
shared this idea
·
Any update on this much needed feature?? I have all these Microsoft consultants accessing our systems and we keep having to create local AD accounts for them. I'd really rather use the B2B access.