You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/reports-monitoring/howto-use-recommendations.md
+40-7Lines changed: 40 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -23,18 +23,51 @@ The Azure Active Directory (Azure AD) recommendations feature provides you with
23
23
24
24
This article covers how to work with Azure AD recommendations. Each Azure AD recommendation contains similar details such as a description, the value of addressing the recommendation, and the steps to address the recommendation. Microsoft Graph API guidance is also provided in this article.
25
25
26
-
## Access and view the details of a recommendation
26
+
## Role requirements
27
27
28
-
To update the status of a recommendation or a related resource, sign in to Azure using a least privilege role for *update and read-only* access.
28
+
There are different role requirements for viewing or updating a recommendation. Use the least-privileged role for the type of access needed.
29
29
30
-
- Security Administrator
31
-
- Security Operator
32
-
- Cloud apps Administrator
33
-
- Apps Administrator
30
+
| Azure AD role | Access type |
31
+
|---- |---- |
32
+
| Reports Reader | Read-only |
33
+
| Security Reader | Read-only |
34
+
| Global Reader | Read-only |
35
+
| Cloud apps Administrator | Update and read |
36
+
| Apps Administrator | Update and read |
37
+
| Security Operator | Update and read |
38
+
| Security Administrator | Update and read |
39
+
40
+
Some recommendations may require a P2 or other license. Refer to the [Recommendation availability and license requirements](overview-recommendations.md#recommendation-availability-and-license-requirements).
41
+
42
+
## How to read a recommendation
43
+
44
+
Each recommendation provides the same set of details that explain what the recommendation is, why it's important, and how to fix it.
45
+
46
+
The **Status** of a recommendation can be updated manually or automatically by the system. If all resources are addressed according to the action plan, the status automatically changes to *Completed* the next time the recommendations service runs. The recommendation service runs every 24-48 hours, depending on the recommendation.
47
+
48
+
The **Priority** of a recommendation could be low, medium, or high. These values are determined by several factors, such as security implications, health concerns, or potential breaking changes.
49
+
50
+
-**High**: Must do. Not acting will result in severe security implications or potential downtime.
51
+
-**Medium**: Should do. No severe risk if action isn't taken.
52
+
-**Low**: Might do. No security risks or health concerns if action isn't taken.
53
+
54
+
The **Impacted resources** for a recommendation could be things like applications or users. This detail gives you an idea of what type of resources you need to address. The impacted resource could also be at the tenant level, so you may need to make a global change.
55
+
56
+
57
+
58
+
The **Status description** tells you the date the recommendation status changed and if it was changed by the system or a user.
59
+
60
+
The recommendation's **Value** is an explanation of why completing the recommendation will benefit you, and the value of the associated feature.
61
+
62
+
The **Action plan** provides step-by-step instructions to implement a recommendation. May include links to relevant documentation or direct you to other pages in the Azure AD portal.
63
+
64
+
## How to update a recommendation
65
+
66
+
To update the status of a recommendation or a related resource, sign in to Azure using a least-privileged role for updating a recommendation.
34
67
35
68
1. Go to **Azure AD** > **Recommendations**.
36
69
37
-
1. Select a recommendation from the list to view the details, status, and action plan.
70
+
1. Select a recommendation from the list to view the details, status, and action plan.
38
71
39
72
Copy file name to clipboardExpand all lines: articles/active-directory/reports-monitoring/overview-recommendations.md
+9-53Lines changed: 9 additions & 53 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -35,60 +35,18 @@ This article gives you an overview of how you can use Azure AD recommendations.
35
35
The Azure AD recommendations feature is the Azure AD specific implementation of [Azure Advisor](../../advisor/advisor-overview.md), which is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. Azure Advisor analyzes your resource configuration and usage data to recommend solutions that can help you improve the cost effectiveness, performance, reliability, and security of your Azure resources.
36
36
37
37
*Azure AD recommendations* use similar data to support you with the roll-out and management of Microsoft's best practices for Azure AD tenants to keep your tenant in a secure and healthy state. The Azure AD recommendations feature provides a holistic view into your tenant's security, health, and usage.
38
-
39
-
## How it works
40
-
41
-
On a daily basis, Azure AD analyzes the configuration of your tenant. During this analysis, Azure AD compares the data of a recommendation with the actual configuration of your tenant. If a recommendation is flagged as applicable to your tenant, the recommendation appears in the **Recommendations** section of the Azure AD Overview area. The recommendations are listed in order of priority so you can quickly determine where to focus first.
42
-
43
-
Each recommendation contains a description, a summary of the value of addressing the recommendation, and a step-by-step action plan. If applicable, impacted resources associated with the recommendation are listed, so you can resolve each affected area. If a recommendation doesn't have any associated resources, the impacted resource type is *Tenant level*, so your step-by-step action plan impacts the entire tenant and not just a specific resource.
44
-
45
-
46
-
47
-
>[!TIP]
48
-
>Looking for how to view and manage recommendations using Microsoft Graph? Check out the Microsoft Graph section of the **[How to use Azure AD recommendations](howto-use-recommendations.md#use-microsoft-graph-with-azure-active-directory-recommendations)** article.
49
-
>
50
-
51
-
## Recommendation details
52
-
53
-
Each recommendation provides the same set of details that explain what the recommendation is, why it's important, and how to fix it.
54
-
55
-
The **Status** of a recommendation can be updated manually or automatically by the system. If all resources are addressed according to the action plan, the status automatically changes to *Completed* the next time the recommendations service runs. The recommendation service runs every 24-48 hours, depending on the recommendation.
56
-
57
-
The **Priority** of a recommendation could be low, medium, or high. These values are determined by several factors, such as security implications, health concerns, or potential breaking changes.
58
-
59
-
-**High**: Must do. Not acting will result in severe security implications or potential downtime.
60
-
-**Medium**: Should do. No severe risk if action isn't taken.
61
-
-**Low**: Might do. No security risks or health concerns if action isn't taken.
62
38
63
-
The **Impacted resources** for a recommendation could be things like applications or users. This detail gives you an idea of what type of resources you need to address. The impacted resource could also be at the tenant level, so you may need to make a global change.
64
-
65
-
66
-
67
-
The **Status description** tells you the date the recommendation status changed and if it was changed by the system or a user.
68
-
69
-
The recommendation's **Value** is an explanation of why completing the recommendation will benefit you, and the value of the associated feature.
70
-
71
-
The **Action plan** provides step-by-step instructions to implement a recommendation. May include links to relevant documentation or direct you to other pages in the Azure AD portal.
72
-
73
-
## Roles and licenses
39
+
## How it works
74
40
75
-
| Azure AD role | Access type |
76
-
|---- |---- |
77
-
| Reports Reader | Read-only |
78
-
| Security Reader | Read-only |
79
-
| Global Reader | Read-only |
80
-
| Cloud apps Administrator | Update and read |
81
-
| Apps Administrator | Update and read |
82
-
| Security Operator | Update and read |
83
-
| Security Administrator | Update and read |
41
+
On a daily basis, Azure AD analyzes the configuration of your tenant. During this analysis, Azure AD compares the data of a recommendation with the actual configuration of your tenant. If a recommendation is flagged as applicable to your tenant, the recommendation appears in the **Recommendations** section of the Azure AD Overview area. The recommendations are listed in order of priority so you can quickly determine where to focus first.
84
42
85
-
The Azure AD recommendations feature is automatically enabled. If you'd like to disable this feature, go to **Azure AD** > **Preview features**. Locate the **Recommendations** feature, and change the **State**.
43
+
86
44
87
-
Azure AD only displays the recommendations that apply to your tenant, so you may not see all supported recommendations listed. Currently, all recommendations are available in all tenants, regardless of the license type.
45
+
Each recommendation contains a description, a summary of the value of addressing the recommendation, and a step-by-step action plan. If applicable, impacted resources associated with the recommendation are listed, so you can resolve each affected area. If a recommendation doesn't have any associated resources, the impacted resource type is *Tenant level*, so your step-by-step action plan impacts the entire tenant and not just a specific resource.
88
46
89
-
###Recommendation availability and license requirements
47
+
## Recommendation availability and license requirements
90
48
91
-
The recommendations listed in the following table are currently available as a public preview or general availability. The license requirements for recommendations in public preview are subject to change. The table provides the impacted resources and links to available documentation.
49
+
The recommendations listed in the following table are currently available in public preview or general availability. The license requirements for recommendations in public preview are subject to change. The table provides the impacted resources and links to available documentation.
0 commit comments