Merge pull request #304113 from MicrosoftDocs/main

Auto Publish – main to live - 2025-08-12 11:00 UTC

Author: learn-build-service-prod[bot]

articles/automation/whats-new.md

@@ -4,7 +4,7 @@ description: Significant updates to Azure Automation updated each month.
 services: automation
 ms.subservice:
 ms.topic: overview
-ms.date: 06/27/2025
+ms.date: 08/12/2025
 ms.custom: references_regions
 ms.author: v-jasmineme
 author: jasminemehndir
@@ -23,6 +23,12 @@ Azure Automation receives improvements on an ongoing basis. To stay up to date w
 
 This page is updated monthly, so revisit it regularly. If you're looking for items older than six months, you can find them in [Archive for What's new in Azure Automation](whats-new-archive.md).
 
+## August 2025
+
+### Deployment resumption: Azure Automation revised Service and Subscription limits
+
+After a brief hiatus, Azure Automation is resuming deployments of the revised Service and Subscription limits from August 11, 2025. This update will ensure fair distribution of cloud resources across all customers and further improve reliability and performance of the service. Since the resource requirements vary across organizations and evolve over time, we are empowering customers to configure their quotas based on actual usage. You can find the complete list of Azure Automation limits [here](automation-subscription-limits-faq.md). You can check the current usage and limits for Automation accounts and concurrently running jobs and request for changes by creating a support request under the category Service and Subscription limits (Quotas) -> Azure Automation. [Learn more](automation-limits-quotas.md).
+
 ## June 2025
 
 ### General Availability: Azure Automation supports PowerShell 7.4 and Python 3.10 runbooks

articles/backup/azure-kubernetes-service-cluster-backup-concept.md

@@ -5,7 +5,7 @@ ms.topic: overview
 ms.service: azure-backup
 ms.custom:
   - ignite-2023
-ms.date: 01/30/2025
+ms.date: 08/12/2025
 author: AbhishekMallick-MS
 ms.author: v-mallicka
 # Customer intent: As a cloud administrator, I want to understand the prerequisites for backing up Azure Kubernetes Service clusters, so that I can successfully implement backup and restore operations using Azure Backup and ensure data protection for my containerized workloads.
@@ -36,7 +36,16 @@ Azure Backup now allows you to back up AKS clusters (cluster resources and persi
   >[!Note]
   >Both of these core components are deployed with aggressive hard limits on CPU and memory, with CPU *less than 0.5% of a core* and memory limit ranging from *50-200 MB*. So, the *COGS impact* of these components is very low. Because they are core platform components, there is no workaround available to remove them once installed in the cluster.
 
-- If Storage Account, to be provided as input for Extension installation, is under Virtual Network/Firewall, then BackupVault needs to be added as trusted access in Storage Account Network Settings. [Learn how to grant access to trusted Azure service](../storage/common/storage-network-security.md?tabs=azure-portal#grant-access-to-trusted-azure-services), which helps to store backups in the Vault datastore
+- If the storage account you provide as an input for the extension installation uses any network restrictions (private endpoints or the Azure Storage firewall), then grant the backup vault specific access to the storage account by following these steps:
+
+    1. [Grant access to a resource instance](../storage/common/storage-network-security-resource-instances.md). Use these settings:
+
+          - **Resource type**: `Microsoft.DataProtection/BackupVaults`           
+          - **Instance name**: Instance name of managed identity.
+
+    1. Enable *Allow Azure services on the trusted service list to access this storage account.* 
+
+        For more information about Azure Storage network security, see [Azure Storage firewall rules](../storage/common/storage-network-security.md).
 
 - The blob container provided in input during extension installation should not contain any files unrelated to backup.   
 
@@ -77,7 +86,7 @@ To enable backup for an AKS cluster, see the following prerequisites: .
 
 - If you have any previous installation of *Velero* in the AKS cluster, you need to delete it before installing Backup Extension.
 
-[!NOTE]
+>[!NOTE]
 >
 >The Velero CRDs installed in the cluster are shared between AKS Backup and the customer’s own Velero installation. However, the versions used by each installation may differ, potentially leading to failures due to contractmismatches.
 >

articles/batch/batch-role-based-access-control.md

@@ -2,7 +2,7 @@
 title: Role-based access control for Azure Batch service
 description: Learn how to use Azure role-based access control for managing individual access to Azure Batch account.
 ms.topic: how-to
-ms.date: 04/02/2025
+ms.date: 08/07/2025
 # Customer intent: As a cloud administrator, I want to manage role-based access to the Azure Batch service, so that I can control user permissions and ensure secure and efficient operation of batch processing tasks.
 ---
 
@@ -74,11 +74,11 @@ Grants full access to manage all Batch resources, including Batch accounts, pool
 > | [Microsoft.Insights](/azure/role-based-access-control/permissions/monitor#microsoftinsights)/alertRules/* | Create and manage a classic metric alert. |
 > | [Microsoft.Resources](/azure/role-based-access-control/permissions/management-and-governance#microsoftresources)/deployments/* | Create and manage a deployment. |
 > | [Microsoft.Resources](/azure/role-based-access-control/permissions/management-and-governance#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
-> | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/batchAccounts/* |  |
+> | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/* |  |
 > | **NotActions** |  |
 > | *none* |  |
 > | **DataActions** |  |
-> | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/batchAccounts/* |  |
+> | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/* |  |
 > | **NotDataActions** |  |
 > | *none* |  |
 
@@ -93,13 +93,13 @@ Grants full access to manage all Batch resources, including Batch accounts, pool
         {
             "actions": [
                 "Microsoft.Authorization/*/read",
-                "Microsoft.Batch/batchAccounts/*",
+                "Microsoft.Batch/*",
                 "Microsoft.Insights/alertRules/*",
                 "Microsoft.Resources/deployments/*",
                 "Microsoft.Resources/subscriptions/resourceGroups/read"
             ],
             "dataActions": [
-                "Microsoft.Batch/batchAccounts/*"
+                "Microsoft.Batch/*"
             ],
             "notActions": [],
             "notDataActions": []
@@ -117,8 +117,7 @@ Lets you view all resources including pools and jobs in the Batch account.
 
 > | Actions | Description |
 > | --- | --- |
-> | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/batchAccounts/read | Lists Batch accounts or gets the properties of a Batch account. |
-> | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/batchAccounts/*/read | View all resources in Batch account. |
+> | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/*/read | View all resources in Batch account. |
 > | [Microsoft.Resources](/azure/role-based-access-control/permissions/management-and-governance#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
 > | **NotActions** |  |
 > | *none* |  |
@@ -137,12 +136,11 @@ Lets you view all resources including pools and jobs in the Batch account.
     "permissions": [
         {
             "actions": [
-                "Microsoft.Batch/batchAccounts/read",
-                "Microsoft.Batch/batchAccounts/*/read",
+                "Microsoft.Batch/*/read",
                 "Microsoft.Resources/subscriptions/resourceGroups/read"
             ],
             "dataActions": [
-                "Microsoft.Batch/batchAccounts/*/read"
+                "Microsoft.Batch/*/read"
             ],
             "notActions": [],
             "notDataActions": []
@@ -163,8 +161,8 @@ Grants permissions to manage Batch pools and jobs but not to modify accounts.
 > | [Microsoft.Authorization](/azure/role-based-access-control/permissions/management-and-governance#microsoftauthorization)/*/read | Read roles and role assignments. |
 > | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/batchAccounts/read | Lists Batch accounts or gets the properties of a Batch account. |
 > | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/batchAccounts/applications/* | Create and manage applications and application packages on a Batch account. |
-> | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/batchAccounts/certificates/* | Create and manage certificates on a Batch account. |
-> | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/batchAccounts/certificateOperationResults/* | Gets the results of a long running certificate operation on a Batch account. |
+> | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/batchAccounts/certificates/* | Create and manage certificates on a Batch account. (Warning: [Certificate feature was retired](./batch-certificate-migration-guide.md#feature-end-of-support)) |
+> | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/batchAccounts/certificateOperationResults/* | Gets the results of a long running certificate operation on a Batch account. (Warning: [Certificate feature was retired](./batch-certificate-migration-guide.md#feature-end-of-support)) |
 > | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/pools/* | Create and manage pools on a Batch account. | 
 > | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/poolOperationResults/* | Gets the results of a long running pool operation on a Batch account. | 
 > | [Microsoft.Batch](/azure/role-based-access-control/permissions/compute#microsoftbatch)/locations/*/read | Get Batch account operation result/Batch quota/supported VM size at the given location. |
@@ -278,8 +276,8 @@ If Azure Batch built-in roles don't meet your needs, [Azure custom roles](../rol
 - Microsoft.Batch/batchAccounts/jobs/delete
 - Microsoft.Batch/batchAccounts/jobs/read
 - Microsoft.Batch/batchAccounts/certificates/write
-- Microsoft.Batch/batchAccounts/certificates/delete
-- Microsoft.Batch/batchAccounts/certificates/read
+- Microsoft.Batch/batchAccounts/certificates/delete (Warning: [Certificate feature was retired](./batch-certificate-migration-guide.md#feature-end-of-support))
+- Microsoft.Batch/batchAccounts/certificates/read (Warning: [Certificate feature was retired](./batch-certificate-migration-guide.md#feature-end-of-support))
 - Microsoft.Batch/batchAccounts/applications/write
 - Microsoft.Batch/batchAccounts/applications/delete
 - Microsoft.Batch/batchAccounts/applications/read

articles/sap/automation/integration-sap-cloud-application-library.md

@@ -4,7 +4,7 @@ description: Learn how to integrate SAP Cloud Appliance Library with SAP Deploym
 author: nnoaman
 ms.author: nadeennoaman
 ms.reviewer: kimforss
-ms.date: 10/24/2024
+ms.date: 08/12/2025
 ms.topic: how-to
 ms.service: sap-on-azure
 ms.subservice: sap-automation
@@ -14,6 +14,9 @@ ms.subservice: sap-automation
 
 The integration between SAP Deployment Automation Framework (SDAF) and [SAP Cloud Appliance Library (CAL)](https://cal.sap.com/catalog#/solutions) offers a seamless experience for customers who want to deploy infrastructure by using SDAF's guided deployment. You can use Azure Pipelines or the provided shell scripts for deployment.
 
+> [!IMPORTANT]
+> The SAP Systems Management API will be deprecated on September 30, 2025, and decommissioned on December 2, 2025. After decommissioning, the SAP Cloud Appliance Library (CAL) integration with the SAP Deployment Automation Framework (SDAF) will no longer be available.
+
 ## Introduction to SAP Cloud Appliance Library
 
 [SAP Cloud Appliance Library](https://cal.sap.com/) is a cloud-based solution that simplifies the deployment and management of preconfigured SAP solutions on cloud platforms like Azure. SAP CAL offers a catalog of preconfigured SAP software solutions (for example, S/4 HANA and SAP Business Suite). You can deploy these solutions on your cloud of choice without needing to manually install or configure software.