Merge pull request #234740 from MicrosoftDocs/repo_sync_working_branch

Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-docs (branch main)

Author: huypub

articles/active-directory/multi-tenant-organizations/cross-tenant-synchronization-configure.md

@@ -522,6 +522,28 @@ $smssignin = Get-MgUserAuthenticationPhoneMethod -UserId $userId
 ##### End the script
 ```
 
+#### Symptom - Users fail to provision with error "AzureActiveDirectoryForbidden"
+
+Users in scope fail to provision. The provisioning logs details include the following error message:
+
+```
+The provisioning service was forbidden from performing an operation on Azure Active Directory, which is unusual. 
+A simultaneous change to the target object may have occurred, in which case, the operation might succeed when it is retried.
+Alternatively, the target of the operation, or one of its properties, may be mastered on-premises, in which case, 
+the provisioning service is not permitted to update it, and the corresponding source entry should be removed from the provisioning service's scope.
+Otherwise, authorizations may have been customized in such a way as to prevent the provisioning service from modifying the target object or one of its properties; 
+if so, then, again, the corresponding source entry should be removed from scope. 
+This operation was retried 0 times. 
+```
+
+**Cause**
+
+This error indicates the Guest invite settings in the target tenant are configured with the most restrictive setting: "No one in the organization can invite guest users including admins (most restrictive)".
+
+**Solution**
+
+Change the Guest invite settings in the target tenant to a less restrictive setting. For more information, see [Configure external collaboration settings](../external-identities/external-collaboration-settings-configure.md).
+
 ## Next steps
 
 - [Tutorial: Reporting on automatic user account provisioning](../app-provisioning/check-status-user-account-provisioning.md)

articles/aks/azure-csi-disk-storage-provision.md

@@ -130,30 +130,30 @@ Once the persistent volume claim has been created and the disk successfully prov
 
 1. Create a file named `azure-pvc-disk.yaml`, and copy in the following manifest: 
 
-      ```yaml
-      kind: Pod
-      apiVersion: v1
-      metadata:
-        name: mypod
-      spec:
-        containers:
-       - name: mypod
+    ```yaml
+    kind: Pod
+    apiVersion: v1
+    metadata:
+      name: mypod
+    spec:
+      containers:
+        - name: mypod
           image: mcr.microsoft.com/oss/nginx/nginx:1.15.5-alpine
           resources:
             requests:
-               cpu: 100m
-               memory: 128Mi
+              cpu: 100m
+              memory: 128Mi
             limits:
               cpu: 250m
               memory: 256Mi
           volumeMounts:
-         - mountPath: "/mnt/azure"
-            name: volume
-        volumes:
-         - name: volume
-            persistentVolumeClaim:
-              claimName: azure-managed-disk
-       ```
+            - mountPath: "/mnt/azure"
+              name: volume
+      volumes:
+        - name: volume
+          persistentVolumeClaim:
+            claimName: azure-managed-disk
+    ```
 
 2. Create the pod with the [kubectl apply][kubectl-apply] command, as shown in the following example:
 

articles/azure-maps/how-to-manage-pricing-tier.md

@@ -1,5 +1,6 @@
 ---
-title: Manage your Azure Maps account's pricing tier | Microsoft Azure Maps 
+title: Manage your Azure Maps account's pricing tier
+titleSuffix: Microsoft Azure Maps
 description: You can use the Azure portal to manage your Microsoft Azure Maps account and its pricing tier.
 author: eriklindeman
 ms.author: eriklind
@@ -11,12 +12,12 @@ services: azure-maps
 
 # Manage the pricing tier of your Azure Maps account
 
-You can manage the pricing tier of your Azure Maps account through the Azure portal. You can also view or change your account's pricing tier after you create an [account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
+You can manage the pricing tier of your Azure Maps account through the Azure portal. You can also view or change your account's pricing tier after you create an [Azure account].
 
-Get more information about [choosing the right pricing tier in Azure Maps](./choose-pricing-tier.md).
+Get more information about [choosing the right pricing tier in Azure Maps].
 
->[!NOTE]
->Switching to Gen 1 pricing tier is not available for Gen 2 Azure Maps Creator customers.  Gen 1 Azure Maps Creator will be deprecated on 8/6/2021.
+> [!NOTE]
+> Switching to Gen 1 pricing tier is not available for Gen 2 Azure Maps Creator customers.  Gen 1 Azure Maps Creator will be deprecated on 8/6/2021.
 
 ## View your pricing tier
 
@@ -26,19 +27,20 @@ To view your chosen pricing tier, navigate to the **Pricing Tier** option in the
 
 ## Change a pricing tier
 
-After you create your Azure Maps account, you can upgrade or downgrade the pricing tier for your Azure Maps account. To upgrade or downgrade, navigate to the **Pricing Tier** option in the settings menu. Select the pricing tier from drop down list.  Note – current pricing tier will be default selection.  Select the **Save** button to save your chosen pricing tier option.
+After you create your Azure Maps account, you can upgrade or downgrade the pricing tier for your Azure Maps account. To upgrade or downgrade, navigate to the **Pricing Tier** option in the settings menu. Select the pricing tier from drop down list.  Note – current pricing tier is the default selection.  Select the **Save** button to save your chosen pricing tier option.
 
 > [!NOTE]
 > You don't have to generate new subscription keys or client ID (for Azure AD authentication) if you upgrade or downgrade the pricing tier for your Azure Maps account.
 
-
 :::image type="content" source="./media/how-to-manage-pricing-tier/change-pricing-tier.png" border="true" alt-text="Change a pricing tier":::
 
-
-
 ## Next steps
 
 Learn how to see the API usage metrics for your Azure Maps account:
 
-> [!div class="nextstepaction"]	
-> [View usage metrics](./how-to-view-api-usage.md)
+> [!div class="nextstepaction"]
+> [View usage metrics]
+
+[Azure account]: https://azure.microsoft.com/free/?WT.mc_id=A261C142F
+[View usage metrics]: how-to-view-api-usage.md
+[choosing the right pricing tier in Azure Maps]: choose-pricing-tier.md