ts_hbase7

Author: dagiro

articles/active-directory/saas-apps/amazon-web-service-tutorial.md

@@ -52,16 +52,17 @@ Now you can start using the cmdlets in the module. For a full description of the
 1. Create a new role using the following PowerShell script.
 
 ``` PowerShell
+## Assign a role to a user or service principal with resource scope
 # Get the user and role definition you want to link
- $user = Get-AzureADMSUser -Filter "userPrincipalName eq '[email protected]'"
+$user = Get-AzureADUser -Filter "userPrincipalName eq '[email protected]'"
 $roleDefinition = Get-AzureADMSRoleDefinition -Filter "displayName eq 'Application Support Administrator'"
 
 # Get app registration and construct resource scope for assignment.
-    "displayName eq 'f/128 Filter Photos'"
-$resourceScopes = '/' + $appRegistration.objectId
+$appRegistration = Get-AzureADApplication -Filter "displayName eq 'f/128 Filter Photos'"
+$resourceScope = '/' + $appRegistration.objectId
 
 # Create a scoped role assignment
-$roleAssignment = New-AzureADMSRoleAssignment -ResourceScopes $resourceScopes -RoleDefinitionId $roleDefinition.objectId -PrincipalId $user.objectId
+$roleAssignment = New-AzureADMSRoleAssignment -ResourceScope $resourceScope -RoleDefinitionId $roleDefinition.Id -PrincipalId $user.objectId
 ```
 
 To assign the role to a service principal instead of a user, use the [Get-AzureADMSServicePrincipal cmdlet](https://docs.microsoft.com/powershell/module/azuread/get-azureadserviceprincipal?view=azureadps-2.0).
@@ -74,24 +75,20 @@ Role definition objects contain the definition of the built-in or custom role, a
 
 ``` PowerShell
 # Basic information
-
-$description = "Application Registration Credential Administrator"
-$displayName = "Custom Demo Admin"
-$resourceScopes = @('/')
-$templateId = "355aed8a-864b-4e2b-b225-ea95482e7570"
+$description = "Can manage credentials of application registrations"
+$displayName = "Application Registration Credential Administrator"
+$templateId = (New-Guid).Guid
 
 # Set of actions to grant
 $allowedResourceAction =
 @(
-    "microsoft.directory/applications/default/read",
+    "microsoft.directory/applications/standard/read",
     "microsoft.directory/applications/credentials/update"
 )
-$resourceActions = @{'allowedResourceActions'= $allowedResourceAction}
-$rolePermission = @{'resourceActions' = $resourceActions}
-$rolePermissions = $rolePermission
+$rolePermissions = @{'allowedResourceActions'= $allowedResourceAction}
 
 # Create new custom admin role
-$customAdmin = New-AzureADMSRoleDefinitions -RolePermissions $rolePermissions -ResourceScopes $resourceScopes -DisplayName $displayName -Description $description -TemplateId $templateId -IsEnabled $true
+$customAdmin = New-AzureADMSRoleDefinition -RolePermissions $rolePermissions -DisplayName $displayName -Description $description -TemplateId $templateId -IsEnabled $true
 ```
 
 ### Read Operations on RoleDefinition
@@ -101,10 +98,10 @@ $customAdmin = New-AzureADMSRoleDefinitions -RolePermissions $rolePermissions -R
 Get-AzureADMSRoleDefinitions
 
 # Get single role definition by objectId
-$customAdmin = Get-AzureADMSRoleDefinitions -ObjectId '86593cfc-114b-4a15-9954-97c3494ef49b'
+Get-AzureADMSRoleDefinition -Id 86593cfc-114b-4a15-9954-97c3494ef49b
 
 # Get single role definition by templateId
-$customAdmin = Get-AzureADMSRoleDefinitions -Filter "templateId eq '355aed8a-864b-4e2b-b225-ea95482e757not
+Get-AzureADMSRoleDefinition -Filter "templateId eq 'c4e39bd9-1100-46d3-8c65-fb160da0071f'"
 ```
 
 ### Update Operations on RoleDefinition
@@ -113,14 +110,14 @@ $customAdmin = Get-AzureADMSRoleDefinitions -Filter "templateId eq '355aed8a-864
 # Update role definition
 # This works for any writable property on role definition. You can replace display name with other
 # valid properties.
-Set-AzureADMSRoleDefinitions -ObjectId $customAdmin.ObjectId -DisplayName "Updated DisplayName"
+Set-AzureADMSRoleDefinition -Id c4e39bd9-1100-46d3-8c65-fb160da0071f -DisplayName "Updated DisplayName"
 ```
 
 ### Delete operations on RoleDefinition
 
 ``` PowerShell
 # Delete role definition
-Remove-AzureADMSRoleDefinitions -ObjectId $customAdmin.ObjectId
+Remove-AzureADMSRoleDefinitions -Id c4e39bd9-1100-46d3-8c65-fb160da0071f
 ```
 
 ## Operations on RoleAssignment
@@ -130,32 +127,33 @@ Role assignments contain information linking a given security principal (a user
 ### Create Operations on RoleAssignment
 
 ``` PowerShell
-# Scopes to scope granted permissions to
-$resourceScopes = @('/')
+# Get the user and role definition you want to link
+$user = Get-AzureADUser -Filter "userPrincipalName eq '[email protected]'"
+$roleDefinition = Get-AzureADMSRoleDefinition -Filter "displayName eq 'Application Support Administrator'"
 
-# IDs of principal and role definition you want to link
-$principalId = "27c8ca78-ab1c-40ae-bd1b-eaeebd6f68ac"
-$roleDefinitionId = $customKeyCredAdmin.ObjectId
+# Get app registration and construct resource scope for assignment.
+$appRegistration = Get-AzureADApplication -Filter "displayName eq 'f/128 Filter Photos'"
+$resourceScope = '/' + $appRegistration.objectId
 
 # Create a scoped role assignment
-$roleAssignment = New-AzureADMSRoleAssignments -ResourceScopes $resourceScopes -RoleDefinitionId -PrincipalId $principalId
+$roleAssignment = New-AzureADMSRoleAssignment -ResourceScope $resourceScope -RoleDefinitionId $roleDefinition.Id -PrincipalId $user.objectId
 ```
 
 ### Read Operations on RoleAssignment
 
 ``` PowerShell
 # Get role assignments for a given principal
-Get-AzureADMSRoleAssignments -Filter "principalId eq '27c8ca78-ab1c-40ae-bd1b-eaeebd6f68ac'"
+Get-AzureADMSRoleAssignment -Filter "principalId eq '27c8ca78-ab1c-40ae-bd1b-eaeebd6f68ac'"
 
 # Get role assignments for a given role definition 
-Get-AzureADMSRoleAssignments -Filter "principalId eq '355aed8a-864b-4e2b-b225-ea95482e7570'"
+Get-AzureADMSRoleAssignment -Filter "roleDefinitionId eq '355aed8a-864b-4e2b-b225-ea95482e7570'"
 ```
 
 ### Delete Operations on RoleAssignment
 
 ``` PowerShell
 # Delete role assignment
-Remove-AzureADMSRoleAssignments -ObjectId $roleAssignment.ObjectId
+Remove-AzureADMSRoleAssignment -Id 'qiho4WOb9UKKgng_LbPV7tvKaKRCD61PkJeKMh7Y458-1'
 ```
 
 ## Next steps

articles/active-directory/users-groups-roles/roles-assign-powershell.md

@@ -88,20 +88,18 @@ Create a new role using the following PowerShell script:
 
 ``` PowerShell
 # Basic role information
-$description = "Application Support Administrator"
-$displayName = "Can manage basic aspects of application registrations."
+$displayName = "Application Support Administrator
+$description = "Can manage basic aspects of application registrations."
 $templateId = (New-Guid).Guid
-
+ 
 # Set of permissions to grant
 $allowedResourceAction =
 @(
     "microsoft.directory/applications/basic/update",
     "microsoft.directory/applications/credentials/update"
 )
-$resourceActions = @{'allowedResourceActions'= $allowedResourceAction}
-$rolePermission = @{'resourceActions' = $resourceActions}
-$rolePermissions = $rolePermission
-
+$rolePermissions = @{'allowedResourceActions'= $allowedResourceAction}
+ 
 # Create new custom admin role
 $customAdmin = New-AzureADMSRoleDefinition -RolePermissions $rolePermissions -DisplayName $displayName -Description $description -TemplateId $templateId -IsEnabled $true
 ```
@@ -113,14 +111,14 @@ Assign the role using the below PowerShell script:
 ``` PowerShell
 # Get the user and role definition you want to link
 $user = Get-AzureADUser -Filter "userPrincipalName eq '[email protected]'"
-$roleDefinition = Get-AzureADRoleDefinition -Filter "displayName eq ' Application Registration Creator'"
+$roleDefinition = Get-AzureADMSRoleDefinition -Filter "displayName eq 'Application Support Administrator'"
 
 # Get app registration and construct resource scope for assignment.
 $appRegistration = Get-AzureADApplication -Filter "displayName eq 'f/128 Filter Photos'"
-$resourceScopes = '/' + $appRegistration.objectId
+$resourceScope = '/' + $appRegistration.objectId
 
 # Create a scoped role assignment
-$roleAssignment = New-AzureADRoleAssignment -ResourceScopes $resourceScopes -RoleDefinitionId $roleDefinition.objectId -PrincipalId $user.objectId
+$roleAssignment = New-AzureADMSRoleAssignment -ResourceScope $resourceScope -RoleDefinitionId $roleDefinition.Id -PrincipalId $user.objectId
 ```
 
 ## Create a custom role using Microsoft Graph API
@@ -138,16 +136,20 @@ $roleAssignment = New-AzureADRoleAssignment -ResourceScopes $resourceScopes -Rol
     Body
 
     ``` HTTP
-    {
-    "description":"Can manage basic aspects of application registrations.",
-    "displayName":"Application Support Administrator",
-    "isEnabled":true,
-    "rolePermissions":
-    [
-        "microsoft.directory/applications/basic/update",
-        "microsoft.directory/applications/credentials/update"
-    ]
-    }
+   {
+       "description": "Can manage basic aspects of application registrations.",
+       "displayName": "Application Support Administrator",
+       "isEnabled": true,
+       "templateId": "<GUID>",
+       "rolePermissions": [
+           {
+               "allowedResourceActions": [
+                   "microsoft.directory/applications/basic/update",
+                   "microsoft.directory/applications/credentials/update"
+               ]
+           }
+       ]
+   }
     ```
 
 1. Create the role assignment.
@@ -163,11 +165,11 @@ $roleAssignment = New-AzureADRoleAssignment -ResourceScopes $resourceScopes -Rol
     Body
 
     ``` HTTP
-    {
-    "principalId":"<GUID OF USER>",
-    "roleDefinitionId":"<GUID OF ROLE DEFINITION>",
-    "resourceScope":["/<GUID OF APPLICATION REGISTRATION>"]
-    }
+   {
+       "principalId":"<GUID OF USER>",
+       "roleDefinitionId":"<GUID OF ROLE DEFINITION>",
+       "resourceScope":"/<GUID OF APPLICATION REGISTRATION>"
+   }
     ```
 
 ## Next steps

articles/active-directory/users-groups-roles/roles-create-custom.md

@@ -13,7 +13,7 @@ ms.workload: storage
 ms.tgt_pltfrm: na
 ms.devlang: na
 ms.topic: conceptual
-ms.date: 08/06/2019
+ms.date: 08/07/2019
 ms.author: b-juche
 ---
 # Metrics for Azure NetApp Files
@@ -24,28 +24,40 @@ Azure NetApp Files provides metrics on allocated storage, actual storage usage,
 
 <!-- 
 - *Volume pool allocated size*  
-    This is the size (GiB) of the provisioned capacity pool.  
+    The size (GiB) of the provisioned capacity pool  
 --> 
 - *Volume pool allocated used*  
-    This is the total of volume quota (GiB) in a given capacity pool (that is, the total of the volumes' provisioned sizes in the capacity pool). This is the size you selected during volume creation.  
+    The total of volume quota (GiB) in a given capacity pool (that is, the total of the volumes' provisioned sizes in the capacity pool)  
+    This is the size you selected during volume creation.  
 - *Volume pool total logical size*  
-    This is the total of logical space (GiB) used across volumes in a capacity pool.  
+    The total of logical space (GiB) used across volumes in a capacity pool  
 <!-- 
 - *Volume pool total snapshot size*  
-    This is the total of incremental logical space used by the snapshots.  
+    The total of incremental logical space used by the snapshots  
 -->
 
 ## <a name="volumes"></a>Usage metrics for volumes
 
 <!-- 
 - *Volume allocated size*   
-    This is the volume size (quota) provisioned in GiB.  
+    The volume size (quota) provisioned in GiB  
 --> 
 - *Volume logical size*   
-    This is the total logical space used in a volume (GiB). 
+    The total logical space used in a volume (GiB)  
     This size includes logical space used by active file systems and snapshots.  
 - *Volume snapshot size*   
-    This is the incremental logical space used by snapshots in a volume.  
+   The incremental logical space used by snapshots in a volume  
+
+## Performance metrics for volumes
+
+- *AverageReadLatency*   
+    The average time for reads from the volume in milliseconds
+- *AverageWriteLatency*   
+    The average time for writes from the volume in milliseconds
+- *ReadIops*   
+    The number of reads to the volume per second
+- *WriteIops*   
+    The number of writes to the volume per second
 
 ## Next steps
 

articles/azure-netapp-files/azure-netapp-files-metrics.md

@@ -13,12 +13,16 @@ ms.workload: storage
 ms.tgt_pltfrm: na
 ms.devlang: na
 ms.topic: conceptual
-ms.date: 06/24/2019
+ms.date: 08/07/2019
 ms.author: b-juche
 ---
 # Solution architectures using Azure NetApp Files
 This article provides references to best practices that can help you understand the solution architectures for using Azure NetApp Files.  
 
+## Solutions for Azure Kubernetes Service (AKS)
+
+[Azure NetApp Files integration with AKS](https://github.com/andyzhangx/demo/tree/master/linux/nfs)
+
 ## Solutions for Oracle database
 
 * [Oracle on Azure deployment best practice guide using Azure NetApp Files](https://www.netapp.com/us/media/tr-4780.pdf)

articles/azure-netapp-files/azure-netapp-files-solution-architectures.md

@@ -63,6 +63,8 @@
       href: ./hdinsight-hdfs-troubleshoot-safe-mode.md
     - name: Apache Ambari heartbeat issues
       href: ./apache-ambari-troubleshoot-heartbeat-issues.md
+    - name: Apache Ambari UI 502 error
+      href: ./apache-ambari-troubleshoot-fivezerotwo-error.md
     - name: Apache Ambari shows down hosts and services
       href: ./apache-ambari-troubleshoot-down-hosts-services.md
 - name: How to

articles/hdinsight/hadoop/TOC.yml

@@ -0,0 +1,70 @@
+---
+title: Apache Ambari UI 502 error in Azure HDInsight
+description: Apache Ambari UI 502 error in Azure HDInsight
+ms.service: hdinsight
+ms.topic: troubleshooting
+author: hrasheed-msft
+ms.author: hrasheed
+ms.date: 08/05/2019
+---
+
+# Scenario: Apache Ambari UI 502 error in Azure HDInsight
+
+This article describes troubleshooting steps and possible resolutions for issues when interacting with Azure HDInsight clusters.
+
+## Issue
+
+When you try to access the Apache Ambari UI for your HDInsight cluster, you get a message similar to: "502 - Web server received an invalid response while acting as a gateway or proxy server."
+
+## Cause
+
+In general, the HTTP 502 status code means that Ambari server is not running correctly on the active headnode. There are a few possible root causes.
+
+## Resolution
+
+In most of the cases, to mitigate the problem, you can restart the active headnode. Or choose a larger VM size for your headnode.
+
+### Ambari server failed to start
+
+You can check ambari-server logs to find out why Ambari server failed to start. One common reason is the database consistency check error. You can find this out in this log file: `/var/log/ambari-server/ambari-server-check-database.log`.
+
+If you made any modifications to the cluster node, please undo them. Always use Ambari UI to modify any Hadoop/Spark related configurations.
+
+### Ambari server taking 100% CPU utilization
+
+In rare situations, we’ve seen ambari-server process has close to 100% CPU utilization constantly. As a mitigation, you can ssh to the active headnode, and kill the Ambari server process and start it again.
+
+```bash
+ps -ef | grep AmbariServer
+top -p <ambari-server-pid>
+kill -9 <ambari-server-pid>
+service ambari-server start
+```
+
+### Ambari server killed by oom-killer
+
+In some scenarios, your headnode runs out of memory, and the Linux oom-killer starts to pick processes to kill. You can verify this situation by searching the AmbariServer process ID, which should not be found. Then look at your `/var/log/syslog`, and look for something like this:
+
+```
+Jul 27 15:29:30 hn0-xxxxxx kernel: [874192.703153] java invoked oom-killer: gfp_mask=0x23201ca, order=0, oom_score_adj=0
+```
+
+Then identify which processes are taking memories and try to further root cause.
+
+### Other issues with Ambari server
+
+Rarely the Ambari server cannot handle the incoming request, you can find more info by looking at the ambari-server logs for any error. One such case is an error like this:
+
+```
+Error Processing URI: /api/v1/clusters/xxxxxx/host_components - (java.lang.OutOfMemoryError) Java heap space
+```
+
+## Next steps
+
+If you didn't see your problem or are unable to solve your issue, visit one of the following channels for more support:
+
+* Get answers from Azure experts through [Azure Community Support](https://azure.microsoft.com/support/community/).
+
+* Connect with [@AzureSupport](https://twitter.com/azuresupport) - the official Microsoft Azure account for improving customer experience by connecting the Azure community to the right resources: answers, support, and experts.
+
+* If you need more help, you can submit a support request from the [Azure portal](https://portal.azure.com/?#blade/Microsoft_Azure_Support/HelpAndSupportBlade/). Select **Support** from the menu bar or open the **Help + support** hub. For more detailed information, please review [How to create an Azure support request](https://docs.microsoft.com/azure/azure-supportability/how-to-create-azure-support-request). Access to Subscription Management and billing support is included with your Microsoft Azure subscription, and Technical Support is provided through one of the [Azure Support Plans](https://azure.microsoft.com/support/plans/).

articles/hdinsight/hadoop/apache-ambari-troubleshoot-fivezerotwo-error.md

@@ -164,6 +164,8 @@
       href: ../hdinsight-troubleshoot-guide.md?toc=/azure/hdinsight/hbase/toc.json&bc=/azure/hdinsight/hbase/breadcrumb/toc.json
     - name: Issues with region servers
       href: ./hbase-troubleshoot-unassigned-regions.md
+    - name: Apache Phoenix connectivity issues
+      href: ./hbase-troubleshoot-phoenix-connectivity.md
     - name: Apache HBase REST not responding
       href: ./hbase-troubleshoot-rest-not-spending.md
     - name: Pegged CPU on region server