Skip to content

Commit 41dbdaf

Browse files
committed
pm-edits
1 parent f6619a9 commit 41dbdaf

File tree

2 files changed

+35
-20
lines changed

2 files changed

+35
-20
lines changed
18.7 KB
Loading

articles/active-directory/reports-monitoring/overview-recommendations.md

Lines changed: 35 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -22,12 +22,13 @@ ms.collection: M365-identity-device-management
2222

2323
This feature is supported as part of a public preview. For more information about previews, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
2424

25-
Ideally, you want your Azure Active Directory (Azure AD) tenant to be in a secure and healthy state. However, keeping track of all the settings and resources in your tenant can be overwhelming. Azure AD recommendations feature helps keep track of the status of your tenant so you don't have to.
25+
Keeping track of all the settings and resources in your tenant can be overwhelming. The Azure AD recommendations (preview) feature helps monitor the status of your tenant so you don't have to. Azure AD recommendations helps ensure your tenant is in a secure and healthy state while also helping you maximize the value of the features available in Azure AD.
2626

2727
The Azure AD recommendations feature provides you personalized insights with actionable guidance to:
2828

2929
- Help you identify opportunities to implement best practices for Azure AD-related features.
3030
- Improve the state of your Azure AD tenant.
31+
- Optimize the configurations for your scenarios.
3132

3233
This article gives you an overview of how you can use Azure AD recommendations. As an administrator, you should review your tenant's recommendations, and their associated resources periodically.
3334

@@ -41,7 +42,7 @@ Azure AD recommendations is the Azure AD specific implementation of [Azure Advis
4142

4243
On a daily basis, Azure AD analyzes the configuration of your tenant. During this analysis, Azure AD compares the data of a recommendation with the actual configuration of your tenant. If a recommendation is flagged as applicable to your tenant, the recommendation appears in the **Recommendations** section of the Azure AD Overview area. Recommendations are listed in order of priority so you can quickly determine where to focus first.
4344

44-
Recommendations contain a description, a summary of the value of addressing the recommendation, and a step-by-step action plan. All impacted resources are listed, so you can resolve each affected area.
45+
Recommendations contain a description, a summary of the value of addressing the recommendation, and a step-by-step action plan. If applicable, impacted resources that are associated with the recommendation are listed, so you can resolve each affected area. If a recommendation doesn't have any associated resources, the impacted resource type is *Tenant level*. so your step-by-step action plan impacts the entire tenant and not just a specific resource.
4546

4647
![Screenshot of the Overview page of the tenant with the Recommendations option highlighted.](./media/overview-recommendations/recommendations-preview-option-tenant-overview.png)
4748

@@ -53,21 +54,12 @@ The **Status** of a recommendation can be updated manually or automatically. If
5354

5455
![Screenshot of the Mark as options.](./media/overview-recommendations/recommendations-object.png)
5556

56-
- Mark a recommendation as **Completed** if all impacted resources have been addressed.
57-
- Active resources may still appear in the list of resources for manually completed recommendations. If the resource is completed, the service will update the status the next time the service runs.
58-
- If the service identifies an active resource for a manually completed recommendation the next time the service runs, the recommendation will automatically change back to **Active**.
59-
- Mark a recommendation as **Dismissed** if you think the recommendation is irrelevant or the data is wrong.
60-
- Azure AD will ask for a reason why you dismissed the recommendation so we can improve the service.
61-
- Mark a recommendation as **Postponed** if you want to address the recommendation at a later time.
62-
- The recommendation will become **Active** when the selected date occurs.
63-
- You can reactivate a completed or postponed recommendation to keep it top of mind and reassess the resources.
64-
65-
The **Priority** of a recommendation could be low, medium, or high. These values are determined by a variety of factors, such as security implications or expiring credentials.
57+
The **Priority** of a recommendation could be low, medium, or high. These values are determined by several factors, such as security implications, health concerns, or potential breaking changes.
6658

6759
![Screenshot of a recommendation's status, priority, and impacted resource type.](./media/overview-recommendations/recommendation-status-risk.png)
6860

69-
- **High**: Must do. Not acting will result in security implications or potential downtime.
70-
- **Medium**: Should do. Actions will improve your tenant's health, but no risk if action isn't taken.
61+
- **High**: Must do. Not acting will result in severe security implications or potential downtime.
62+
- **Medium**: Should do. No severe risk if action isn't taken.
7163
- **Low**: Might do. No security risks or health concerns if action isn't taken.
7264

7365
The **Impacted resources** for a recommendation could be things like applications or users. This detail gives you an idea of what type of resources you'll need to address. The impacted resource could also be at the tenant level, so you may need to make a global change.
@@ -76,7 +68,7 @@ The **Status description** tells you the date the recommendation status changed
7668

7769
The recommendation's **Value** is an explanation of why completing the recommendation will benefit you, and the value of the associated feature.
7870

79-
The **Action plan** provides step-by-step instructions to implement a recommendation.
71+
The **Action plan** provides step-by-step instructions to implement a recommendation. May include links to relevant documentation or direct you to other pages in the Azure AD portal.
8072

8173
## What you should know
8274

@@ -86,7 +78,7 @@ The following roles provide *read-only* access to recommendations:
8678
- Security Reader
8779
- Global Reader
8880

89-
The following roles provide *update* access to recommendations:
81+
The following roles provide *update and read-only* access to recommendations:
9082

9183
- Global Administrator
9284
- Security Administrator
@@ -96,25 +88,48 @@ The following roles provide *update* access to recommendations:
9688

9789
Any role can enable the Azure AD recommendations preview, but you'll need one of the roles listed above to view or update recommendations. Azure AD only displays the recommendations that apply to your tenant, so you may not see all supported recommendations listed.
9890

99-
Some recommendations have a list of impacted resources associated. This list of resources gives you more context on how the recommendation applies to you and/or which resources you need to address. The only action recorded in the audit log is completing recommendations.
91+
Some recommendations have a list of impacted resources associated. This list of resources gives you more context on how the recommendation applies to you and/or which resources you need to address. The only action recorded in the audit log is completing recommendations. Actions taken on a recommendation are collected in the audit log. To view these logs, go to **Azure AD** > **Audit logs** and filter the service to "Azure AD recommendations."
10092

10193
## How to access Azure AD recommendations (preview)
10294

10395
To enable the Azure AD recommendations preview:
10496

10597
1. Sign in to the [Azure portal](https://portal.azure.com/).
10698

107-
1. Go to **Azure Active Directory** > **Preview features** and enable **Azure AD recommendations.**
99+
1. Go to **Azure AD** > **Preview features** and enable **Azure AD recommendations.**
108100
- Recommendations may take a few minutes to sync.
109101
- While anyone can enable the preview feature, you'll need a [specific role](overview-recommendations.md#what-you-should-know) to view or update a recommendation.
110102

111103
![Screenshot of the Enable Azure AD recommendations option](./media/overview-recommendations/enable-azure-ad-recommendations.png)
112104

113105
After the preview is enabled, you can view the available recommendations from the Azure AD administration portal. The Azure AD recommendations feature appears on the **Overview** page of your tenant.
114106

115-
Select a recommendation from the list to view the details, status, and action plan. Recommendations are listed in priority order, from high to low.
107+
## How to use Azure AD recommendations (preview)
108+
109+
1. Go to **Azure AD** > **Recommendations**.
110+
111+
1. Select a recommendation from the list to view the details, status, and action plan.
112+
113+
![Screenshot of the list of recommendations.](./media/overview-recommendations/recommendations-list.png)
114+
115+
1. Follow the **Action plan**.
116+
117+
1. If applicable, right-click on a resource in a recommendation, select **Mark as**, then select a status.
118+
119+
![Screenshot of the status options for a resource.](./media/overview-recommendations/resource-mark-as-option.png)
120+
121+
1. If you need to manually change the status of a recommendation, select **Mark as** from the top of the page and select a status.
122+
123+
- Mark a recommendation as **Completed** if all impacted resources have been addressed.
124+
- Active resources may still appear in the list of resources for manually completed recommendations. If the resource is completed, the service will update the status the next time the service runs.
125+
- If the service identifies an active resource for a manually completed recommendation the next time the service runs, the recommendation will automatically change back to **Active**.
126+
- Mark a recommendation as **Dismissed** if you think the recommendation is irrelevant or the data is wrong.
127+
- Azure AD will ask for a reason why you dismissed the recommendation so we can improve the service.
128+
- Mark a recommendation as **Postponed** if you want to address the recommendation at a later time.
129+
- The recommendation will become **Active** when the selected date occurs.
130+
- You can reactivate a completed or postponed recommendation to keep it top of mind and reassess the resources.
116131

117-
![Screenshot of the list of recommendations.](./media/overview-recommendations/recommendations-list.png)
132+
Continue to monitor the recommendations in your tenant for changes.
118133

119134
## Next steps
120135

0 commit comments

Comments
 (0)