Merge pull request #287008 from MicrosoftDocs/main

9/19 11:00 AM IST Publish

Author: PhilKang0704

.openpublishing.redirection.json

@@ -1,5 +1,10 @@
 {
   "redirections": [
+    {
+      "source_path": "articles/governance/machine-configuration/whats-new/migrating-from-dsc-extension.md ",
+      "redirect_url": " https://azure.microsoft.com/updates/migrate-from-linux-dsc-extension-to-the-guest-configuration-feature-of-azure-policy-by-may-1-2025/",
+      "redirect_document_id": false
+    },
     {
       "source_path": "articles/vpn-gateway/vpn-gateway-about-forced-tunneling.md",
       "redirect_url": "/previous-versions/azure/vpn-gateway/vpn-gateway-about-forced-tunneling",

articles/app-service/routine-maintenance-downtime.md

@@ -447,6 +447,8 @@
       href: https://azure.microsoft.com/updates/?product=app-service
     - name: Routine maintenance
       href: routine-maintenance.md
+    - name: Routine maintenance, Restarts, and Downtime
+      href: routine-maintenance-downtime.md
     - name: Language support policy
       href: language-support-policy.md
     - name: OS functionality

articles/app-service/toc.yml

@@ -166,9 +166,9 @@ After the Update Management feature is enabled on Windows or Linux machines, you
 If you have more than 2,000 hybrid workers, to get a list of all of them, you can run the following PowerShell script:
 
 ```powershell
-"Get-AzSubscription -SubscriptionName "<subscriptionName>" | Set-AzContext
+Get-AzSubscription -SubscriptionName "<subscriptionName>" | Set-AzContext
 $workersList = (Get-AzAutomationHybridWorkerGroup -ResourceGroupName "<resourceGroupName>" -AutomationAccountName "<automationAccountName>").Runbookworker
-$workersList | export-csv -Path "<Path>\output.csv" -NoClobber -NoTypeInformation"
+$workersList | export-csv -Path "<Path>\output.csv" -NoClobber -NoTypeInformation
 ```
 
 ## Next steps

articles/automation/automation-hybrid-runbook-worker.md

@@ -4,7 +4,7 @@ description: This article provides details about the known issues of Azure VMwar
 ms.topic: reference
 ms.custom: "engagement-fy23"
 ms.service: azure-vmware
-ms.date: 7/30/2024
+ms.date: 9/18/2024
 ---
 
 # Known issues: Azure VMware Solution
@@ -31,6 +31,7 @@ Refer to the table to find details about resolution dates or possible workaround
 | Zerto DR isn't currently supported with the AV64 SKU. The AV64 SKU uses ESXi host secure boot and Zerto DR hasn't implemented a signed VIB for the ESXi install. | 2024  | Continue using the AV36, AV36P, and AV52 SKUs for Zerto DR. | N/A |
 | [VMSA-2024-0013 (CVE-2024-37085)](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505) VMware ESXi Active Directory Integration Authentication Bypass | July 2024 | Azure VMware Solution does not provide Active Directory integration and isn't vulnerable to this attack. | N/A |
 | AV36P SKU new private cloud deploys with vSphere 7, not vSphere 8. | September 2024 | The AV36P SKU is waiting for a Hotfix to be deployed, which will resolve this issue. | N/A |
+| [VMSA-2024-0019](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968)) Vulnerability in the DCERPC Protocol and Local Privilege Escalations | September 2024 | Microsoft, working with Broadcom, adjudicated the risk of CVE-2024-38812 at an adjusted Environmental Score of [6.8](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/MAC:L/MPR:H/MUI:R) and CVE-2024-38813 with an adjusted Environmental Score of [6.8](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/MAV:A/MAC:H/MPR:L/MUI:R). Adjustments from the base scores were possible due to the network isolation of the Azure VMware Solution vCenter Server DCERPC protocol access (ports 2012, 2014, and 2020 aren't exposed via any interactive network path) and multiple levels of authentication and authorization necessary to gain interactive access to the Azure VMware Solution vCenter Server. A plan is being put in place to address these vulnerabilities at a future date TBD. | N/A |
 
 In this article, you learned about the current known issues with the Azure VMware Solution.
 

articles/azure-vmware/azure-vmware-solution-known-issues.md

@@ -0,0 +1,182 @@
+---
+title: Discover your Microsoft cloud footprint FAQ
+description: This article helps to answer frequently asked questions that customers have about their Microsoft cloud footprint.
+author: bandersmsft
+ms.author: banders
+ms.date: 09/17/2024
+ms.topic: conceptual
+ms.service: cost-management-billing
+ms.subservice: cost-management
+ms.reviewer: nicholak
+---
+
+# Discover your Microsoft cloud footprint FAQ
+
+This article helps to answer frequently asked questions that customers have about their Microsoft cloud footprint. Your cloud footprint commonly includes but isn’t limited to, legal entities, billing accounts, and billing profiles, tenants, subscriptions, and so on.
+
+This article provides links to other articles that you can use to determine your entire Microsoft cloud footprint.
+
+
+## What are common Microsoft customer identifiers and how do I find them?
+
+The following table shows some common identifiers that Microsoft customers have. They’re starting points to help you understand your Microsoft cloud footprint.
+
+| Identifier | Related documentation |
+| --- | --- |
+| **Tenant ID** | • [What is Microsoft Entra ID?](/entra/fundamentals/whatis) <br>  • [How to find your tenant ID](/entra/fundamentals/how-to-find-tenant) <br>  • [Change your organization's address and technical contact in the Microsoft 365 admin center](/microsoft-365/admin/manage/change-address-contact-and-more#what-do-the-organization-information-fields-mean) |
+| **Billing Account ID** |  • [View your billing accounts in Azure portal](view-all-accounts.md)  <br> • [Understand your Microsoft business billing account](/microsoft-365/commerce/manage-billing-accounts) |
+| **Subscription ID** |  • [Get subscription and tenant IDs in the Azure portal](../../azure-portal/get-subscription-tenant-id.md) <br> • [What Microsoft business subscriptions do I have?](/microsoft-365/admin/admin-overview/what-subscription-do-i-have) |
+| **Agreement ID** | **Microsoft Customer Agreement:** <br> • [Microsoft Customer Agreement documentation](../microsoft-customer-agreement/index.yml) <br><br>**Microsoft Partner Agreement:**   <br> • [The Microsoft Partner Agreement (MPA) for CSP](/partner-center/enroll/microsoft-partner-agreement) <br><br>**Enterprise Agreement:** <br> • [EA Billing administration on the Azure portal](direct-ea-administration.md) |
+| **Legal Entity** | It’s your company name, address, phone number, and so on. |
+| **Microsoft Partner Network (MPN) ID** | [Add, change, or delete a Microsoft 365 subscription advisor partner](/microsoft-365/admin/misc/add-partner) |
+| **Domain name** | [Add and replace your onmicrosoft.com fallback domain in Microsoft 365](/microsoft-365/admin/setup/add-or-replace-your-onmicrosoftcom-domain) |
+
+
+## Can I view all my accounts across the Microsoft cloud?
+
+No. The ability to view accounts depends on your agreement and who manages it.
+
+### Customer managed or Microsoft managed
+
+Both types of Microsoft Customer Agreement accounts are visible in the Billing account list views in the Microsoft 365 admin center and Azure portal.
+
+With these accounts, customers purchase directly from Microsoft or through a field seller. The customer owns the billing accounts and pays Microsoft directly for the service.
+
+### Partner managed
+
+Billing accounts for the end customer that purchases through a Cloud Solution Provider (CSP) partner aren’t in the list views of Microsoft 365 admin center or Azure portal.
+
+## How do I view my billing account and tenant information?
+
+Azure customers can use the following information to view their billing accounts and tenants:
+
+[Billing accounts and scopes in the Azure portal](view-all-accounts.md). The article provides details about all types of Azure accounts.
+
+Microsoft 365 customers can use the following information to view their billing accounts and tenants:
+
+- [Understand your Microsoft business billing account](/microsoft-365/commerce/manage-billing-accounts)
+- [Manage your Microsoft business billing profiles](/microsoft-365/commerce/billing-and-payments/manage-billing-profiles)
+
+
+## How can I view every billing account created for a tenant?
+
+Global Administrators can view all direct billing accounts at the organization level and can elevate their billing account permissions. Purchases made for individual use by non-administrators are only visible to and managed by the original purchaser.
+
+For more information, see [Elevate access to manage billing accounts](elevate-access-global-admin.md).
+
+## How can I view employees participating in other tenants?
+
+Global Administrators can view log data showing employee activity in other tenants. For more information, see [Cross-tenant access activity workbook in Azure AD](/entra/identity/monitoring-health/workbook-cross-tenant-access-activity).
+
+## How do I view my partner billing information?
+
+As a partner, you can see your partner billing account, billing group, and associated customer information in Azure. This information isn’t currently available in the Microsoft 365 admin center.
+
+- [View your billing accounts in Azure portal](view-all-accounts.md#microsoft-partner-agreement)
+- [Get started with your Microsoft Partner Agreement billing account](../understand/mpa-overview.md)
+
+A customer can’t view the billing account or billing group that’s managed by a partner because the partner makes purchases on behalf of their customer.
+
+## How do I view my organization’s billing account and tenant information?
+
+A customer can view their billing accounts and related tenant information in the Azure portal or Microsoft 365 admin center.
+
+Get access to your billing account:
+
+- [Understand your Microsoft business billing account](/microsoft-365/commerce/manage-billing-accounts#assign-billing-account-roles)
+- [Billing roles for Microsoft Customer Agreements](understand-mca-roles.md)
+
+After you get access, here’s how you can view the Billing account and related tenant info.
+
+- Customers can view their Azure Billing Accounts and tenants:
+  - [View your billing accounts in Azure portal](view-all-accounts.md)
+
+The article provides details about all types of Azure accounts.
+
+- Customers can view their Microsoft 365 billing accounts and tenants:
+  - [Understand your Microsoft business billing account](/microsoft-365/commerce/manage-billing-accounts)
+  - [Manage your Microsoft business billing profiles](/microsoft-365/commerce/billing-and-payments/manage-billing-profiles)
+
+## How do I manage purchases that I made myself?
+
+Administrators can manage trials and purchases that they made, and self-service purchases and trials made by non-administrators. For more information, see [Manage self-service purchases and trials (for admins)](/microsoft-365/commerce/subscriptions/manage-self-service-purchases-admins).
+
+## How can I get a list of subscriptions and tenants for a billing account?
+
+You can view the tenants associated with a subscription in the Azure portal on the **Subscriptions** page under **Cost Management + Billing**.
+
+## How can I view the Azure tenant that I am currently signed in to?
+
+You can view your tenant information in the Azure portal using the information at [Manage Azure portal settings and preferences](/azure/azure-portal/set-preferences).
+
+## How can I organize costs for my billing accounts?
+
+You can organize your invoice for each of your billing accounts using the information in [Organize your invoice based on your needs](mca-section-invoice.md).
+
+## How do I understand different associated tenant types?
+
+When you add an associated billing tenant, you can enable two access settings:
+
+**Billing Management** - Allows billing account owners to assign roles to users in the associated billing tenant. Essentially, it gives them permission to access billing information and make purchasing decisions.
+
+**Provisioning** - Allows the invited tenant’s subscriptions to be billed to the inviting billing account.
+
+- If you want to understand the differences between tenant types in Azure, see [Manage billing across multiple tenants using associated billing tenants](manage-billing-across-tenants.md).
+- If you want to understand the differences between tenant types in Microsoft 365, see [Manage billing across multiple tenants in the Microsoft 365 admin center](/microsoft-365/commerce/billing-and-payments/manage-multi-tenant-billing).
+
+## How do I add an associated billing tenant?
+
+For Azure:
+
+1. Sign in to the Azure portal.
+2. Search for **Cost Management + Billing**.
+3. Select **Access control (IAM)** on the left side of the page.
+4. Select **Associated billing tenants** at the top of the page.
+5. Select **Add** and provide the tenant ID or domain name for the tenant you want to add. You can also give it a friendly name.
+6. Choose one or both options for access settings: Billing management and Provisioning. For more information, see [Manage billing across multiple tenants using associated billing tenants](manage-billing-across-tenants.md).
+
+For Microsoft 365:
+
+1. Sign in to the [Microsoft 365 admin center](https://go.microsoft.com/fwlink/p/?linkid=2024339).
+2. Under **Billing** > **Billing Accounts**, select a billing account.
+3. Select the **Associated billing tenants** tab.
+
+There you can manage the existing associating billing tenants or add new ones. For more information, see [Manage billing across multiple tenants in the Microsoft 365 admin center](/microsoft-365/commerce/billing-and-payments/manage-multi-tenant-billing).
+
+## How can I see which tenants my users are authenticating to?
+
+You can view tenants with B2B relationships in the [Cross-tenant access activity workbook](/entra/identity/monitoring-health/workbook-cross-tenant-access-activity).
+
+> [!NOTE]
+> The tenants that your users access by B2B authentication aren’t necessarily part of your organization.
+
+## How can I take over unmanaged directories owned by my organization?
+
+Review the domains in your registrar that aren’t verified to your tenant. If you can’t register a domain that you reserved in your registrar, it might be associated with an unmanaged directory. Global administrators can claim or take over unmanaged directories (also called _unmanaged tenants_) that were created by members of their organization through free sign-up offers. If your registrar shows you pay for a domain that isn’t part of your home tenant, it might be used in an unmanaged directory. For more information, see [Admin takeover of an unmanaged directory](/entra/identity/users/domains-admin-takeover).
+
+## How can I regain access to a tenant owned by my organization?
+
+If you’re locked out of a tenant, you must open a [support ticket](https://support.microsoft.com/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2). The Data Protection Team can help you:
+
+- Reset credentials of an administrator account
+- Claim ownership of normal tenants
+
+## How can I restrict users in my organization from creating new tenants?
+
+You can enable a tenant-level policy to restrict users from creating new tenants in their organization. For more information, see [Restrict new organization creation, Microsoft Entra tenant policy](/azure/devops/organizations/accounts/azure-ad-tenant-policy-restrict-org-creation).
+
+You can also restrict subscriptions from moving from one tenant to another. It’s a common pattern an employee might take when they create a tenant. For more information, see [Manage Azure subscription policies](manage-azure-subscription-policy.md).
+
+## How can I review audit logs for tenants created by users in my organization?
+
+You can view audit logs in the Microsoft Entra admin center. Events relating to tenant creation are tagged as Directory Management. For more information, see [Azure Active Directory (Azure AD) audit activity reference](/azure/active-directory/reports-monitoring/reference-audit-activities).
+
+To learn about notifications for audit log events, follow the tutorial in [Enable security notifications for audit log events](/entra/identity/authentication/tutorial-enable-security-notifications-for-audit-logs).
+
+## Related content
+
+- For Azure:
+  - [Billing accounts and scopes in the Azure portal](view-all-accounts.md)
+- For Microsoft 365:
+  -  [Understand your Microsoft business billing account](/microsoft-365/commerce/manage-billing-accounts)
+  - [Manage your Microsoft business billing profiles](/microsoft-365/commerce/billing-and-payments/manage-billing-profiles)

articles/cost-management-billing/manage/discover-cloud-footprint.md

@@ -285,8 +285,10 @@
     href: /rest/api/cost-management/retail-prices/azure-retail-prices
 - name: Resources
   items:
-  - name: FAQ
+  - name: Cost Management + Billing FAQ
     href: cost-management-billing-faq.yml
+  - name: Discover cloud footprint FAQ
+    href: manage/discover-cloud-footprint.md
 - name: Samples
   items:
   - name: REST API