Skip to content

Commit 738a136

Browse files
Learn Build Service GitHub AppLearn Build Service GitHub App
Learn Build Service GitHub App
authored and
Learn Build Service GitHub App
committed
Merging changes synced from https://github.com/MicrosoftDocs/azure-docs-pr (branch live)
2 parents 2f3f10b + 1301c4c commit 738a136

File tree

70 files changed

+806
-517
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

70 files changed

+806
-517
lines changed

‎articles/advisor/advisor-assessments.md

Lines changed: 2 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Use Well Architected Framework assessments in Azure Advisor
33
description: Azure Advisor offers Well Architected Framework assessments (curated and focused Advisor optimization reports) through the Assessments entry in the left menu of the Azure Advisor Portal.
44
ms.service: azure
55
ms.topic: article
6-
ms.date: 02/18/2024
6+
ms.date: 08/22/2024
77

88
#customer intent: As an Advisor user, I want WAF assessments so that I can better understand recommendations.
99

@@ -30,15 +30,7 @@ To see all Microsoft assessment choices, go to the [Learn platform > Assessments
3030

3131
## Prerequisites
3232

33-
You can manage access to Advisor WAF assessments using built-in roles. The permissions vary by role.
34-
35-
> [!NOTE]
36-
> These roles must be configured for the relevant subscription to create the assessment and view the corresponding recommendations.
37-
38-
| **Name** | **Description** |
39-
|---|:---:|
40-
|Reader|View assessments for a subscription or workload and the corresponding recommendations|
41-
|Contributor|Create assessments for a subscription or workload and triage the corresponding recommendations|
33+
[!INCLUDE [View and manage assessments](./includes/advisor-permissions-waf-assessments.md)]
4234

4335
## Access Azure Advisor WAF assessments
4436

‎articles/advisor/advisor-resiliency-reviews.md

Lines changed: 2 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Azure Advisor resiliency reviews
33
description: Optimize resource resiliency with custom recommendation reviews.
44
ms.service: azure
55
ms.topic: article
6-
ms.date: 03/8/2024
6+
ms.date: 08/22/2024
77

88
---
99

@@ -45,24 +45,7 @@ Your Microsoft account team works with you to collect information about the work
4545

4646
To view or triage recommendations, or to manage recommendations' lifecycles, requires specific role permissions. For definitions, see [Terminology](#terminology).
4747

48-
### Prerequisites to view and triage recommendations
49-
50-
You can manage access to Advisor reviews using built-in roles. The [permissions](/azure/advisor/permissions) vary by role. These roles need to be configured for the subscription that was used to publish the review.
51-
52-
| **Name** | **Description** | **Targeted Subscription** |
53-
|---|:---:|:---:|
54-
|Advisor Reviews Reader|View reviews for a workload and recommendations linked to them.| You need this role for the one subscription your account team used to publish review.|
55-
|Advisor Reviews Contributor|View reviews for a workload and triage recommendations linked to them.| You need this role for the one subscription your account team used to publish review.|
56-
57-
You can manage access to Advisor personalized recommendations using the following roles. These roles need to be configured for the subscriptions included in the workload under a review.
58-
59-
| **Name** | **Description** |
60-
|---|:---:|
61-
|Subscription Reader|View reviews for a workload and recommendations linked to them.|
62-
|Subscription Owner<br>Subscription Contributor|View reviews for a workload, triage recommendations linked to those reviews, manage the recommendation lifecycle.|
63-
|Advisor Recommendations Contributor (Assessments and Reviews)|View accepted recommendations, and manage the recommendation lifecycle.|
64-
65-
You can find detailed instructions on how to assign a role using the Azure portal - [Assign Azure roles using the Azure portal - Azure RBAC](/azure/role-based-access-control/role-assignments-portal?tabs=delegate-condition). Additional information is available in [Steps to assign an Azure role - Azure RBAC](/azure/role-based-access-control/role-assignments-steps).
48+
[!INCLUDE [Reviews and personalized recommendations](./includes/advisor-permissions-review-recommendations.md)]
6649

6750
### Access reviews
6851

‎articles/advisor/includes/advisor-permissions-review-recommendations.md

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
---
2+
ms.service: advisor
3+
ms.topic: include
4+
ms.date: 08/22/2024
5+
6+
---
7+
8+
### Reviews and personalized recommendations
9+
10+
#### Roles to manage access to Advisor reviews
11+
12+
The permissions vary by role. The roles must be configured for the subscription that was used to publish the review.
13+
14+
| Role | View reviews for a workload and all recommendations associated with the reviews | Triage recommendations associated with the reviews |
15+
|:--- |:--- |:--- |
16+
| Advisor Reviews Reader | X | |
17+
| Advisor Reviews Contributor | X | X |
18+
| Subscription Reader | X | |
19+
| Subscription Contributor | X | X |
20+
| Subscription Owner | X | X |
21+
22+
#### Roles to manage access to Advisor personalized recommendations
23+
24+
The roles must be configured for the subscriptions included in the workload under a review.
25+
26+
| Role | View accepted recommendations | Manage the lifecycle of a recommendation |
27+
|:--- |:--- |:--- |
28+
| Advisor Recommendations Contributor (Assessments and Reviews) | X | X |
29+
| Subscription Reader | X | |
30+
| Subscription Contributor | | X |
31+
| Subscription Owner | | X |
32+
33+
Learn how to assign an Azure role, see [Steps to assign an Azure role](/azure/role-based-access-control/role-assignments-steps "Steps to assign an Azure role | Azure RBAC | Microsoft Learn").

‎articles/advisor/includes/advisor-permissions-waf-assessments.md

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
---
2+
ms.service: advisor
3+
ms.topic: include
4+
ms.date: 08/22/2024
5+
6+
---
7+
8+
### View and manage assessments
9+
10+
#### Roles to view and manage assessments and associated recommendations
11+
12+
Manage access to Advisor Well-Architected Framework (WAF) using built-in roles. The permissions vary by role.
13+
14+
| Role | Detail |
15+
|:--- |:--- |
16+
| Reader | View assessments for a subscription or workload and the associated recommendations. |
17+
| Contributor | Create assessments for a subscription or workload and manage lifecycle of the associated recommendations. |
18+
19+
> [!NOTE]
20+
> The role must be configured for the relevant subscription to create the assessment and view the corresponding recommendations.

‎articles/advisor/permissions.md

Lines changed: 89 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -1,48 +1,112 @@
11
---
22
title: Roles and permissions
3-
description: Learn about Advisor permissions and how they might block your ability to configure subscriptions or postpone or dismiss recommendations.
3+
description: Learn about Advisor permissions, how to manage access to Advisor recommendations and reviews.
44
ms.topic: article
5-
ms.date: 05/03/2024
5+
ms.date: 08/22/2024
66
---
77

88
# Roles and permissions
99

10-
Azure Advisor provides recommendations based on the usage and configuration of your Azure resources and subscriptions. Advisor uses the [built-in roles](../role-based-access-control/built-in-roles.md) provided by [Azure role-based access control (Azure RBAC)](../role-based-access-control/overview.md) to manage your access to recommendations and Advisor features.
10+
Learn how to manage access to recommendations and reviews for your organization.
1111

12-
## Roles and their access
12+
## Roles and associated access
1313

14-
The following table defines the roles and the access they have within Advisor.
14+
Advisor uses the built-in roles provided by Azure role-based access control (Azure RBAC).
1515

16-
| Role | View recommendations | Edit rules | Edit subscription configuration | Edit resource group configuration| Dismiss and postpone recommendations|
17-
|---|:---:|:---:|:---:|:---:|:---:|
18-
|Subscription Owner|**X**|**X**|**X**|**X**|**X**|
19-
|Subscription Contributor|**X**|**X**|**X**|**X**|**X**|
20-
|Subscription Reader|**X**|--|--|--|--|
21-
|Resource group Owner|**X**|--|--|**X**|**X**|
22-
|Resource group Contributor|**X**|--|--|**X**|**X**|
23-
|Resource group Reader|**X**|--|--|--|--|
24-
|Resource Owner|**X**|--|--|--|**X**|
25-
|Resource Contributor|**X**|--|--|--|**X**|
26-
|Resource Reader|**X**|--|--|--|--|
16+
Review the following section to learn more about each role and the associated access.
17+
18+
### Roles to view, dismiss, and postpone recommendations
19+
20+
| Role | View recommendations | Dismiss and postpone recommendations |
21+
|:---|:--- |:--- |
22+
| Subscription Reader | X | |
23+
| Subscription Contributor | X | X |
24+
| Subscription Owner | X | X |
25+
| Resource group Reader | X | |
26+
| Resource group Contributor | X | X |
27+
| Resource group Owner | X | X |
28+
| Resource Reader | X | |
29+
| Resource Contributor | X | X |
30+
| Resource Owner | X | X |
31+
32+
### Roles to edit rules and configurations
33+
34+
| Role | Edit rules | Edit subscription configuration | Edit resource group configuration |
35+
|:---|:--- |:--- |:--- |
36+
| Subscription Contributor | X | X | X |
37+
| Subscription Owner | X | X | X |
38+
| Resource group Contributor | | | X |
39+
| Resource group Owner | | | X |
40+
41+
> [!NOTE]
42+
> You must have access to the resource associated with the recommendation to view a recommendation.
43+
44+
To learn more about built-in roles, see [Azure built-in roles](/azure/role-based-access-control/built-in-roles "Azure built-in roles | Azure RBAC | Microsoft Learn"). To learn more about Azure role-based access control (Azure RBAC), see [What is Azure role-based access control (Azure RBAC)?](/azure/role-based-access-control/overview "What is Azure role-based access control (Azure RBAC)? | Azure RBAC | Microsoft Learn").
45+
46+
[!INCLUDE [View and manage assessments](./includes/advisor-permissions-review-recommendations.md)]
47+
48+
[!INCLUDE [Reviews and personalized recommendations](./includes/advisor-permissions-waf-assessments.md)]
49+
50+
## Available actions to build custom roles
51+
52+
If your organization requires roles that don't match the Azure built-in roles, create your own custom role. A custom role works like a built-in role and allow you to assign it to users, groups, and service principals at management group, subscription, and resource group scopes. Use the following actions to create your custom role.
53+
54+
| Action | Details |
55+
|:--- |:--- |
56+
| `Microsoft.Advisor/generateRecommendations/action` | Create a Recommendation. |
57+
| `Microsoft.Advisor/register/action` | Register with the Provider. |
58+
| `Microsoft.Advisor/unregister/action` | Unregister with the Provider. |
59+
| `Microsoft.Advisor/advisorScore/read` | Gets Advisor score. |
60+
| `Microsoft.Advisor/configurations/read` | Read Configurations. |
61+
| `Microsoft.Advisor/configurations/write` | Create or update Configuration. |
62+
| `Microsoft.Advisor/generateRecommendations/read` | Get status of `generateRecommendations` action. |
63+
| `Microsoft.Advisor/metadata/read` | Read Metadata. |
64+
| `Microsoft.Advisor/operations/read` | Get operations. |
65+
| `Microsoft.Advisor/recommendations/read` | Read recommendations. |
66+
| `Microsoft.Advisor/recommendations/write` | Create recommendations. |
67+
| `Microsoft.Advisor/recommendations/available/action` | New recommendation is available. |
68+
| `Microsoft.Advisor/recommendations/suppressions/read` | Read Suppressions. |
69+
| `Microsoft.Advisor/recommendations/suppressions/write` | Create or update Suppressions. |
70+
| `Microsoft.Advisor/recommendations/suppressions/delete` | Delete Suppression. |
71+
| `Microsoft.Advisor/suppressions/read` | Read Suppressions. |
72+
| `Microsoft.Advisor/suppressions/write` | Create or update Suppressions. |
73+
| `Microsoft.Advisor/suppressions/delete` | Delete Suppression. |
74+
| `Microsoft.Advisor/assessmentTypes/read` | Reads `AssessmentTypes`. |
75+
| `Microsoft.Advisor/assessments/read` | Reads Assessments. |
76+
| `Microsoft.Advisor/assessments/write` | Create Assessments. |
77+
| `Microsoft.Advisor/resiliencyReviews/read` | Reads `resiliencyReviews`. |
78+
| `Microsoft.Advisor/triageRecommendations/read` | Reads `triageRecommendations`. |
79+
| `Microsoft.Advisor/triageRecommendations/approve/action` | Approves `triageRecommendations`. |
80+
| `Microsoft.Advisor/triageRecommendations/reject/action` | Rejects `triageRecommendations`. |
81+
| `Microsoft.Advisor/triageRecommendations/reset/action` | Resets `triageRecommendations`. |
82+
| `Microsoft.Advisor/workloads/read` | Reads workloads. |
2783

2884
> [!NOTE]
29-
> Access to view recommendations is dependent on your access to the recommendation's impacted resource.
85+
> For example, you must have a sufficient permission level for a virtual machine (VM) to view recommendations associated with the VM.
86+
87+
To learn more about custom roles, see [Azure custom roles](/azure/role-based-access-control/custom-roles "Azure custom roles | Azure RBAC | Microsoft Learn").
3088

3189
## Permissions and unavailable actions
3290

33-
Lack of proper permissions can block your ability to perform actions in Advisor. You might encounter the following common problems.
91+
If your permission level is too low, your access to the associated action is blocked. Review common problems in the following section.
92+
93+
### Configure subscription or resource group is blocked
3494

35-
### Unable to configure subscriptions or resource groups
95+
When you try to configure a subscription or resource group, the option to include or exclude is blocked. The blocked status indicates that your permission level for that resource group or subscription is insufficient. To learn how to change your permission level, see [Tutorial: Grant a user access to Azure resources using the Azure portal](/azure/role-based-access-control/quickstart-assign-role-user-portal "Tutorial: Grant a user access to Azure resources using the Azure portal | Azure RBAC | Microsoft Learn").
3696

37-
When you attempt to configure subscriptions or resource groups in Advisor, you might see that the option to include or exclude is disabled. This status indicates that you don't have a sufficient level of permission for that resource group or subscription. To resolve this problem, learn how to [grant a user access](../role-based-access-control/quickstart-assign-role-user-portal.md).
97+
### Postpone or dismiss is allowed, but sends an error
3898

39-
### Unable to postpone or dismiss a recommendation
99+
When you try to postpone or dismiss a recommendation, you receive an error. The error indicates that your permission level is insufficient. You must have a sufficient permission level to dismiss recommendations.
40100

41-
If you receive an error when you try to postpone or dismiss a recommendation, you might not have sufficient permissions. Dismissing a recommendation means you can't see it again unless it's manually reactivated, so you might potentially overlook important advice for optimizing Azure deployments. It's crucial that only users with sufficient permissions can dismiss recommendations. Make sure that you have at least Contributor access to the affected resource of the recommendation that you want to postpone or dismiss. To resolve this problem, learn how to [grant a user access](../role-based-access-control/quickstart-assign-role-user-portal.md).
101+
> [!TIP]
102+
> After you dismiss a recommendation, you must manually reactivate it before it is added in your list of recommendations. If you dismiss a recommendation, you may miss important advice that optimizes your Azure deployment.
103+
104+
To postpone or dismiss a recommendation, verify that your permission level for the resource associated with the recommendation is set to Contributor or better. To learn how to change your permission level, see [Tutorial: Grant a user access to Azure resources using the Azure portal](/azure/role-based-access-control/quickstart-assign-role-user-portal "Tutorial: Grant a user access to Azure resources using the Azure portal | Azure RBAC | Microsoft Learn").
42105

43106
## Related content
44107

45-
This article gave an overview of how Advisor uses Azure RBAC to control user permissions and how to resolve common problems. To learn more about Advisor, see:
108+
This article provided an overview of how Advisor uses Azure role-based access control (Azure RBAC) to control user permissions and how to resolve common problems. To learn more about Advisor, see the following articles.
109+
110+
* [Introduction to Azure Advisor](./advisor-overview.md "Introduction to Azure Advisor | Azure Advisor | Microsoft Learn")
46111

47-
- [What is Azure Advisor?](./advisor-overview.md)
48-
- [Get started with Azure Advisor](./advisor-get-started.md)
112+
* [Azure Advisor portal basics](./advisor-get-started.md "Azure Advisor portal basics | Azure Advisor | Microsoft Learn")

‎articles/ai-services/cognitive-services-support-options.md

Lines changed: 12 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,16 +14,25 @@ ms.author: pafarley
1414

1515
Are you just starting to explore the functionality of Azure AI services? Perhaps you are implementing a new feature in your application. Or after using the service, do you have suggestions on how to improve it? Here are options for where you can get support, stay up-to-date, give feedback, and report bugs for Azure AI services.
1616

17+
## Get solutions to common issues
18+
19+
In the Azure portal, you can find answers to common AI service issues.
20+
21+
1. Go to your Azure AI services resource in the Azure portal. You can find it on the list on this page: [Azure AI services](https://ms.portal.azure.com/#view/Microsoft_Azure_ProjectOxford/CognitiveServicesHub/~/AllCognitiveServices). If you're a United States government customer, use the [Azure portal for the United States government](https://portal.azure.us).
22+
1. In the left pane, under **Help**, select **Support + Troubleshooting**.
23+
1. Describe your issue in the text box, and answer the remaining questions in the form.
24+
1. You'll find Learn articles and other resources that might help you resolve your issue.
25+
26+
1727
## Create an Azure support request
1828

1929
<div class='icon is-large'>
2030
<img alt='Azure support' src='/media/logos/logo_azure.svg'>
2131
</div>
2232

23-
Explore the range of [Azure support options and choose the plan](https://azure.microsoft.com/support/plans) that best fits, whether you're a developer just starting your cloud journey or a large organization deploying business-critical, strategic applications. Azure customers can create and manage support requests in the Azure portal.
33+
Explore the range of Azure support options and [choose the plan](https://azure.microsoft.com/support/plans) that best fits, whether you're a developer just starting your cloud journey or a large organization deploying business-critical, strategic applications. Azure customers can create and manage support requests in the Azure portal.
2434

25-
* [Azure portal](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade/overview)
26-
* [Azure portal for the United States government](https://portal.azure.us)
35+
To submit a support request for Azure AI services, follow the instructions on the [New support request](https://ms.portal.azure.com/#view/Microsoft_Azure_Support/NewSupportRequestV3Blade) page in the Azure portal. Select **Cognitive Services** in the **Service type** dropdown field.
2736

2837
## Post a question on Microsoft Q&A
2938

‎articles/ai-services/language-service/personally-identifiable-information/concepts/entity-categories.md

Lines changed: 2 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -383,34 +383,9 @@ The entity in this category can have the following subcategories.
383383
:::row-end:::
384384

385385

386-
## Category: Quantity
386+
## Subcategory: Age
387387

388-
This category contains the following entities:
389-
390-
:::row:::
391-
:::column span="":::
392-
**Entity**
393-
394-
Quantity
395-
396-
:::column-end:::
397-
:::column span="2":::
398-
**Details**
399-
400-
Numbers and numeric quantities.
401-
402-
:::column-end:::
403-
:::column span="2":::
404-
**Supported document languages**
405-
406-
`en`, `es`, `fr`, `de`, `it`, `zh-hans`, `ja`, `ko`, `pt-pt`, `pt-br`
407-
408-
:::column-end:::
409-
:::row-end:::
410-
411-
#### Subcategories
412-
413-
The entity in this category can have the following subcategories.
388+
The PII service supports the Age subcategory within the broader Quantity category (since Age is the personally identifiable piece of information).
414389

415390
:::row:::
416391
:::column span="":::

0 commit comments

Comments
 (0)