Merge pull request #223923 from MicrosoftDocs/repo_sync_working_branch

Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-docs (branch main)

Author: huypub

articles/active-directory/governance/workflows-faqs.md

@@ -23,6 +23,9 @@ In this article you will find questions to commonly asked questions about [Lifec
 
 Yes, custom workflows can be configured for members or guests in your tenant. Workflows can run for all types of external guests, external members, internal guests and internal members.
 
+### Why do I see "Lifecycle Management" instead of "Lifecycle Workflows"?
+For a small portion of our customers, Lifecycle Workflows may still be listed under the former name Lifecycle Management in the audit logs and enterprise applications.
+
 ### Do I need to map employeeHireDate in provisioning apps like WorkDay?
 
 Yes, key user properties like employeeHireDate and employeeType are supported for user provisioning from HR apps like WorkDay. To use these properties in Lifecycle workflows, you will need to map them in the provisioning process to ensure the values are set. The following is an example of the mapping: 

articles/active-directory/hybrid/how-to-connect-modify-group-writeback.md

@@ -28,7 +28,7 @@ This article walks you through the options for modifying the default behaviors o
 
 If the original version of group writeback is already enabled and in use in your environment, all your Microsoft 365 groups have already been written back to Active Directory. Instead of disabling all Microsoft 365 groups, review any use of the previously written-back groups. Disable only those that are no longer needed in on-premises Active Directory. 
 
-### Disable automatic writeback of all Microsoft 365 groups 
+### Disable automatic writeback of new Microsoft 365 groups 
 
 To configure directory settings to disable automatic writeback of newly created Microsoft 365 groups, use one of these methods:
 
@@ -45,13 +45,32 @@ To configure directory settings to disable automatic writeback of newly created
 
 - Microsoft Graph: Use the [directorySetting](/graph/api/resources/directorysetting?view=graph-rest-beta&preserve-view=true) resource type. 
 
-### Disable writeback for each existing Microsoft 365 group 
+### Disable writeback for all existing Microsoft 365 group 
+
+To disable writeback of all Microsoft 365 groups that were created before these modifications, use one of the folowing methods:
 
 - Portal: Use the [Microsoft Entra admin portal](../enterprise-users/groups-write-back-portal.md).
-- PowerShell: Use the [Microsoft Identity Tools PowerShell module](https://www.powershellgallery.com/packages/MSIdentityTools/2.0.16). For example: 
+- PowerShell: Use the [Microsoft Graph PowerShell SDK](/powershell/microsoftgraph/installation?view=graph-powershell-1.0&preserve-view=true). For example: 
+  
+  ```PowerShell
+    #Import-module
+    Import-module Microsoft.Graph
+
+    #Connect to MgGraph and select the Beta API Version
+    Connect-MgGraph -Scopes Group.ReadWrite.All
+    Select-MgProfile -Name beta
+
+    #List all Microsoft 365 Groups
+    $Groups = Get-MgGroup -All | Where-Object {$_.GroupTypes -like "*unified*"}
+
+    #Disable Microsoft 365 Groups
+    Foreach ($group in $Groups) 
+    {
+        Update-MgGroup -GroupId $group.id -WritebackConfiguration @{isEnabled=$false}
+    }
+> We recomend using Microsoft Graph PowerShell SDK with [Windows PowerShell 7](/powershell/scripting/whats-new/migrating-from-windows-powershell-51-to-powershell-7?view=powershell-7.3&preserve-view=true)
   
-  `Get-mggroup -filter "groupTypes/any(c:c eq 'Unified')" | Update-MsIdGroupWritebackConfiguration -WriteBackEnabled $false` 
-- Microsoft Graph: Use a [group object](/graph/api/group-update?tabs=http&view=graph-rest-beta&preserve-view=true). 
+- Microsoft Graph Explorer: Use a [group object](/graph/api/group-update?tabs=http&view=graph-rest-beta&preserve-view=true). 
 
 ## Delete groups when they're disabled for writeback or soft deleted 
 

articles/aks/certificate-rotation.md

@@ -75,7 +75,7 @@ For any AKS clusters created or upgraded after March 2022 Azure Kubernetes Servi
 
 To verify if TLS Bootstrapping is enabled on your cluster browse to the following paths:
 
-* On a Linux node: */var/lib/kubelet/bootstrap-kubeconfig*
+* On a Linux node: */var/lib/kubelet/bootstrap-kubeconfig* or */host/var/lib/kubelet/bootstrap-kubeconfig*
 * On a Windows node: *C:\k\bootstrap-config*
 
 To access agent nodes, see [Connect to Azure Kubernetes Service cluster nodes for maintenance or troubleshooting][aks-node-access] for more information.

articles/api-management/api-management-howto-ip-addresses.md

@@ -128,6 +128,7 @@ In the Developer, Basic, Standard, and Premium tiers of API Management, the publ
 * The service subscription is [suspended](https://github.com/Azure/azure-resource-manager-rpc/blob/master/v1.0/subscription-lifecycle-api-reference.md#subscription-states) or [warned](https://github.com/Azure/azure-resource-manager-rpc/blob/master/v1.0/subscription-lifecycle-api-reference.md#subscription-states) (for example, for nonpayment) and then reinstated.
 * (Developer and Premium tiers) Azure Virtual Network is added to or removed from the service.
 * (Developer and Premium tiers) API Management service is switched between external and internal VNet deployment mode.
+* (Developer and Premium tiers) API Management service is moved to a different subnet.
 * (Premium tier) [Availability zones](../reliability/migrate-api-mgt.md) are enabled, added, or removed.
 * (Premium tier) In [multi-regional deployments](api-management-howto-deploy-multi-region.md), the regional IP address changes if a region is vacated and then reinstated.
 

articles/event-grid/storage-upload-process-images.md

@@ -246,11 +246,13 @@ az webapp config appsettings set --name $webapp --resource-group myResourceGroup
 ```
 
 ```powershell
-az webapp config appsettings set --name $webapp --resource-group myResourceGroup `
-  --settings AzureStorageConfig__AccountName=$blobStorageAccount `
-    AzureStorageConfig__ImageContainer=images `
-    AzureStorageConfig__ThumbnailContainer=thumbnails `
-    AzureStorageConfig__AccountKey=$blobStorageAccountKey
+New-AzStaticWebAppSetting -ResourceGroupName myResourceGroup -Name $webapp `
+  -AppSetting @{ `
+    AzureStorageConfig__AccountName = $blobStorageAccount `
+    AzureStorageConfig__ImageContainer = images `
+    AzureStorageConfig__ThumbnailContainer = thumbnails `
+    AzureStorageConfig__AccountKey = $blobStorageAccountKey `
+  }
 ```
 
 # [JavaScript v12 SDK](#tab/javascript)