Merge branch 'MicrosoftDocs:main' into master

Author: gmndrg

.openpublishing.redirection.json

@@ -5938,6 +5938,11 @@
       "redirect_url": "/azure/azure-app-configuration/policy-reference",
       "redirect_document_id": false
     },
+    {
+      "source_path_from_root": "/articles/azure-functions/functions-test-a-function.md",
+      "redirect_url": "/azure/azure-functions/supported-languages",
+      "redirect_document_id": false
+    },    
     {
       "source_path_from_root": "/articles/azure-app-configuration/quickstart-azure-function-csharp.md",
       "redirect_url": "/azure/azure-app-configuration/quickstart-azure-functions-csharp",

articles/active-directory/cloud-infrastructure-entitlement-management/cloudknox-onboard-enable-tenant.md

@@ -66,7 +66,7 @@ To view a video on how to enable CloudKnox in your Azure AD tenant, select
 
         1. Copy the script on the **Welcome** screen:
 
-            `az ad ap create --id b46c3ac5-9da6-418f-a849-0a7a10b3c6c`
+            `az ad sp create --id b46c3ac5-9da6-418f-a849-0a07a10b3c6c`
 
         1. If you have an Azure subscription, return to the Azure AD portal and select **Cloud Shell** on the navigation bar.
             If you don't have an Azure subscription, open a command prompt on a Windows Server.
@@ -106,4 +106,4 @@ Use the **Data Collectors** dashboard in CloudKnox to configure data collection
 
 - For an overview of CloudKnox, see [What's CloudKnox Permissions Management?](cloudknox-overview.md)
 - For a list of frequently asked questions (FAQs) about CloudKnox, see [FAQs](cloudknox-faqs.md).
-- For information on how to start viewing information about your authorization system in CloudKnox, see [View key statistics and data about your authorization system](cloudknox-ui-dashboard.md).
+- For information on how to start viewing information about your authorization system in CloudKnox, see [View key statistics and data about your authorization system](cloudknox-ui-dashboard.md).

articles/active-directory/reports-monitoring/media/overview-recommendations/available-preview-feautures.png

@@ -131,13 +131,26 @@ Accidentally dismissed, completed, or postponed a recommendation or resource. Ma
 
 ## Common tasks
 
-### Turn on the preview
+### Enable recommendations
 
-To turn on the preview:
+To enable your Azure AD recommendations:
 
 1. Navigate to the **[Preview features](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/PreviewHub)** page.
 2. Set the **State** to **On**.
 
+    ![Enable Azure AD recommendations](./media/overview-recommendations/enable-azure-ad-recommendations.png)
+
+
+
+### Manage recommendations
+
+To manage your Azure AD recommendations:
+
+1. Navigate to the [Azure AD overview](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Overview) page.
+
+2. On the Azure AD overview page, in the toolbar, click **Recommendations (Preview)**.
+  
+    ![Manage Azure AD recommendations](./media/overview-recommendations/manage-azure-ad-recommendations.png)
 
 
 

articles/active-directory/reports-monitoring/media/overview-recommendations/enable-azure-ad-recommendations.png

@@ -1,7 +1,7 @@
 ---
 title: Create Azure Advisor alerts for new recommendations using Azure portal
 description: Create Azure Advisor alerts for new recommendation
-ms.topic: article
+ms.topic: quickstart
 ms.date: 09/09/2019
 ---
 

articles/active-directory/reports-monitoring/media/overview-recommendations/manage-azure-ad-recommendations.png

@@ -1,7 +1,7 @@
 ---
 title: Introduction to Azure Advisor
 description: Use Azure Advisor to optimize your Azure deployments.
-ms.topic: article
+ms.topic: overview
 ms.date: 09/27/2020
 ---
 

articles/active-directory/reports-monitoring/overview-recommendations.md

@@ -77,6 +77,10 @@ Use `az keyvault secret set` to store the standard domain user credential as a s
 az keyvault secret set --vault-name MyAKSGMSAVault --name "GMSADomainUserCred" --value "$Domain\\$DomainUsername:$DomainUserPassword"
 ```
 
+> [!NOTE]
+> Use the Fully Qualified Domain Name for the Domain rather than the Partially Qualified Domain Name that may be used on internal networks.
+
+
 ## Optional: Use a custom VNET with custom DNS
 
 Your domain controller needs to be configured through DNS so it is reachable by the AKS cluster. You can configure your network and DNS outside of your AKS cluster to allow your cluster to access the domain controller. Alternatively, you can configure a custom VNET with a custom DNS using Azure CNI with your AKS cluster to provide access to your domain controller. For more details, see [Configure Azure CNI networking in Azure Kubernetes Service (AKS)][aks-cni].
@@ -201,6 +205,8 @@ credspec:
     Sid: $GMSA_SID
 ```
 
+
+
 Create a *gmsa-role.yaml* with the following.
 
 ```yml

articles/advisor/advisor-alerts-portal.md

@@ -95,7 +95,6 @@
         href: devops-api-development-templates.md
       - name: Compute platform
         href: compute-infrastructure.md
-
 - name: How-to guides
   items:
       - name: Define APIs
@@ -338,6 +337,8 @@
               href: soft-delete.md
             - name: Use managed identities for Azure resources
               href: api-management-howto-use-managed-service-identity.md
+            - name: Validate service updates
+              href: validate-service-updates.md
             - name: Self-hosted gateway
               items:
               - name: Guidance for running on Kubernetes