Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into directories+subscriptions-b2c-update

Author: garrodonnell

.openpublishing.publish.config.json

@@ -488,12 +488,6 @@
       "branch": "v1-archive",
       "branch_mapping": {}
     },
-    {
-      "path_to_root": "azureml-examples-batch-pup",
-      "url": "https://github.com/azure/azureml-examples",
-      "branch": "santiagxf/batch-pup",
-      "branch_mapping": {}
-    },
     {
       "path_to_root": "azureml-examples-mavaisma-r-azureml",
       "url": "https://github.com/azure/azureml-examples",
@@ -506,24 +500,6 @@
       "branch": "v2samplesreorg",
       "branch_mapping": {}
     },
-    {
-      "path_to_root": "azureml-examples-sdk-preview",
-      "url": "https://github.com/azure/azureml-examples",
-      "branch": "sdk-preview",
-      "branch_mapping": {}
-    },
-    {
-      "path_to_root": "azureml-examples-online-endpoint-vnet",
-      "url": "https://github.com/azure/azureml-examples",
-      "branch": "main",
-      "branch_mapping": {}
-    },
-    {
-      "path_to_root": "azureml-examples-featurestore",
-      "url": "https://github.com/Azure/azureml-examples",
-      "branch": "featurestore/pup",
-      "branch_mapping": {}
-    },
     {
       "path_to_root": "azureml-examples-temp-fix",
       "url": "https://github.com/Azure/azureml-examples",

.openpublishing.redirection.azure-monitor.json

@@ -6418,6 +6418,11 @@
             "source_path_from_root": "/articles/azure-monitor/essentials/metrics-charts.md",
             "redirect_url": "/azure/azure-monitor/essentials/analyze-metrics",
             "redirect_document_id": false
+        },
+        {
+            "source_path_from_root": "/articles/azure-monitor/faq.yml",
+            "redirect_url": "/azure/azure-monitor/overview#frequently-asked-questions",
+            "redirect_document_id": false
         }
     ]
 }

.openpublishing.redirection.json

@@ -24843,7 +24843,12 @@
         },
         {
             "source_path_from_root": "/articles/orbital/delete-contact.md",
-	    "redirect_url": "/azure/orbital/spacecraft-object",
+	        "redirect_url": "/azure/orbital/spacecraft-object",
+            "redirect_document_id": false
+        },
+        {
+            "source_path_from_root": "/articles/operator-service-manager/overview.md",
+	        "redirect_url": "azure/operator-service-manager/azure-operator-service-manager-overview",
             "redirect_document_id": false
         }
     ]

articles/active-directory-b2c/whats-new-docs.md

@@ -1,7 +1,7 @@
 ---
 title: "What's new in Azure Active Directory business-to-customer (B2C)"
 description: "New and updated documentation for the Azure Active Directory business-to-customer (B2C)."
-ms.date: 09/29/2023
+ms.date: 11/01/2023
 ms.service: active-directory
 ms.subservice: B2C
 ms.topic: reference
@@ -15,9 +15,15 @@ manager: CelesteDG
 
 Welcome to what's new in Azure Active Directory B2C documentation. This article lists new docs that have been added and those that have had significant updates in the last three months. To learn what's new with the B2C service, see [What's new in Azure Active Directory](../active-directory/fundamentals/whats-new.md) and [Azure AD B2C developer release notes](custom-policy-developer-notes.md)
 
-## September 2023
+## October 2023
+
+### Updated articles
 
-This month, we renamed Azure Active Directory (Azure AD) to Microsoft Entra ID. For more information about the rebranding, see the [New name for Azure Active Directory](/azure/active-directory/fundamentals/new-name) article.
+- [Set up a force password reset flow in Azure Active Directory B2C](force-password-reset.md) - Editorial updates
+- [Azure AD B2C: Frequently asked questions (FAQ)](faq.yml) - Editorial updates
+- [Enable JavaScript and page layout versions in Azure Active Directory B2C](javascript-and-page-layout.md) - Added breaking change on script tags
+
+## September 2023
 
 ### Updated articles
 
@@ -26,7 +32,7 @@ This month, we renamed Azure Active Directory (Azure AD) to Microsoft Entra ID.
 - [Secure your API used an API connector in Azure AD B2C](secure-rest-api.md) - Editorial updates
 - [Azure AD B2C: Frequently asked questions (FAQ)'](faq.yml) - Editorial updates
 - [Define an ID token hint technical profile in an Azure Active Directory B2C custom policy](id-token-hint.md) - Editorial updates
-- [Set up sign-in for multi-tenant Microsoft Entra ID using custom policies in Azure Active Directory B2C](identity-provider-azure-ad-multi-tenant.md) - Editorial updates
+- [Set up sign-in for multitenant Microsoft Entra ID using custom policies in Azure Active Directory B2C](identity-provider-azure-ad-multi-tenant.md) - Editorial updates
 - [Set up sign-in for a specific Microsoft Entra organization in Azure Active Directory B2C](identity-provider-azure-ad-single-tenant.md) - Editorial updates
 - [Localization string IDs](localization-string-ids.md) - Editorial updates
 - [Define a Microsoft Entra multifactor authentication technical profile in an Azure AD B2C custom policy](multi-factor-auth-technical-profile.md) - Editorial updates
@@ -45,23 +51,4 @@ This month, we renamed Azure Active Directory (Azure AD) to Microsoft Entra ID.
 - [Page layout versions](page-layout.md) - Editorial updates
 - [Secure your API used an API connector in Azure AD B2C](secure-rest-api.md) - Oauth Bearer Authentication updated to GA
 
-## June 2023
-
-### New articles
-
-- [Microsoft Azure Active Directory B2C external identity video series](external-identities-videos.md)
-- [Manage directory size quota of your Azure Active Directory B2C tenant](tenant-management-directory-quota.md)
-
-### Updated articles
-
-- [Tutorial: Create an Azure Active Directory B2C tenant](tutorial-create-tenant.md) - [Azure AD B2C] Azure AD B2C Go-Local opt-in feature
-- [Tutorial: Configure security analytics for Azure Active Directory B2C data with Microsoft Sentinel](configure-security-analytics-sentinel.md) - Removing product name from filename and links
-- [Tutorial: Configure Azure Active Directory B2C with Azure Web Application Firewall](partner-web-application-firewall.md) - Removing product name from filename and links
-- [Build a global identity solution with funnel-based approach](b2c-global-identity-funnel-based-design.md) - Removing product name from filename and links
-- [Azure Active Directory B2C global identity framework proof of concept for funnel-based configuration](b2c-global-identity-proof-of-concept-funnel.md) - Removing product name from filename and links
-- [Azure Active Directory B2C global identity framework proof of concept for region-based configuration](b2c-global-identity-proof-of-concept-regional.md) - Removing product name from filename and links
-- [Build a global identity solution with region-based approach](b2c-global-identity-region-based-design.md) - Removing product name from filename and links
-- [Azure Active Directory B2C global identity framework](b2c-global-identity-solutions.md) - Removing product name from filename and links
-- [Use the Azure portal to create and delete consumer users in Azure AD B2C](manage-users-portal.md) - [Azure AD B2C] Revoke user's session
-- [Monitor Azure AD B2C with Azure Monitor](azure-monitor.md) - Added steps to disable Azure monitor
 

articles/ai-services/cognitive-services-virtual-networks.md

@@ -8,7 +8,7 @@ manager: nitinme
 ms.service: azure-ai-services
 ms.custom: devx-track-azurepowershell, devx-track-azurecli
 ms.topic: how-to
-ms.date: 08/10/2023
+ms.date: 10/27/2023
 ms.author: aahi
 ---
 
@@ -171,7 +171,7 @@ You can manage default network access rules for Azure AI services resources thro
 
 You can configure Azure AI services resources to allow access from specific subnets only. The allowed subnets might belong to a virtual network in the same subscription or in a different subscription. The other subscription can belong to a different Microsoft Entra tenant.
 
-Enable a *service endpoint* for Azure AI services within the virtual network. The service endpoint routes traffic from the virtual network through an optimal path to the Azure AI services service. For more information, see [Virtual Network service endpoints](../virtual-network/virtual-network-service-endpoints-overview.md).
+Enable a *service endpoint* for Azure AI services within the virtual network. The service endpoint routes traffic from the virtual network through an optimal path to the Azure AI service. For more information, see [Virtual Network service endpoints](../virtual-network/virtual-network-service-endpoints-overview.md).
 
 The identities of the subnet and the virtual network are also transmitted with each request. Administrators can then configure network rules for the Azure AI services resource to allow requests from specific subnets in a virtual network. Clients granted access by these network rules must continue to meet the authorization requirements of the Azure AI services resource to access the data.
 
@@ -505,13 +505,13 @@ You can use [private endpoints](../private-link/private-endpoint-overview.md) fo
 
 Private endpoints for Azure AI services resources let you:
 
-- Secure your Azure AI services resource by configuring the firewall to block all connections on the public endpoint for the Azure AI services service.
+- Secure your Azure AI services resource by configuring the firewall to block all connections on the public endpoint for the Azure AI service.
 - Increase security for the virtual network, by enabling you to block exfiltration of data from the virtual network.
 - Securely connect to Azure AI services resources from on-premises networks that connect to the virtual network by using [Azure VPN Gateway](../vpn-gateway/vpn-gateway-about-vpngateways.md) or [ExpressRoutes](../expressroute/expressroute-locations.md) with private-peering.
 
 ### Understand private endpoints
 
-A private endpoint is a special network interface for an Azure resource in your [virtual network](../virtual-network/virtual-networks-overview.md). Creating a private endpoint for your Azure AI services resource provides secure connectivity between clients in your virtual network and your resource. The private endpoint is assigned an IP address from the IP address range of your virtual network. The connection between the private endpoint and the Azure AI services service uses a secure private link.
+A private endpoint is a special network interface for an Azure resource in your [virtual network](../virtual-network/virtual-networks-overview.md). Creating a private endpoint for your Azure AI services resource provides secure connectivity between clients in your virtual network and your resource. The private endpoint is assigned an IP address from the IP address range of your virtual network. The connection between the private endpoint and the Azure AI service uses a secure private link.
 
 Applications in the virtual network can connect to the service over the private endpoint seamlessly. Connections use the same connection strings and authorization mechanisms that they would use otherwise. The exception is Speech Services, which require a separate endpoint. For more information, see [Private endpoints with the Speech Services](#use-private-endpoints-with-the-speech-service) in this article. Private endpoints can be used with all protocols supported by the Azure AI services resource, including REST.
 
@@ -560,6 +560,42 @@ For more information on configuring your own DNS server to support private endpo
 - [Name resolution that uses your own DNS server](../virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances.md#name-resolution-that-uses-your-own-dns-server)
 - [DNS configuration](../private-link/private-endpoint-overview.md#dns-configuration)
 
+## Grant access to trusted Azure services for Azure OpenAI
+
+You can grant a subset of trusted Azure services access to Azure OpenAI, while maintaining network rules for other apps. These trusted services will then use managed identity to authenticate your Azure OpenAI service. The following table lists the services that can access Azure OpenAI if the managed identity of those services have the appropriate role assignment.
+
+
+|Service  |Resource provider name  |
+|---------|---------|
+|Azure AI Services     | `Microsoft.CognitiveServices`   |
+|Azure Machine Learning     |`Microsoft.MachineLearningServices`         |
+|Azure Cognitive Search     | `Microsoft.Search`         |
+
+
+You can grant networking access to trusted Azure services by creating a network rule exception using the REST API:
+```bash
+
+accessToken=$(az account get-access-token --resource https://management.azure.com --query "accessToken" --output tsv)
+rid="/subscriptions/<your subscription id>/resourceGroups/<your resource group>/providers/Microsoft.CognitiveServices/accounts/<your Azure AI resource name>"
+
+curl -i -X PATCH https://management.azure.com$rid?api-version=2023-10-01-preview \
+-H "Content-Type: application/json" \
+-H "Authorization: Bearer $accessToken" \
+-d \
+'
+{
+    "properties":
+    {
+        "networkAcls": {
+            "bypass": "AzureServices"
+        }
+    }
+}
+'
+```
+
+To revoke the exception, set `networkAcls.bypass` to `None`. 
+
 ### Pricing
 
 For pricing details, see [Azure Private Link pricing](https://azure.microsoft.com/pricing/details/private-link).

articles/ai-services/document-intelligence/concept-general-document.md

@@ -6,7 +6,7 @@ author: laujan
 manager: nitinme
 ms.service: azure-ai-document-intelligence
 ms.topic: conceptual
-ms.date: 07/18/2023
+ms.date: 11/01/2023
 ms.author: lajanuar
 monikerRange: '>=doc-intel-3.0.0'
 ---
@@ -19,9 +19,6 @@ monikerRange: '>=doc-intel-3.0.0'
 
 The General document v3.0 model combines powerful Optical Character Recognition (OCR) capabilities with deep learning models to extract key-value pairs, tables, and selection marks from documents. General document is only available with the v3.0 API.  For more information on using the v3.0 API, see our [migration guide](v3-1-migration-guide.md).
 
-> [!NOTE]
-> The ```2023-07-31``` (GA) version of the general document model adds support for **normalized keys**.
-
 ## General document features
 
 * The general document model is a pretrained model; it doesn't require labels or training.
@@ -30,8 +27,6 @@ The General document v3.0 model combines powerful Optical Character Recognition
 
 * The general document model supports structured, semi-structured, and unstructured documents.
 
-* Key names are spans of text within the document that are associated with a value. With the ```2023-07-31```(GA) API version, key names are normalized where applicable.
-
 * Selection marks are identified as fields with a value of ```:selected:``` or ```:unselected:```
 
 ***Sample document processed in the Document Intelligence Studio***

articles/ai-services/document-intelligence/concept-model-overview.md

@@ -27,7 +27,7 @@ monikerRange: '<=doc-intel-3.1.0'
 ::: moniker-end
 
 ::: moniker range=">=doc-intel-2.1.0"
- Azure AI Document Intelligence supports a wide variety of models that enable you to add intelligent document processing to your apps and flows. You can use a prebuilt document analysis or domain specific model or train a custom model tailored to your specific business needs and use cases. Document Intelligence can be used with the REST API or Python, C#, Java, and JavaScript SDKs.
+ Azure AI Document Intelligence supports a wide variety of models that enable you to add intelligent document processing to your apps and flows. You can use a prebuilt domain-specific model or train a custom model tailored to your specific business need and use cases. Document Intelligence can be used with the REST API or Python, C#, Java, and JavaScript SDKs.
 ::: moniker-end
 
 ## Model overview

articles/ai-services/document-intelligence/concept-read.md

@@ -6,7 +6,7 @@ author: laujan
 manager: nitinme
 ms.service: azure-ai-document-intelligence
 ms.topic: conceptual
-ms.date: 07/18/2023
+ms.date: 11/01/2023
 ms.author: lajanuar
 monikerRange: '>=doc-intel-3.0.0'
 ---
@@ -80,7 +80,7 @@ Try extracting text from forms and documents using the Document Intelligence Stu
 
 ## Supported extracted languages and locales
 
-The following lists include the currently GA languages in the most recent v3.0 version for Read, Layout, and Custom template (form) models.
+The following lists include the languages currently supported for the GA versions of Read, Layout, and Custom template (form) models.
 
 > [!NOTE]
 > **Language code optional**

articles/ai-services/language-service/conversational-language-understanding/concepts/best-practices.md

@@ -121,6 +121,14 @@ Once the request is sent, you can track the progress of the training job in Lang
 > [!NOTE]
 > You have to retrain your model after updating the `confidenceThreshold` project setting. Afterwards, you'll need to republish the app for the new threshold to take effect.
 
+### Normalization in model version 2023-04-15
+
+Model version 2023-04-15, conversational language understanding provides normalization in the inference layer that doesn't affect training. 
+
+The normalization layer normalizes the classification confidence scores to a confined range. The range selected currently is from `[-a,a]` where "a" is the square root of the number of intents.  As a result, the normalization depends on the number of intents in the app. If there is a very low number of intents, the normalization layer has a very small range to work with. With a fairly large number of intents, the normalization is more effective.
+
+If this normalization doesn’t seem to help intents that are out of scope to the extent that the confidence threshold can be used to filter out of scope utterances, it might be related to the number of intents in the app. Consider adding more intents to the app, or if you are using an orchestrated architecture, consider merging apps that belong to the same domain together. 
+
 ## Debugging composed entities
 
 Entities are functions that emit spans in your input with an associated type. The function is defined by one or more components. You can mark components as needed, and you can decide whether to enable the *combine components* setting. When you combine components, all spans that overlap will be merged into a single span. If the setting isn't used, each individual component span will be emitted.

articles/ai-services/language-service/custom-named-entity-recognition/includes/resource-creation-powershell.md

@@ -36,4 +36,4 @@ New-AzResourceGroupDeployment -Name ExampleDeployment -ResourceGroupName Example
   -TemplateParameterFile <path-to-parameters-file>
 ```
 
-See the ARM template documentation for information on [deploying templates](../../../../azure-resource-manager/templates/deploy-powershell.md#parameter-files) and [parameter files](../../../../azure-resource-manager/templates/parameter-files.md#parameter-file).
+See the ARM template documentation for information on [deploying templates](../../../../azure-resource-manager/templates/deploy-powershell.md#json-parameter-files) and [parameter files](../../../../azure-resource-manager/templates/parameter-files.md#parameter-file).