Tag: Azure AI Fundamentals

submitted by /u/quantrpeter [link] [comments]

My goal is to just sharpen up my skills, I don't really like reading documentation or taking certs. But I do like using Reddit and YouTube to learn. At home I want to create an Azure "Corporate or small business" environment without using traditional AD servers and only using Azure. I have windows 10 and 11 pro virtual machines set up to test with in ESX. Can you add anything or elaborate to this list for me please or let me know if I'm on the right track? 1. Create 365 tenant and set up Entra AD with proper licensing as well as office licensing. 2. Set up sharepoint site and create file shares 3. Set up Windows defender for AV? 4. Set up conditional access policies 5. Set up Microsoft MFA? Guessing Authenticator app? 6. Set up InTune to manage mobile and computers? 7. Is there any sort of backup for Sharepoint or is that all 3rd party vendor? 8. Bitlocker enabled for devices? Can you let me know if I'm missing anything else? submitted by /u/Available_Pack_2499 [link] [comments]

Hello All, I am just getting started down the Azure rabbit hole and trying to research if this is possible. I am trying to figure out a way to improve the efficiencies of license tracking. We have a bunch of users who use azure virtual desktops, but some of the software we use have unique license keys and currently they track them via an excel document manually... and often times when they send a user the license key its not kept up to date in the excel document. I was curious if it was possible to create the licenses as idk items in azure, and then just assign that unique item to the user in azure, so we could just run a report within azure to know how many users have the software linked to them for use vs how many total was purchased. Just trying to figure out a way to get away from the excel document. I just don't know if its possible.... like bulk create a list of objects, then link them unique to different users as needed... and still have the ability to know how many are not being linked yet quickly.. submitted by /u/Storxusmc [link] [comments]

Hello, Just curious can we use OpenVPN Connect Client with Azure VPN P2S using OpenSSL and Azure AD Authentication? Having issues with the Azure VPN Client. submitted by /u/clhoyt0910 [link] [comments]

Anyone else getting a sever-side error saying to contact Microsoft. when using this cmdlet to pull audit reports for users? I have opened tickets with Microsoft and their solution was to limit my time range to 10mins or even 1 min. This does not seem usable to me as I am in incident response and often need to search audit logs over a 24hr period or more. This becomes even more important as search-mailboxaudit is being depricated at the end of this month and Microsoft is recommending search-unifiedauditlog as the replacement. submitted by /u/rlcyberA [link] [comments]

Hey All, I hope everyone is doing well. I do not have much experience with Azure so any assistance you all might be able to provide would be extremely appreciated. I am trying to setup an AVD for my client that wants to stay on QBD. I have it all setup and it works well, but I have turned it off as I do not understand the pricing. I have 6 users who will be accessing the VD during business hours and the occasional one off outside of business hours. When I price this out on the estimator do I just select AVD and everything that it takes to run AVD excluding backup is included in that estimate or do I have to add each service like AVD, VM, Network, etc....? If any of you have similar setups how much are you paying monthly. submitted by /u/White-Smoke-23 [link] [comments]

Hi, I created orchestrated VMSS agents for Azure devops and I'm running into an issue where our images are taking ~5-15mins to be created / available. From what I'm reading this is normal behavior for Azure to have VMSS agents take around 5 minutes to provision. Are there better alternatives? I wanted to host agents in AKS instead, but those don't seem to be supported super well. It also isn't as secure from what I've read. What are you guys doing for AZDO agents? Is there anything I can do to make VMSS agents scale up more quickly (while also destroying/recreating between every job) I have orchestrated VMSS mode enabled btw, I sent in an Azure Support ticket for it. submitted by /u/PudsBuds [link] [comments]

I’m developing an architecture for products in our company. I have a good working, hub and spoke setup with application gateway, azure firewall and VPN gateway which works for most use cases we have. One of the product groups in a meeting today has advised that one of their systems uses SFTP to receive data from remote systems and that data must be received by a specific backend server, one of 19. In their (outgoing) legacy environment, they expose the public IP of the individual server. The remote systems cannot use DNS. IP only. I/they cannot change this. I don’t want to attach public IPs to the new servers in Azure as it completely goes against the design principles we’ve set out. What appliance can I put in my design which will allow me to associate a range of public IPs with it, route traffic to a backend server based on the public ip used, routed via my Azure firewall. (Using route tables). submitted by /u/damianvandoom [link] [comments]

Hi guys, last week I got my AZ 900 certificate using Pearson VUE platform to schedule the exam. Now I would like to store my certificate as digital one somewhere in Credly to share on my linkedin, however there is no way to do it. Then I read that Microsoft has stopped the partnership so I'm wondering is there any alternatives to have one repository for all certificates or I just need to use MS Learn and that's it for Microsoft submitted by /u/akiread [link] [comments]

submitted by /u/iowatechguy [link] [comments]

Newbie here but trying to see if Microsoft has an offering like AWS Bedrock for hosting our own or choosing from a list of Foundational Models submitted by /u/Less_Equivalent1876 [link] [comments]

I configured AKS monitoring via built-in support for Managed Prometheus and Managed Grafana and that is working great - finally we have decent support for that instead of sending all metrics as log entries to Log Analytics as it was working before with Container Insights. However I also started considering deploying my own instances of Prometheus and Grafana inside the cluster. For cases when someone wants to be as cloud agnostic as possible or just to lower some costs (hard to compare but probably you could get it cheaper if you run your own instances on your cluster). My first thoughts: run single Prometheus replica with zone-redundant disk attached, maybe this is not full HA setup as when VM or entire zone goes down there will be a time when no metrics are scraped becasue well, node with Prometheus is gone, then depends how long it takes for AKS to detect that and schedule on another node in possible another availability zone is unknown, but finally cluster should converge to stable state without losing previosuly scraped and stored data as the same zone-redundant disk would be attached to new Prometheus instance same as above but instead of disk use Azure Files, after some research looks like it is not recommended to run Prometheus with SMB/NFS shares as even though they often advertise as fully POSIX compliant there are still cases where Prometheus data gets corrupted and it is impossible to recover from that (or very hard to do so), looks like running Prometheus on file shares is not officially supported due to such problems run two separate instances of Prometheus which scrape exactly the same targets - prometheus-operator supports that (https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/high-availability.md), with proper topolySpreadConstraints and/or pod anti-affinitity we can be quite confident this setup is real HA as it shouldn't really be that often when two VMs in two AZs go down in the same time, drawback is of course higher load on the cluster as we basically need two times more compute resources to run 2 instances of Prometheus and I am not entirely sure how does Grafana handle that later on (it simply load balances between two instances or we have separate dashbaord per Prometheus instance, needs further reasearch) Your ideas/experience or recommendations? I know there are different tools like Cortex or Thanos but they add yet another layer of complexity so initially I would like to start with plain Prometheus. submitted by /u/0x4ddd [link] [comments]

I'm a bit of a novice when it comes to SCIM, so far I've only configured it using prebuilt gallery applications or using vendor documentation 😅 I have a project this quarter to get SCIM set up for a bunch of LOB apps, several of which don't have gallery apps and require us to emit custom values that are SP specific. One in particular doesn't allow us to use the /groups endpoint and requires a custom value for "role" and "group" be included when it syncs users. The role will be either user or admin, if it is user the value of group will need to be one of a set of strings the SP side uses. I've also been told to avoid using an extension attributes if possible to ease management for helpdesk (but also because we are running low on available ones). My inclination is to use group membership to control this, however since group membership in AAD is a property of the group and not the user and I cannot use the /groups endpoint it seems like this seems tricky. I suppose I could define roles for the app then use the AAD role value from the group assignment to cover the "groups" attribute with a condition that emits the default value for the "role" value unless the assigned role matches admin? Is there a good way to do this, or am I barking up the wrong tree entirely? submitted by /u/RhombusAcheron [link] [comments]

Hello EntraID Community, I'm seeking guidance on extending OAuth token lifetimes in our Salesforce integration, using Azure EntraID as the IDP for Salesforce, internal apps, and a non-internet-facing abstraction layer. We need to maintain token validity without using refresh tokens due to timing delays between token issuance and use. It's crucial that Salesforce consistently recognizes the real employee’s identity who initiates actions, even through the abstraction layer. Key questions: Does Azure EntraID support any methods for securely extending OAuth token lifetimes, suitable for systems not exposed to the internet? What best practices ensure OAuth tokens remain active and authentic without direct use of refresh tokens? Can Azure services, like Managed Identities, facilitate safe, indirect token refreshing or extending? Any advice on securely managing token lifecycles while preserving employee identity in Salesforce would be greatly appreciated. https://preview.redd.it/teg1mrssx9wc1.png?width=1920&format=png&auto=webp&s=f4283ff3de772dbdaa7158a1f4d63d0dad0b8032 Thanks! submitted by /u/ButterscotchEarly729 [link] [comments]

Hi all, i’m looking to take an exam for az 104. For a good understanding i have took the course in french which is my language but exam questions was in english with TD. My question is do i will have the possibility to switch French to English during exam to see the original question ? Because with TD i have seen words in english. submitted by /u/ahmet9121 [link] [comments]

I'm pretty new to Azure and I need to query multiple sources for data. The first source has a webhook API, so I handle that with a simple function app that pings power automate with the API response to upsert rows to Dataverse. This costs basically nothing. The second source does not have an API, so I wrote a script with Selenium that pulls the data. I would like to deploy this to the cloud in the most cost-efficient way possible. My understanding is that a function using Selenium is going to need to be containerized, which means (I think) I'd have to pay for the container app and the container registry. Is there any cheaper way to do it? Response time does not matter, so it's fine if the container has to boot up every time instead of having dedicated resources. The code is in Python if that matters. submitted by /u/My_WorkRedditAccount [link] [comments]

Curious about any experience/success stories with running MySQL Hybrid cloud and on-prem with primary instance in Azure? We use Azure with a relatively fast private link to data center. With most write application traffic sitting in Azure, an on-prem proxy could direct reads to the local replica and writes to the Azure instance. What I thought might work is an Azure flexible MySQL instance as primary/write with two standard replica on-prem. The on-prem replica could be configured for replicating as quickly as possible (innodb_flush_log_at_trx_commit = 2 and sync_binlog = 0) which I've found result is basically 0 lag time. A 3rd replica could configured for more resiliency . We would use Azure separate zone redundancy "built in" to flexible MySQL for HA on the primary. Any thoughts on this solution? submitted by /u/skiitifyoucan [link] [comments]

Does anyone experience multiple login prompts for users like in Teama etc? Also a Microsoft Managed MFA Campaign was setup without any prior knowledge. submitted by /u/Failnaught223 [link] [comments]

I am currently testing Power BI Desktop creating reports based on data from an Azure SA container. I am aware it is simple to connect using the access key or a SAS token, but has anyone got Power BI Desktop to connect and authenticate via an Azure service principal? I've seen a work-around involving using Data Lake Storage Gen 2 features...but this will not work with the existing blobs even after converting the storage account. Anyone know of a solution? Thanks submitted by /u/ZweiiHander [link] [comments]

Hey, y'all. I'm working on an application that pulls data from Graph API--specifically, which grabs a given user's supervisor from Entra ID--and I could use some help. I've walked through the oauth2 workflow and gotten it pulling valid tokens, but when I try to query /users/$user/manager it responds with 403 Forbidden - Insufficient Permissions. The Entra ID app for this service has API permissions on User.Read and User.Read.All. What other permissions would it need? submitted by /u/TSW-but-at-work [link] [comments]