I have Parameter Field (type boolean) and a default value =True.

When I pass the parameter by url (= 0) it still shows it as True, how to prevent that behaviour.

(Default value is needed)

https://learn.microsoft.com/en-us/sql/reporting-services/pass-a-report-parameter-within-a-url?view=sql-server-ver16

​I have Parameter Field (type boolean) and a default value =True.When I pass the parameter by url (= 0) it still shows it as True, how to prevent that behaviour.(Default value is needed) https://learn.microsoft.com/en-us/sql/reporting-services/pass-a-report-parameter-within-a-url?view=sql-server-ver16  Read More

​

We’re excited to share a summary of the Azure Database for MySQL – Flexible Server announcements from last month, as well as the latest roadmap of upcoming features!

August 2024 Live webinar

These updates and the latest roadmap are also covered in our Monthly Live Webinar on YouTube (Click here to subscribe to our YouTube channel!), which streams the second Wednesday of every month, at 7:30 AM Pacific time. Below is a link to the session recording of the live webinar we delivered last week:

July 2024 updates and announcements

Major Version Upgrades for Azure Database for MySQL flexible servers in the Burstable service tier (General Availability)

You can now perform major version upgrades directly on flexible servers based on the Burstable service tier by using the Azure portal, and with just a few clicks! This feature release removes a previous limitation – the need to manually upgrade to General Purpose or Business Critical tiers, perform the version upgrade, and then downgrade the servers. The key benefits of this functionality include a seamless upgrade process, enhanced reliability, and effective cost management.

Learn more: Announcement Blog | Documentation | Demo video

Azure Key Vault Managed HSM (Hardware Security Module) support for customer managed keys (CMK) (General Availability)

Azure Key Vault Managed HSM (Hardware Security Module) is a fully managed, highly available, single-tenant, standards-compliant cloud service that enables you to safeguard cryptographic keys for your cloud applications, using FIPS 140-2 Level 3 validated HSMs.  It ensures your data is stored and processed only within the region that hosts the HSM, ensuring data residency. With the latest feature update, you can now use your own HSM-backed encryption keys to protect your data at rest in MySQL – Flexible Server instances. You can generate HSM-backed keys and import the encryption keys from a physical on-premises HSM using CMK’s bring your own key (BYOK) feature while maintaining full control over the keys.

Learn more: Announcement Blog | Documentation | Demo video

Support for up to 8TB in a single table file (General Availability)

We are excited to announce that Azure Database for MySQL – Flexible Server now supports up to 8TB in a single table file! Previously, the service supported up to 4TB in a single table file. This increase in storage capacity reduces the need for table partitioning and simplifies database management. Additionally, the increased storage limit allows customers to scale their tables more efficiently without compromising performance.

Learn more: Documentation

Latest feature roadmap

Feature

Description

Release status

Coming soon! 
(Tentative*)

On-demand backup and export

This feature provides you with the ability to export at-moment physical backup of the server to an Azure storage account (Azure blob storage) using an Azure CLI command.  After export, these backups can be used for data recovery, migration, data redundancy and availability, or auditing. Learn more.

Public Preview

General Availability 

in Q3 CY24

Flexible maintenance options

Building upon our existing system-managed and custom-managed maintenance windows, the following new flexible maintenance options aim to elevate user convenience and operational flexibility in server maintenance: 

Reschedule window: Tailor maintenance schedules to suit your business rhythm. 

On-demand maintenance: Instantly initiate maintenance activities using the Reschedule now option.  

Learn more.

Public Preview

General Availability 

in Q3 CY24

Virtual Canary

The Virtual Canary feature is an exciting solution for Azure MySQL users who prioritize staying at the forefront of technology by making sure that their servers always run the most current version. Servers opted in for virtual canary receive maintenance updates earlier in advance. You can also take advantage of the feature as an opportunity to perform an additional layer of update testing on your dev, test, or staging servers to help avoid workload-specific issues like application-level compatibility issues. The feature thus offers an efficient way to manage updates, align testing and production environments, and maintain operational stability with minimal disruption. 

–

Public Preview

in Q3 CY24

Near-zero downtime maintenance for HA servers

This feature is designed to substantially reduce maintenance downtime for HA-enabled servers, ensuring that in most cases, maintenance downtime is expected to be between 40 to 60 seconds. This capability is pivotal for businesses that demand high availability and minimal interruption in their database operations. Learn more.

Public Preview

General Availability 

in Q4 CY24

MySQL Discovery & Assessment in Azure Migrate

With this functionality, you can use Azure Migrate to discover MySQL servers in your environment, assess them by identifying their compatibility for moving to Azure Database for MySQL, and receive compute and storage SKU recommendations along with their costs. Learn more.

Private Preview

Public Preview

in Q4 CY24

Long Term Retention of Backups

Previously with Azure Database for MySQL, you could retain automated backups and on-demand backups for up to 35 days. With Long Term Retention, you can now retain the backups up to 10 years, further accommodating your audit and compliance needs. Learn more.

Public Preview

General Availability
in Q4 CY24

Error Logs (in Server Logs)

This feature allows you to maintain MySQL error log files under Server logs and download them for up to seven days. These error logs can help you efficiently identify and troubleshoot performance and reliability issues, and proactively detect and respond to unauthorized access attempts, failed login attempts, and other security-related events. Learn more.

Public Preview

General Availability
in Q4 CY24

CMK-enabled support for Accelerated Logs

Accelerated Logs, available with the Business Critical service tier and designed for mission-critical workloads, is a feature provides an increase in throughput of up to two times (2x) for your applications at no additional cost. The feature will soon be supported on servers that have Customer Managed Keys (CMK) enabled.

–

General Availability

in Q4 CY24

*The roadmap features and dates are tentative and subject to change. Please stay tuned for continuous updates.

Conclusion

As we continue to work on new features and functionalities, your feedback is very critical for our improvement. If you wish to enroll in Private Preview for any of the above features, or if you have any suggestions for or queries about our service, email us at AskAzureDBforMySQL@service.microsoft.com.

To learn more about what’s new with Flexible Server, see What’s new in Azure Database for MySQL – Flexible Server. Stay tuned for more updates and announcements by following us on social media: YouTube | LinkedIn | X.

​Microsoft Tech Community – Latest Blogs –Read More 

Hello, I was wondering if someone can help me with this issue I’m encountering. I need to replace the mailing address with the property address that is grey out. Meaning the grey out I want to delete and replace it with the mailing address that shows that it is different. I have like hundreds of them, which I want to know if there is a possibility to just replace the ones that are actually different. I proceeded with selecting these two columns that I have to fix. > Find & Select > Go To Special …. > Row Differences > Ok. It then proceeded to show me which ones are the differences and now I just want to replace them with the correct ones that are shown in the mailing address column.

​Hello, I was wondering if someone can help me with this issue I’m encountering. I need to replace the mailing address with the property address that is grey out. Meaning the grey out I want to delete and replace it with the mailing address that shows that it is different. I have like hundreds of them, which I want to know if there is a possibility to just replace the ones that are actually different. I proceeded with selecting these two columns that I have to fix. > Find & Select > Go To Special …. > Row Differences > Ok. It then proceeded to show me which ones are the differences and now I just want to replace them with the correct ones that are shown in the mailing address column.    Read More

​

Hi everyone, 

I am trying to see if someone could help me with making a macro that will automatically sort by closest due dates. In my table there are 2 columns one titled assessment date and due date. In my assessment date column it contains dates where paperwork was done. The due date column contains the day before but 2 years out (when the next round of paperwork is due). I have the due date column with conditional formatting saying that if todays date is past the due date then it is highlighted red. If the due date is within the 2 week mark of being due it is highlighted yellow and if it further out than 2 weeks then it is highlighted green. I wanted to see if there was a macro out there that will automatically sort by what is past due and if it is past due then it could email me to let me know so I can contact the client to fill out the paperwork. I tried finding other macros but the closest one that I could find just automatically sorts by the date not when an item is due. If anyone could help that would be great.

Thank you in advance!

​Hi everyone,  I am trying to see if someone could help me with making a macro that will automatically sort by closest due dates. In my table there are 2 columns one titled assessment date and due date. In my assessment date column it contains dates where paperwork was done. The due date column contains the day before but 2 years out (when the next round of paperwork is due). I have the due date column with conditional formatting saying that if todays date is past the due date then it is highlighted red. If the due date is within the 2 week mark of being due it is highlighted yellow and if it further out than 2 weeks then it is highlighted green. I wanted to see if there was a macro out there that will automatically sort by what is past due and if it is past due then it could email me to let me know so I can contact the client to fill out the paperwork. I tried finding other macros but the closest one that I could find just automatically sorts by the date not when an item is due. If anyone could help that would be great. Thank you in advance!  Read More

​

This is a step-by-step guided walkthrough of the Microsoft Purview extended report experience and how it can empower your organization to understand the cyber security risks in a context that allows them to achieve more. By focusing on the information and organizational context to reflect the real impact/value of investments and incidents in cyber.

Prerequisites

License requirements for Microsoft Purview Information Protection depend on the scenarios and features you use. To understand your licensing requirements and options for Microsoft Purview Information Protection, see the Information Protection sections from Microsoft 365 guidance for security & compliance and the related PDF download for feature-level licensing requirements. For the best experience, all Microsoft Defender products should be enabled. 
Follow the step-by-step guide to set up the reporting found here.
The DLP incident management documentation can be found here.
Install Power BI Desktop to make use of the templates Downloads | Microsoft Power BI

Overview and vision

The vision with this package is that it will allow for faster and more integrated communication between leaders and the cyber operations teams in a context that allows for effective collaboration. The structure can help present the positive result of attacks prevented by measuring distance to corporate secrets. It can also help you provide a view of the impact of an incident by listing the sensitive systems and content the attackers have accessed.

Based on the information you may also identify patterns where you need to improve your security posture based on sensitive content and systems. This makes improvement projects more connected to company value. Cybersecurity is fast pacing so being able to understand the future is just as important as current state. With this data available you should be able to input details about future threats and project their impact.  As part of this we are also creating Security Copilot skills to help identify future risks.

Step-by-step guided walkthrough

Principles for the dashboards

When opening the Power BI view whether it is from a web-based version or from Power BI desktop you will find unique users and unique devices. These are user accounts and devices that have had at least one security incident flagged in Microsoft Defender Portal and have accessed sensitive information. Organizations may select to filter these based on incident flags, the type of incident etc. how to achieve this is outlined in the implementation guide.

Let us have a look at the base elements in the CISO, CCO view.

These are the default KPI views, you define a target for how much sensitive data can be accepted to be touched by compromised devices or users.
This is the view of the incidents showing the classification and type of attack. This view may be changed to be based on tags or other fields that instructs on what can be done to mitigate future attacks.
The number of compromised users and devices that have accessed sensitive content.
The count and types of sensitive content accessed by the compromised systems.

The core rule for what is shown is that sensitive content has been touched by a compromised system or account. A compromised system or account that has not accessed any sensitive content will not be shown. The only exception is the Operational scope pages more detail later.

Board level sample data.

The first version has four risk dimensions,

Legal Compliance, you should tweak this view to be centered around your regulatory obligations. The base report shows Credit card and end-user identifiable as an example. A suggestion is that you select the applicable sensitive information types, and group them under a regulator name (Like SEC, FDA, FCC, NTIA, FCA etc..). How to achieve this is outlined in the implementation guide. You may also update the KPI graph to align better with the objectives you have as an organization. A click on the department will filter the content across the page.

Trust Reputation, the standard setup of this report is to show privacy-related data. The impact of having customer data leaking is devastating to the Trust customers have for the organization. You can configure the report to be centered around the privacy data that is most applicable to your business.

Company and Shareholder Value is centered around the organization’s own secrets. Secret drawings, source code, internal financial results dashboards, supply chain information, product development, and other sensitive information. The dashboard is built on a few core components.

Access to content labeled as Sensitive from compromised.

Update this diagram to only reflect the sensitivity labels with high impact to the business, we will only show access made by compromised accounts.

Access to mission-critical systems from compromised.

This is based on connections to URL’s or IP addresses that host business sensitive systems. This should come from the asset classification already made for critical systems.

Access to Sensitive content from compromised.

This should be the core Sensitive information types, fingerprints, exact data matches that directly can impact the valuation of the organization.

The KPI diagram should be updated to a target that makes sense to the core security projects run by the organization.

Operational scope provides your organization with information about where Sensitive information is processed. Failing to process at the appropriate location may directly impact whether an organization is allowed to operate in specific markets or not. This report can also be used for restructuring the company and other actions to keep the company competitive while still staying in compliance with regulations.

With Security Copilot you can get this type of detail as well. It will help you with the contextual detail. Here is one example of a custom sensitive information type. The sub bullets are departments.

There is also a view included for the use of Sensitivity labels.

The CISO view contains more detail than the Board reports as outlined initially in this post. This is the Company & Shareholder Value view. Based on the implementation guide this view can be customized to meet the needs of your organization. But based on this you may feel that more detail is needed. This leads to the detail view.

Account Detailed Data view provides the next level of detail.

In the green box you will find all the users with incidents, where you can learn more about threat actors, threat families etc… as part of the implementation guide you can learn how to add additional fields such as tags and type.
In the red box you will find information about the actual documents and information that the user has been accessing.

Let’s use this sample where we pair the usage with Copilot for Security. Let us say that one of the object names is listall.json. And I want to get all the information surrounding that file.

Or you may have an e-mail subject that you are concerned about.

The information shared is to provide you with an idea of how to get started. Consider adding actual monetized impact on events across the system. Both those that were avoided and those that had a negative impact.

Improvement Project reporting

For data-driven feedback on the impact of improvement projects, we have a few sample dashboards to get you started. They are there to allow you to see the art of the possible. The rich data that is available from the system will in many cases allow you to build your own data-driven dashboards to show progress. The samples that are available is Document KPI, Oversharing SharePoint, Email KPI, Content upload, Operational Scope, and Operational scope classified content.

Below is a sample dashboard that displays the number of protected versus unprotected document operations across the organization. E.g. which ones are sensitivity labeled and which ones are not. Follow the technical guidance for setting this up properly.

This example provides an overview of the suppliers being used to access sensitive content. This is based on the processes, you may select to do something similar based on the IP tags and ranges and access to sensitive content and systems.

This example contains details about how credential data is being processed across the organization. To capture the All Credential Types you need to enable a policy for all workloads including endpoint.

Incident reporting and progress

The incident reporting and progress view provides insights into the analyst process. It provides the overall efficiency metrics and measures to gauge the performance. It provides incident operations over time by different criteria, like severity, mean time to triage, mean time to resolve, By DLP Policy and more. You should customize this view to work with your practices.

The package also comes with optimization suggestions per workload.  Exchange, SharePoint, OneDrive for Business, Endpoint, Teams, and OCR.

You may select to use Copilot to summarize your incidents and provide next steps. This is a sample of output from Copilot summarizing an incident. The steps for implementing and tuning Security Copilot can be found in the Guidance Playbook for Security Copilot.

Events

As part of the technical documentation, there is guidance to set up additional event collection. If you are a decision-maker, consider if you want to set up alerts based on the views you have in Power BI. It is highly likely that a rule can be set up to trigger flows where you need to be involved. Here is the documentation for Microsoft Defender XDR Create and manage custom detection rules in Microsoft Defender XDR | Microsoft Learn. 

Copilot for security can be used to draw conclusions from all relevant events associated with an incident and provide suggestions for next steps. This is a sample where it uses the corporate policy document from Microsoft Azure AI as well as Microsoft Defender incidents to suggest next steps. You can also use the upload feature Upload a file | Microsoft Learn.

Here is another example where you may want to confirm if content has been touched by a compromised account.

Posts part of this series.

Cyber Security in a context that allows your organization to achieve more
https://techcommunity.microsoft.com/t5/security-compliance-and-identity/cyber-security-in-a-context-that-allows-your-organization-to/ba-p/4120041
Security for Copilot Data Security Analyst plugin https://techcommunity.microsoft.com/t5/security-compliance-and-identity/learn-how-to-customize-and-optimize-copilot-for-security-with/ba-p/4120147 
How to build the Microsoft Purview extended report experience https://techcommunity.microsoft.com/t5/security-compliance-and-identity/how-to-build-the-microsoft-purview-extended-report-experience/ba-p/4122028 

​Microsoft Tech Community – Latest Blogs –Read More 

I created several tags in the Asset Rule Management on Aug13th and 14th that have not run yet. How often do the UI tags get applied?

​I created several tags in the Asset Rule Management on Aug13th and 14th that have not run yet. How often do the UI tags get applied?  Read More

​