Category: Microsoft
Category Archives: Microsoft
New Teams Catch 22 – Microsoft Calls Teams Phone number. Can’t login to Teams without call From MS
New Teams will not run on my machine. I think I found a way to install it but requires me to create a new profile. I created a new profile. When I do that I have to download Teams. In order to do that Microsoft needs to call me. I don’t have Teams on that new profile so I can’t receive the call. All of my phones are routed through Teams. How do I get access to Teams from another computer or profile that doesn’t have Teams on it?
New Teams will not run on my machine. I think I found a way to install it but requires me to create a new profile. I created a new profile. When I do that I have to download Teams. In order to do that Microsoft needs to call me. I don’t have Teams on that new profile so I can’t receive the call. All of my phones are routed through Teams. How do I get access to Teams from another computer or profile that doesn’t have Teams on it? Read More
active sync issue synchronisation mobile :
Hi Teams
we have exchange server 2019 cu 14 with the hotfix avril 2024 with ltm f5 for load balacer,
we noticed that AciveSync users do not receive emails automatically; each time it launches synchronization manualy to see the new emails in gmail or outlook mobile ,
sometime we receive the notification , some time we receive notification late and somtime we d’ont receive
all it’s okay with remote analyser
this phenomenon was not there before.
Do you have any idea about this problem?
Hi Teamswe have exchange server 2019 cu 14 with the hotfix avril 2024 with ltm f5 for load balacer,we noticed that AciveSync users do not receive emails automatically; each time it launches synchronization manualy to see the new emails in gmail or outlook mobile ,sometime we receive the notification , some time we receive notification late and somtime we d’ont receiveall it’s okay with remote analyserthis phenomenon was not there before.Do you have any idea about this problem? Read More
The data area passed to a system call is too small
I have been unable to get Teams to run. I created a brand new profile and installed Teams only. This is what pops up when I try to run it:
I have been unable to get Teams to run. I created a brand new profile and installed Teams only. This is what pops up when I try to run it: Read More
How do I Evaluate my LLM Chatbot?
Earlier posts in this series:
Part 1: Is my Chatbot Ready for Production? – A 10,000 foot overview to LLMOps
After Generative AI burst onto the scene, businesses rushed to learn and leverage the technology. The first wave of adoption has most often materialized as retrieval augmented generation (RAG) chatbot products. When these initial products neared production, product owners, developers, and stakeholders soon began asking…“How do I really know if this thing is any good?”
Of course, common benchmarks for foundational models like MMLU, HellaSwag, or TruthfulQA exist, but after implementing the prompt engineering and RAG pattern needed for a specific use case, a specific testing framework is also required. The challenge is that language model outputs are inherently probabilistic [Nafar et al. 2024]. Simply put – given the same input twice, a model can produce two different outputs – and both outputs can be correct! The new wave of model evaluation and testing for generative models can be distilled into two questions:
Is my model accurate?
Is my model secure?
Is my model accurate?
Consider the following scenario:
Prompt: “Summarize the State of the Union.”
Output 1: “In the 2024 State of the Union, the President addressed key domestic and foreign policy issues. He highlighted economic growth, job creation, and infrastructure development. The President also outlined plans to strengthen healthcare, education, and national security.”
Output 2: “The President emphasized economic growth, healthcare reforms, climate action, and international cooperation in the State of the Union address. He highlighted the importance of economic innovation, education, and unity in addressing national security challenges.
The two outputs are not identical – but in this hypothetical situation they could both be considered ‘accurate’. So, how does one reliably assess accuracy? Natural language evaluation techniques can be buckets into four major categories, ranging from more probabilistic (left side in the picture below) to less probabilistic (right side in the picture below).
LLM Based
LLM Based evaluation methods have become very popular for a wide variety of natural language task assessment [Li et al. 2024]. Common LLM assessed metrics include response Coherence, Fluency, Consistency, and Relevance to a given question or context. Prompts for model assessment LLMs are highly flexible, and they can be quickly changed to improve performance with Chain-of-Thought or few-shot approaches customized to a specific use case. Research indicates that these methods are more performant than other common approaches such as BERTScore, ROGUE-L, and UniEval [Liu et al. 2023] .
Fine-Tuned Models
Fine-tuned evaluators are a natural extension of LLM based approaches. Some of these models already exist, such as Vectara’s Hallucination Evaluation model, or a team can develop their own customized fine-tuned model for a specific use cases given enough training data.
A great example of LLM / Fine-Tuned based approaches is the open source RAGAS framework. RAGAS offers a suite of metrics to users built on top of OpenAI models (by default) or any other model of a user’s choosing.
Encoding + Math
This approach seeks to transform text into a new format that can be analyzed mathematically to determine some metric. This approach can take many forms. The most common is using GPT’s Ada model(s) to embed prompt, context, and response then calculating the cosine similarity between the question-response and context-response to assess response quality. Another variation is using n-grams + BLEU score to compare question, response, and context to achieve the same goal.
Human Analysis
At the end of the day, there is no true replacement for expert human analysis.
Is my model secure?
There are many types of attacks a chatbot may face when released to users. Jailbreaking, prompt injection, data/prompt leaks, or The Waluigi Effect – just to name a few. The good news is there are many strategies to protect against these attacks. To test that your defenses are satisfactory Red Teaming is a critical part of the testing cycle. (Monitoring for attacks in real time is also a critical component – and will be discussed in detail in the next blog in this series!)
Red teaming is when a development or QA team ‘attacks’ their own application to expose and correct weaknesses. In this context, red teaming can be performed by running nefarious prompts simulating adversaries through your model and examining the results. A team can use public datasets, such as RedEval, create their own input dataset for testing specific to their user base, or a combination of both.
Put it all together
The evaluation tactics above can be leveraged to create a comprehensive evaluation framework for your LLM powered chat application. This framework can be used in tandem with normal application testing to provide confidence in a production release. The most effective testing frameworks are broken down into three parts:
Scale testing and red testing can be automated and incorporated into a CI/CD pipeline that ensure model quality and model security are above pre-defined benchmarks before allowing a release to go to production. Check out an example of CI/CD in action using Azure AI Studio. For a more custom approach, Azure PromptFlow can orchestrate many independent evaluation components to build a reliable and flexible evaluation framework. Check out this reference repository to get you started.
Finally, with an established testing framework, the development team is empowered to rapidly prototype different foundational models, prompts, and/or retrieval techniques with clear success criteria. By beginning with the end in mind, a development team can reach their goals as efficiently as possible.
The techniques offered in this blog will not only provide confidence in production deployment, but will also streamline development efforts to confidently prototype and implement state-of-the-art approaches as the field of AI continues its rapid growth!
Microsoft Tech Community – Latest Blogs –Read More
TYPO mistake in learn.microsoft.com
Title: Explore the business value of the Power Fx
https://learn.microsoft.com/en-us/training/modules/introduction-power-platform/6-explore-business-value-power-fxTitle: Explore the business value of the Power Fx Read More
This form can’t be distributed as it is asking for personal or sensitive information on personal acc
Recently received this message on a Microsoft Form after collecting several responses “This form can’t be distributed as it is asking for personal or sensitive information.”
This is on a personal account and the form does not violate terms of use. Please help to remove this!
Recently received this message on a Microsoft Form after collecting several responses “This form can’t be distributed as it is asking for personal or sensitive information.” This is on a personal account and the form does not violate terms of use. Please help to remove this! Read More
USB drive shortcut windows 10 search bar
I’ve recently noticed that my USB drive has started to appear as a shortcut in the Windows 10 search bar. Whenever I search for files or folders, the USB drive is listed along with the results. I’m not sure why this is happening or how to get rid of it. I’ve tried removing the USB drive from the device list and restarting my computer, but the shortcut still appears in the search bar.
I’d like to know what’s causing this issue and how I can get rid of the shortcut. Is there a setting or option that I can adjust to prevent this from happening in the future?
I’ve recently noticed that my USB drive has started to appear as a shortcut in the Windows 10 search bar. Whenever I search for files or folders, the USB drive is listed along with the results. I’m not sure why this is happening or how to get rid of it. I’ve tried removing the USB drive from the device list and restarting my computer, but the shortcut still appears in the search bar. I’d like to know what’s causing this issue and how I can get rid of the shortcut. Is there a setting or option that I can adjust to prevent this from happening in the future? Read More
Find text within a comma delimitated string
I have a column with comma delimitated data string:
1) abc
2) abc,xyz
3) idf,abc
4) pdq,abc,xyz
5) mabc,xyz
6) idf,abcd
I am trying to show any data set with ID abc in it and i can pick out with a formula the solo abc and ,abc, but I’m having issues with the sets where abc is included within another ID as shown in set 5) & 6). Any suggestions?
I have a column with comma delimitated data string:1) abc2) abc,xyz3) idf,abc4) pdq,abc,xyz5) mabc,xyz6) idf,abcd I am trying to show any data set with ID abc in it and i can pick out with a formula the solo abc and ,abc, but I’m having issues with the sets where abc is included within another ID as shown in set 5) & 6). Any suggestions? Read More
I need a cell to =5 always, unless the days are more than 5 then sum (max 7)
I am calculating Per Diem Days. Right now I use =COUNTIF(G111:M111,”>0″) for all employees, there is one employee who is paid 5 no matter days worked unless he more than 5 with a max of 7 days in the week. I am not sure what formula I should use.
I am calculating Per Diem Days. Right now I use =COUNTIF(G111:M111,”>0″) for all employees, there is one employee who is paid 5 no matter days worked unless he more than 5 with a max of 7 days in the week. I am not sure what formula I should use. Read More
Excel crashing when combining BYCOL and INDIRECT
Following recent updates (Excel latest version and/or MacOS 14.5 ?), Excel crashes systematically on Mac OS 14.5, with a simple formula using BYCOL & INDIRECT:
=BYCOL(A3:E3;LAMBDA(col;INDIRECT(INDEX(col;1))))
with following data starting in A1
toto1toto2toto3toto4toto5 A1A2A3A4A5
my configuration : MacOS 14.5 on Macbook pro 16 with Apple M3 Max + Excel version 16.85 (24051214) with Microsoft 365 subscription
a few days ago (before latest updates) it wouldn’t crash.
Thanks for your support.
Following recent updates (Excel latest version and/or MacOS 14.5 ?), Excel crashes systematically on Mac OS 14.5, with a simple formula using BYCOL & INDIRECT:=BYCOL(A3:E3;LAMBDA(col;INDIRECT(INDEX(col;1))))with following data starting in A1toto1toto2toto3toto4toto5 A1A2A3A4A5my configuration : MacOS 14.5 on Macbook pro 16 with Apple M3 Max + Excel version 16.85 (24051214) with Microsoft 365 subscriptiona few days ago (before latest updates) it wouldn’t crash.Thanks for your support. Read More
Autopopulate data in one sheet (using formula’s) based on data update in another sheet.
Hi, I need to Autopopulate data in one sheet (using formula’s) based on data update in another sheet.
When i update Values in Col 1, Col2 , Col 4, Col5, Col 6 on this current sheet – i want values in another sheet in the same excel worksheet to be updated (they have formula to refer these cells).
Any suggestions on how to achieve this? Thanks.
Hi, I need to Autopopulate data in one sheet (using formula’s) based on data update in another sheet.When i update Values in Col 1, Col2 , Col 4, Col5, Col 6 on this current sheet – i want values in another sheet in the same excel worksheet to be updated (they have formula to refer these cells).Any suggestions on how to achieve this? Thanks. Read More
Entra ID Shared Device Mode Sign-out Button
Hi All
I hope you are well.
Anyway, I’m configuring some devices in Entra ID Shared Device Mode and pretty easy so far.
One thing I have noticed is that there is NO obvious SIGN-OUT button, best I could find was to swipe down from the top > Account > Sign-out
Non-technical users may struggle with that.
Any ideas on how to display a more obvious Sign-out button?
Info appreciated
Hi All I hope you are well. Anyway, I’m configuring some devices in Entra ID Shared Device Mode and pretty easy so far. One thing I have noticed is that there is NO obvious SIGN-OUT button, best I could find was to swipe down from the top > Account > Sign-out Non-technical users may struggle with that. Any ideas on how to display a more obvious Sign-out button? Info appreciated Read More
Azure Function App Http Javascript render simple html file to replicate jsrsasign sign certificate
Good day, Please Help.
1. In PowerBI im trying to render the javascript sign certificate of jsrsasign, i only got it working via an html file. So im trying to read the html file, simple hello to start of with. Am i better going directly to do the jsrsasign?
2. Locally on VS i got the simple function to return Hello Azure, but trying to read the simple html file executes no error but if i copy in postman i just get a 401 no content found, im not sure how further to debug as in VS i get Ok status, Nothing in Console?
Anybody have an example or links plz?
const { app } = require(‘@azure/functions’);
const fs = require(‘fs’);
const path = require(‘path’);
app.http(‘IC5’, {
methods: [‘GET’, ‘POST’],
authLevel: ‘anonymous’,
handler: async (request, context) => {
context.log(`Http function processed request for url “${request.url}”`);
// const name = request.query.get(‘name’) || await request.text() || ‘world’;
// return { body: `Hello, ${name}!` };
//var res = {
//body: “”,
//headers: {
//”Content-Type”: “text/html”
//}
//};
// readFile = require(‘../SharedCode/readFile.js’);
//filepath = __dirname + ‘/test3.html’;
//fs = require(‘fs’);
//await fs.readFile(filepath,function(error,content){
fs.readFile(path.resolve(‘./test3.html’), ‘UTF-8’, (err, htmlContent) => {
context.res = {
status: 200,
headers: {
‘Content-Type’: ‘text/html’
},
body: htmlContent
}
})
// if (request.query.name || (request.body && request.body.name)) {
// res.body = “<h1>Hello ” + (request.query.name || request.body.name) + “</h1>”;
//} else {
//fs.readFile(path.resolve(__dirname,’test3.html’), ‘UTF-8’, (err, htmlContent) => {
//res.body= htmlContent;
//context.res = res;
//});
// }
}
});
//TEST IN POSTMAN: http://localhost:7071/api/IC5?name=hurry
Good day, Please Help. 1. In PowerBI im trying to render the javascript sign certificate of jsrsasign, i only got it working via an html file. So im trying to read the html file, simple hello to start of with. Am i better going directly to do the jsrsasign? 2. Locally on VS i got the simple function to return Hello Azure, but trying to read the simple html file executes no error but if i copy in postman i just get a 401 no content found, im not sure how further to debug as in VS i get Ok status, Nothing in Console? Anybody have an example or links plz? const { app } = require(‘@azure/functions’);
const fs = require(‘fs’);
const path = require(‘path’);
app.http(‘IC5’, {
methods: [‘GET’, ‘POST’],
authLevel: ‘anonymous’,
handler: async (request, context) => {
context.log(`Http function processed request for url “${request.url}”`);
// const name = request.query.get(‘name’) || await request.text() || ‘world’;
// return { body: `Hello, ${name}!` };
//var res = {
//body: “”,
//headers: {
//”Content-Type”: “text/html”
//}
//};
// readFile = require(‘../SharedCode/readFile.js’);
//filepath = __dirname + ‘/test3.html’;
//fs = require(‘fs’);
//await fs.readFile(filepath,function(error,content){
fs.readFile(path.resolve(‘./test3.html’), ‘UTF-8’, (err, htmlContent) => {
context.res = {
status: 200,
headers: {
‘Content-Type’: ‘text/html’
},
body: htmlContent
}
})
// if (request.query.name || (request.body && request.body.name)) {
// res.body = “<h1>Hello ” + (request.query.name || request.body.name) + “</h1>”;
//} else {
//fs.readFile(path.resolve(__dirname,’test3.html’), ‘UTF-8’, (err, htmlContent) => {
//res.body= htmlContent;
//context.res = res;
//});
// }
}
});
//TEST IN POSTMAN: http://localhost:7071/api/IC5?name=hurry Read More
Why is Exchange 2016 using DNS A record instead of MX record to send mail?
Exchange 2016 trying to send mail to sargb.com.
Instead of sending to their MX “sargb-com.mail.protection.outlook.com”, it is sending mail to sargb.com (18.235.162.72).
I cleared the DNS cache on the 2-domain controllers and flushed DNS on Exchange.
What should I try next?
TiA!
Exchange 2016 trying to send mail to sargb.com.Instead of sending to their MX “sargb-com.mail.protection.outlook.com”, it is sending mail to sargb.com (18.235.162.72).I cleared the DNS cache on the 2-domain controllers and flushed DNS on Exchange.What should I try next?TiA! Read More
Increased security visibility through new Standard Logs in Microsoft Purview Audit
Microsoft Purview Audit provides an integrated solution to help organizations effectively respond to security incidents, forensic investigations, internal investigations, and compliance obligations. As announced in the previous Microsoft blogs in July 2023 and October 2023, Microsoft Purview Audit is expanding access to wider cloud security activity logs. As part of the changes, Audit (Standard) license holders will be able to access an additional 30 audit logs that were previously generated only for Audit (Premium) license holders. Eleven new Standard logs under Stream and Viva Engage workloads became Generally Available in November 2023.
We are excited to announce that the remaining 19 new Standard logs under Exchange, Microsoft Teams, and SharePoint Online workloads are now available in Public Preview to all Worldwide and Gov cloud customers. To learn more about when these logs will become Generally Available in your tenant, please visit the Public roadmap.
Overview of New Standard Logs
19 new Standard logs are now available in Public Preview under Exchange, Microsoft Teams, and SharePoint Online workloads. The following table provides details of these logs.
Workload
Operation
Description
Exchange
send
A message was sent, replied to or forwarded.
mailitemsaccessed
Messages were read or accessed in mailbox.
searchqueryinitiatedexchange
Triggered when a user searches for items in an Exchange mailbox.
Teams
meetingparticipantdetail
Teams added information about the participants of a meeting, including the user ID of each participant, the time a participant joined the meeting, and the time a participant left the meeting.
messagesent
A new message was posted to a chat or channel.
messageslisted
Messages from a chat or channel were retrieved.
meetingdetail
Teams added information about a meeting, including the start time, the end time, and the URL to join the meeting.
messageupdated
A message of a chat or channel was updated.
chatretrieved
A Microsoft Teams chat was retrieved.
messageread
A message from a chat or channel was retrieved.
messagehostedcontentread
Hosted content in a message, such as an image or a code snippet, was retrieved.
subscribedtomessages
A subscription was created by a listener application to receive change notifications for messages.
messagehostedcontentslisted
All hosted content in a message, such as images or code snippets, was retrieved.
chatcreated
A Teams chat was created.
chatupdated
A Teams chat was updated.
messagecreatednotification
A change notification was sent to notify a subscribed listener application of a new message.
messagedeletednotification
A change notification was sent to notify a subscribed listener application of a deleted message.
messageupdatednotification
A change notification was sent to notify a subscribed listener application of an updated message.
SharePointOnline
searchqueryinitiatedsharepoint
Triggered when a user searches for items in SharePoint sites of the organization.
The following 11 new Standard Logs under Stream and Viva Engage workloads are Generally Available.
Workload
Operation
Description
Stream
streaminvokegettranscript
A transcript was extracted from Microsoft Stream.
streaminvokechannelview
This event tracks when a user views a channel in Microsoft Stream.
streaminvokegettexttrack
Accessing or retrieving text tracks (such as captions or subtitles) associated with a video in Microsoft Stream.
streaminvokegetvideo
Video content was invoked on Microsoft Stream.
streaminvokegroupview
A group was viewed on Microsoft Stream.
Viva Engage (Yammer)
threadviewed
User views a thread on Viva Engage.
threadaccessfailure
User failed to access a thread on Viva Engage.
messageupdated
User updates a message in Viva Engage.
fileaccessfailure
User failed to access a file in Viva Engage.
messagecreation
User creates a message in Viva Engage.
groupaccessfailure
User failed to access a group in Viva Engage.
Premium insights available for Audit (Premium) users
Audit (Premium) license holders will continue to get longer default retention, broader access to export data, higher bandwidth API access, and logs enriched by Microsoft’s AI-powered intelligent insights. If your organization has users with an Audit (Premium) license, they will generate the following logs with additional data described in the Premium Insight column below.
Workload
Operation
Premium Insight
Exchange
mailitemsaccessed
SensitivityLabel
Teams
meetingparticipantdetail
IsJoinedFromLobby
messageslisted
AppAccessContext
messageupdated
ParticipantInfo, AppAccessContext
chatretrieved
AppAccessContext
messageread
AppAccessContext
messagehostedcontentread
AppAccessContext
subscribedtomessages
AppAccessContext
messagehostedcontentslisted
AppAccessContext
chatcreated
AppAccessContext
chatupdated
AppAccessContext
messagecreatednotification
AppAccessContext
messagedeletednotification
AppAccessContext
messageupdatednotification
AppAccessContext
Enable Exchange Mailbox Logging
The Exchange MailItemsAccessed and Send logs are enabled by default unless the mailbox’s DefaultAuditSet setting was modified. To ensure these new standard logs are generated, an admin may need to ensure the appropriate mailbox settings are enabled.
The following command can be used to check if a mailbox is currently using the default audit settings:
Get-Mailbox -Identity <MailboxIdentity>
The DefaultAuditSet property returned by the Get-Mailbox cmdlet; a mailbox using the defaults will show the following result:
DefaultAuditSet : { Owner, Admin, Delegate }
If any of those values are missing, the mailbox is not using the default audit settings.
If any changes were previously made to the default mailbox settings for a Standard user, an update must be made to enable the new standard Exchange logs for each mailbox. To ensure the new standard Exchange logs MailItemsAccessed and Send are stored, admins will either need to make sure Audit mailboxes are configured to the default settings or add the new standard logs to each mailbox. The following changes can be made in Exchange Online PowerShell.
Option 1: Reset each mailbox to the default settings
Any previous customizations, like auditing of MailboxLogin, will be reset once the mailbox is using the default settings. The following command will re-enable the default audit settings for the mailbox:
Set-Mailbox -Identity <MailboxIdentity> -DefaultAuditSet Admin,Delegate,Owner
Option 2: Add the new standard logs to each mailbox
If you would prefer to keep the customizations for each mailbox, the following Set-Mailbox command will add the new standard logs to each mailbox. This command will add (only) the new Standard logs for each mailbox, retaining any existing customization, but any future changes to the defaults will need to be added at that point:
Set-Mailbox -Identity <MailboxIdentity> -AuditOwner {@Add=”MailItemsAccessed”,”Send” } -AuditAdmin {@Add=”MailItemsAccessed”,”Send”} -AuditDelegate {@Add=”MailItemsAccessed”}
Enable Mailboxes for all Standard Users
Every standard user mailbox should have AuditEnabled set to true to ensure all audit records are uploaded to Purview Audit. This step is not necessary for any users with an Audit Premium license assigned. Please note that this Set-Mailbox command must be run for every Standard license user regardless of its current value to correctly enable their mailbox to upload the new standard logs to Purview Audit.
The following command will set AuditEnabled to true.
Set-Mailbox -Identity <MailboxIdentity> -AuditEnabled $true
More information regarding the setup instructions for these commands and information regarding permissions can be found here. Detailed information regarding activating these new logs for Audit Standard users will be added in a future update to the Microsoft Purview Audit public documentation.
We are pleased to share today’s cloud logging update as a continuation of the thoughtful conversations we’ve had with our security experts, customers, and influential authorities like CISA. Please visit the Public roadmap to get the latest information on updates coming to Microsoft Purview Audit.
Microsoft Tech Community – Latest Blogs –Read More
Announcing public preview of Bicep templates support for Microsoft Graph
v:* {behavior:url(#default#VML);}
o:* {behavior:url(#default#VML);}
w:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
Dan Kershaw
Normal
Dan Kershaw
3
6436
2024-05-15T17:40:00Z
2024-05-15T17:43:00Z
1
786
4484
37
10
5260
16.00
Clean
Clean
false
false
false
false
EN-GB
X-NONE
<w:LidThemeComplexscript>X-NONE</w:LidThemeComplexscript>
We’re thrilled to announce that Bicep templates for Microsoft Graph resources will be in public preview starting May 21st. Bicep templates bring declarative infrastructure-as-code (IaC) capabilities to Microsoft Graph resources. This new capability will initially be available for core Microsoft Entra ID resources.
Bicep templates for Microsoft Graph resources allow you to define the tenant infrastructure you want to deploy, such as groups or applications, in a file, then use the file throughout the development lifecycle to repeatedly deploy your infrastructure. The file uses the Bicep language, a domain-specific language (DSL), that uses declarative syntax to deploy resources typically used in DevOps and infrastructure-as-code solutions.
What problems does this solve?
Azure Resource Manager or Bicep templates allow you to declare Microsoft Azure resources in files and deploy those resources into your infrastructure. Configuring and managing your Azure services and infrastructure often includes managing Microsoft Entra ID resources, like applications and groups. Until now, you had to orchestrate your deployments between two mechanisms using ARM or Bicep template files for Azure resources and Microsoft Graph PowerShell for Microsoft Entra ID resources.
Now, with the Microsoft Graph Bicep release, you can declare the Microsoft Entra ID resources in the same Bicep files as your Azure resources, making configurations easier to define, and deployments more reliable and repeatable.
Let’s look at how this works and then we’ll run through an example.
The Microsoft Graph Bicep extension
To provide support for Bicep templates for Microsoft Graph resources, we have released the new Microsoft Graph Bicep extension that allows you to author, deploy, and manage supported Microsoft Graph resources (initially Microsoft Entra ID resources) in Bicep template files either on their own, or alongside Azure resources.
Authoring experience
You get the same first-class authoring experience of the Bicep Extension for VS Code when you use it to create your Microsoft Graph resource types in Bicep files. The editor provides rich type-safety, IntelliSense, and syntax validation.
Editing a Bicep file containing Microsoft Graph resources
You can also create Bicep files in Visual Studio with the Bicep extension for Visual Studio.
Deploying Bicep files
Once you have authored your Bicep file, you can deploy it using familiar tools such as Azure PowerShell and Azure CLI. When the deployment request is made to the Azure Resource Manager the deployments engine orchestrates the deployment of interdependent resources so they’re created in the correct order, including the Microsoft Graph resources.
The following image shows a Bicep template file where the Microsoft Graph group creation is dependent on the managed identity resource, as it is being added as a group member. The deployments engine first sends the managed identity request to the Resource Manager, which routes it to the Microsoft.ManagedIdentity resource provider. Next, the deployments engine sees that Microsoft.Graph/groups is an extensible resource, so it knows to route this resource request to the Microsoft Graph Bicep extension. The Microsoft Graph Bicep extension then translates the groups resource request into a request to Microsoft Graph.
Deploying a Bicep file containing Microsoft Graph resources
Scenario: Using managed identities with security groups and app roles
Managed identities can be assigned to security groups and Microsoft Entra ID app roles as an authorization strategy. Using security groups can simplify management by reducing the number of role assignments.
Using a Microsoft Entra ID group to assigned roles to managed identities
However, this configuration isn’t possible using a Bicep or Resource Manager template. With Microsoft Graph Bicep extension, this limitation is removed. Rather than assigning and managing multiple Microsoft Azure role assignments, role assignments can be managed via a security group through a single Bicep file.
Bicep file declaring an Microsoft Entra ID group with a managed identity member
In the example above, a security group can be created and referenced, whose members can be managed identities. With Bicep templates for Microsoft Graph resources, declaring Microsoft Graph and Microsoft Azure resources together in the same Bicep files, enables new and simplifies existing deployment scenarios, bringing reliable and repeatable deployments.
Learn more
Bicep templates for Microsoft Graph resources documentation
Try out the create and deploy your first Bicep file with Microsoft Graph resources quickstart
Microsoft Tech Community – Latest Blogs –Read More
SMS MESSAGES PLUS TEXT PROBLEMS
When i try to send a text message, with Skype it does not work and i have credits in my account can someone help please thanks
When i try to send a text message, with Skype it does not work and i have credits in my account can someone help please thanks Read More
Microsoft power bi not opening
i have Microsoft power bi app installed at my laptop but it is not opening and throwing this below error.
error parsing
c:\windowsMicrosoft.NETFramework64v4.0.30319configmachine.config
parserreturned error 0x80004005
the type initializer for ‘system.net.servicepointManager’ threw an exception
how to resolve it?
i have Microsoft power bi app installed at my laptop but it is not opening and throwing this below error.error parsingc:\windowsMicrosoft.NETFramework64v4.0.30319configmachine.configparserreturned error 0x80004005the type initializer for ‘system.net.servicepointManager’ threw an exceptionhow to resolve it? Read More
Custom Grammar Model?
I’ve been experimenting with using Sharepoint data as the base for Azure AI Search and Co-Pilot studio and so far stuck with chatbot assistants.
I then had an idea which I don’t know if it’s possible – our company has lengthy writing guidelines (things like bullet point formatting, capitalization, etc.). Can I create a custom Co-Pilot model using this information, and then use it within Microsoft Word to suggest corrections as a user creates a document?
Thank you!
I’ve been experimenting with using Sharepoint data as the base for Azure AI Search and Co-Pilot studio and so far stuck with chatbot assistants. I then had an idea which I don’t know if it’s possible – our company has lengthy writing guidelines (things like bullet point formatting, capitalization, etc.). Can I create a custom Co-Pilot model using this information, and then use it within Microsoft Word to suggest corrections as a user creates a document? Thank you! Read More
linking 2 work books
I am trying to link 2 different workbooks. I am trying to link one work book with my equipment labels to my check list of equipment labels. so when I put in a number in my check list it will turn the cell green if the number matches with my equipment labels and turn red if it does not match
I am trying to link 2 different workbooks. I am trying to link one work book with my equipment labels to my check list of equipment labels. so when I put in a number in my check list it will turn the cell green if the number matches with my equipment labels and turn red if it does not match Read More
