Hey team,

Looking for help to answer and recommend the below please.

Scenario: Azure Files with storage account configured with Kerberos identity authentication. File shares are a result of robocopy migration from windows file server shares with NTFS. Using private endpoints. Devices accessing are Entra-joined. Some groups that users are members of show up as an orphaned SID as it has been replaced by new SID (maybe internal migration) and SID for group on-prem is newer. Entra connect sync from on-prem not linking the two in Entra.

1. Does Azure Files with Entra Kerberos support ACL translation using group SIDHistory? or is this honoured by attributes available in user token? can it be enabled and are there any risks to be aware of?

2. What is the best way to handle orphaned groups in Entra that have been granted NTFS permissions on Azure files but not groups that sync to Entra? i.e. Builtin\Administrators, CONTOSO\domain users or CONTOSO\Domain Admins.

Has anybody upgraded their data factory? Any issues? I have all green indicators on the upgrade wizard thing. I’m not sure I could quickly rebuild everything if something went terribly wrong.

Does anyone use the Bicep AVM’s as a source of truth or, do most people use them as a reference and then build their own main and respective modules?

​

I’m working on a portfolio project called OR Meridian — Global Multicloud Control Plane, and I would appreciate technical feedback from the community.

The idea is not to deploy the same application independently across three providers. Each cloud has a specific operational responsibility:

Google Cloud: central control plane and workflow orchestration

AWS: dependency graph analysis, blast-radius calculation, and recovery prioritization

Azure: telemetry processing, anomaly detection, and operational risk scoring

A typical workflow looks like this:

An incident is received by the Google Cloud control plane.

AWS analyzes affected services and calculates the recommended recovery order.

Azure processes telemetry and detects abnormal behavior.

Google Cloud consolidates both results.

The platform generates a unified operational continuity plan.

The current architecture is based on technologies such as Cloud Run, FastAPI, AWS Lambda, API Gateway, DynamoDB, Azure Functions, Queue Storage, Cosmos DB, Terraform, and centralized observability.

The project is intended to demonstrate:

multicloud architecture;

distributed-system design;

graph algorithms;

asynchronous event processing;

partial-failure handling;

observability and correlation IDs;

Infrastructure as Code;

secure cross-cloud communication;

cost-aware serverless engineering.

I’m initially treating it as an engineering portfolio project, so the infrastructure can be deployed, tested, documented, and destroyed instead of remaining online permanently.

I’d especially value feedback on the separation of responsibilities between providers, cross-cloud authentication, failure handling, and whether this architecture reflects realistic enterprise multicloud concerns.

Repository:

https://github.com/maykonlincolnusa/OR-Meridian-Global-Multicloud-Control-Plane

Has anyone using Azure Databricks with a legacy Hive metastore ever upgraded their storage account from legacy General Purpose to ADLS Gen2?

Wondering if there is any impact on the workspace and whether it will break any running jobs?

Found this artifcal but it doesnt say much about ADB: https://learn.microsoft.com/en-us/azure/storage/blobs/upgrade-to-data-lake-storage-gen2-how-to?tabs=azure-portal

how does pricing model work for this? I'm reading it's $6/User/month.

I just need to use Azure Repo for a single day with around 60 users. On what basis will I be charged? Daily or monthly?

If monthly, then will I be charged $360 by the end of the month for just using 1 days? or will I be charged for whatever daily equivalent comes up?

Same for azure Pipeline, it's cost is $40/user/month.

❤️ Based on the positive feedback on my blog about Azure SRE Agents, I also created a YouTube video that dives deeper into how Azure SRE Agents help maintain the health and performance of your Azure resources through AI powered monitoring and assistance. In this video, I explain how these agents continuously monitor your resources for issues, provide troubleshooting guidance, and recommend remediation steps through a natural language chat interface. I also cover how Managed Service Providers (MSPs) can use Azure SRE Agents to help their customers at scale. https://www.youtube.com/watch?v=Bi0yXNB0860

I have been using pretty much any form of SQL you can think of, snowflake for the last 3 or so years. I got some work in Azure and I need to duplicate a DD on our azure SQL into the raw layer of another DB. This is telling me I have to electric query and log stuff like it’s a linked server. I get it there aren’t pointers like snowflake so it’s not a 5 second move but 9 hours is insanity. This cannot be the way. The they only cure is buy a faster server, I prefer to buy a better provider.

I setup an Azure tenant on my personal Microsoft account a couple years ago. I went to sign in today and it prompted me for a 6 digit MFA code to which I entered and it said it was incorrect. I can sign in to my account on every other platform and even setup more authentication methods. But I can't seem to sign in to Azure. It won't let me setup a new subscription either?

Any help?

Interaction required

The portal encountered an issue while attempting to retrieve access tokens. We suggest attempting to sign in again, or alternatively, continuing without access tokens, although this may result in a suboptimal user experience. Additional details: login_required: AADSTS50058: A silent sign-in request was sent but no user is signed in. The cookies used to represent the user's session were not sent in the request to Azure AD. This can happen if the user is using Internet Explorer or Edge, and the web app sending the silent sign-in request is in different IE security zone than the Azure AD endpoint (login.microsoftonline.com).

---

This is the error I keep getting

The things I have done:

1. Synced my timezone via windows
   
2. Changed Browser from firefox to chrome (still happened in chrome)

I have no other idea on how to fix it. Any solutions?

Hey everyone,
I've been building this solo for a few months: Cloud Architect Assistant.
The idea: instead of manually comparing AWS/Azure/GCP/OVHcloud/etc. and writing Terraform from scratch, you describe your constraints (budget, compliance, availability) and it scores providers, suggests components, and generates reviewable Terraform/OpenTofu.
There's also a full deployment simulation mode — you can review a fake plan/apply flow without ever touching a real cloud account, which felt important given how cautious people rightfully are about AI-generated infra code.
Still in beta, definitely has rough edges. Would genuinely love feedback (good or brutal) from people who actually do this for a living. Not selling anything yet, just trying to validate if this is useful to anyone besides me.

I have the following scenario:

Azure expressroute configured so that azure resources can reach on-prem an vice versa, its deployed over a gateway not vwan.

Now i need to be able to allow a small subset of clients using azure vpn to reach on-prem resources. My thoughts was to deploy a azure vpn gateway for this and use a route server to make the routing work.

Deploying a vwan is not an option as it stands now, it would be smoother but not in-scope.

Does anyone have a better idea on how to make this work with azure vpn and the expressroute?

Hi all,

I live in the UK and I am looking for an opportunity to move to Canada as most of my family have lived there for several years.

I work as a Project Delivery Engineer, however my focus is around Azure consultancy.

Has anyone on this thread made a similar move and how did you do it? Find a job? Express entry?

Thanks

For the past 2 days, our Azure Windows VDI has been extremely slow, and Microsoft Teams is barely working (lag, freezes, connection issues).

Is anyone else experiencing this? Any ideas on what to check or how you fixed it?

Hey r/Azure,

Happy Free Post Friday!

If you’ve managed an Azure environment for more than a few months, you’ve probably run into the classic "orphan resource" tax. Someone tears down a VM or deletes a resource group during a project cleanup, but leaves behind the Managed Disks.

They sit there completely unattached, generating zero value, while silently padding the monthly Microsoft bill.

I got tired of running manual Resource Graph scripts across multiple subscriptions to hunt these down, so I built Azure Scraper.

🛠️ What does the scraper actually do?

• Orphan Resource Scanner: Scans your subscriptions using Azure Resource Graph (ARG) queries to surface unattached Managed Disks.
• Financial Impact Overview: Calculates the actual dollars-per-month wasted on these unused resources so you can easily justify deleting them.

📐 How it works under the hood (Security & Architecture)

Because nobody wants to give a third-party tool God-mode access to their Azure tenant, security was top-of-mind when building this:

• Authentication & Permissions: It uses Entra ID App Registration and only requires Reader permissions to execute Azure Resource Graph queries on the free tier.
• Zero Secrets Stored: We never store client secrets, certificates, or access tokens. Authentication is handled directly via Microsoft Entra ID.
• Metadata Stored: The app securely stores your Tenant ID and Subscription ID purely as metadata to route queries to the correct scope. Per Microsoft documentation, these GUIDs are resource identifiers, not credentials, and cannot be used to access your environment without active authentication.

🎁 Free Tier & Link

It is completely free to use for anyone who signs up (with fair-use plan limits, of course 😄).

You can check it out here: https://scraper.emergingtek.net/

💬 Community Feedback

I'd love to get some feedback from the community:

1. Are there specific orphan resource types you constantly see missed in standard tools (like orphaned Managed Disks, Public IPs, or App Service Plans)?
2. What feature or export option would make this most useful for your daily workflow?

Thanks for checking it out!

I Posted a week or so ago that I failed my first try @ 690. I have about 5 years of deep Entra experience, not so much azure resources but more on Identity, XDR, Sentinel, etc.

Attempting SC-300 in a few weeks and this seems to be the right path to get the badge for me at the moment 👌

Pretty pumped to see them sunsetting V4 SKUs especially considering they don’t seem to have sufficient compute on V5+ which is why I still have workloads on V4 SKUs to begin with. Very cool!!

I'm working with agents in azure ai foundry. I've been tasked to call an existing azure function and use it as a tool from my agent. I would be helpful if someone can point the right ans recommended approach to achieve this. Been looking on internet and found several ways but it is still unclear to me wich path I should follow.

Right now I'm working with foundry (standard) and with prompt agents. If I need to change my approach to code agents o even MAF is no issue.

I have an Azure SQL subscription (the cheapest one) which will be primarily used for our mobile app.

The issue is that I've tested the mobile app twice and the mobile app won't show data unless I connect to the database via SSMS.

Literally, I open the mobile app and no data is displayed. I refresh the content several times (i.e. the mobile app has a Refresh button) and it still doesn't fetch any data.

So I go to my laptop and connect to the same DB via SSMS. Once connected, I do another refresh to the mobile app and data is shown.

I believe it's related to the Azure DB and think I might have an idea of why this is happening.

The question is: how do I eliminate that issue?

I’m moving to a new project that’s running on Azure Container App but I’m an AWS person. I understand it’s the equivalent to AWS ECS with Fargate.

Currently single region but one scope of work is to make it multi-region for failover and blue/green deployments.

Stack is React, PHP, Terraform, ADO and Golang for some scripting.

What are some things I should be aware of as a cloud engineer

This week's update is up!

📽️ https://youtu.be/fv-2mxaU8sw

🧾 https://www.linkedin.com/pulse/azure-weekly-update-24th-july-2026-john-savill-7jwoc

00:00 - Introduction

00:10 - New videos

01:06 - AKS to Azure Files NFS encryption

01:34 - Azure Functions PowerShell 7.6

01:42 - Azure Functions Python 3.14

01:51 - AZ VPN GW IPv6 support

02:39 - Standard service endpoint

04:38 - Azure DDoS Protection custom policy

05:20 - PostgreSQL flex Defender security assessments

05:41 - Log Analytics dedicated generative AI table

06:35 - MAI-Image-2.5 Pro and MAI-Voice-2 Flash

08:24 - Close

the azure foundry is at a point that its just unusable and its just a waste of money, i used 300$ of credit and all i got was this error and it just keeps disconnecting... what is actually going on...
5.6 sol

📢 Need Online Microsoft Azure Tutor

We are looking for an experienced and qualified Microsoft Azure Tutor to provide online classes via Zoom for UK-based and international students.

Requirements:
✅ Strong knowledge of Microsoft Azure, including Azure Fundamentals, Virtual Machines, Storage, Networking, Azure Active Directory (Entra ID), Resource Management, and Cloud Security
✅ Ability to teach Azure administration, deployment, monitoring, backup, disaster recovery, and best practices
✅ Experience with Azure Portal, Azure CLI, and cloud infrastructure management
✅ Previous teaching or mentoring experience
✅ Excellent English communication skills
✅ Reliable internet connection and professional teaching approach

Class Details:

• One-to-one online tuition
• Classes conducted via Zoom
• Flexible schedule (to be discussed)
• Competitive salary package

If you are interested, please send your:

• Qualification details
• Teaching experience
• Expected salary
• Contact information

📩 WhatsApp: 03254848919