I have two Azure Active Directories that I cannot delete. One is a remnant from a project at a former company. One is from a Azure demo that I tried.
I am certain that these directories are not being used and I would naturally like to delete them.
When I switch to either of these directories I get a notification popup in the upper right corner of the Azure portal which states: "You do not have any Azure subscriptions in the directory".
After switching to either of these directories I went to the Overview page (Azure Active Directory -> Overview).
In the menu bar at the top of the overview page the "Delete Directory" button is grayed out. Hence my problem.
Also the Overview page indicates that my role is User. Clearly this is not encouraging, since generally only owners can delete items.
So I appear to be stuck with this useless clutter.
Any suggestions. Should I contact Azure support and have them try?
Thanks in advance for any suggestions.
Best regards,
Frank
I had the same issue as you (like 25 AD's from testing at different clients'), and no way to remove them. Contacting support will get this sorted quickly. I do wonder how people do this without a suppor package ;-)
Related
On the Azure portal, since a couple of days, clicking on the subscription filter, the portal automatically brings me to directory/subscription settings. This is not the desired behaviour.
I automatically get this :
Any clues ?
#cat5dm - Apologies for delay in getting back to this thread. Post validation with our internal team below is the update I can share with you.
Post consistent feedback from customers handling many subscriptions , the full screen experience for settings and filters was the design choice taken. The idea was to centralize all settings in one place rather than two. In the meantime, we are directing the old filter icon to the settings so that users would find the new location without having to discover the gear icon . However, we will be eventually removing the filter button from the top and only have the settings gear.
Hope this information helps. We hope the new experience will be helpful , however if you have any feedback, please let us know. Thank you
My Azure Subscription is listing Default Directories from other people's subscriptions within my "All Directories" listing. I want to remove them...but I'm having an EXTREMELY difficult time doing it.
I have contacted the owners of these directories...and they do not respond to my requests to be removed
This has been going on for months
Q: How do I dis-associate myself and/or remove these directories from my listing?
UPDATE:
Unfortunately, the "Leave New Experience" on https://myapps.microsoft.com does not display enough information to be sure "which" Default Organization I am leaving.
I could accidentally leave my own...right?
I took a chance...and it threw an exception...so this UI doesn't work
This works even for personal addresses:
Go to https://myaccount.microsoft.com?tenantId={directoryId} (replace {directoryId} with guid of the directory you wish to leave), click Organizations, click Leave, verify that guid is correct and confirm.
You can try this,
Log into the Access Panel at https://myapps.microsoft.com
In the upper-right corner, select your name.
Next to Organizations, select the settings icon (gear).
Under Organizations, find the organization that you want to leave, and select Leave organization.
NOTE : If you are not seeing the gear icons next to organizations, you need to switch to the new old look by clicking on leave new experience as below
You can go to https://myaccount.microsoft.com/organizations to leave AAD organizations that you have been invited to.
We have a project administrator for a collection of projects on TFS Online. We recently hired so he had to add the guy as a new member into the team.
However he cannot see one specific project we have, even with identical permissions as the other users. His account was created in the same way as the others.
Trying to help the guy out here I offered to try a few things and noticed, If I create a new project as a test. "Test1", and add him as a member, he can see this account fine when he logs in to TFS Online/Connects on Visual Studio.
Which leads me to believe that it's based on some visibility setting within TFS, even though the other members linked to the project can see it fine.
Any possible ideas for me to try?
You need to try and trace his effective permissions. It sounds like there is a denied somewhere.
If you open the admin for that team project and goto the security tab there is a box to add the users account. You should then see the effective permission on the right and he should have and Alowed in the "View project level information" permission.
If he does bot you can roll your mouse over it and click the "why" button and you will see where the overide is coming from.
I have two reports that I need to build. One that has a dozen or so columns. The other has the same columns + 2 extra. The first one is aimed at employees the second with the additional columns is aimed at Sr. Management.
I have a windows group set up for the proper Sr. Mgt users.
I am using SQL 2012.
I've done some SSRS stuff, but not enough to say I'm competent to do more difficult reports.
The problem I'm having is that we do not want the employees to see the sensitive information in those two columns. Frankly, we don't even want them to know the existence of a different report.
Option 1: I was thinking I can just create a folder in SSRS and add the report there and hide the folder. I created it and applied the security but it seems that everyone can see the folder. Maybe they can't edit anything in it or even maybe they can't read anything in it, but this solution, if unchanged, will not meet the goal of having them not even see it exists.
Option 2: I was thinking that I can use the UserID condition to hide the columns in the report and just create one report that differs depending on who was viewing. There are two issues that surfaced in my research. First, there is no facility for using Windows Groups instead of userid. That would mean I have to maintain the list of people inside the report and boy would that be a pain. And second, my understanding is that the export facility does not respect the column actions -- like hiding.
Am I making this too complicated? Is there an easier way to do this? With no other solution, so I need to put up another instance of SSRS for management and make them go back and forth?
Thanks for your time
Option1: You should not be able to 'browse' for folders unless the 'parent' level permission has an 'everyone' user set up to browse on the higher level. Set up a test account and RDP to a box you can use the test account on. Generally under 'Folder Settings' you set up permission and it cascades down until interupted. If you have a parent permission to browse and a lower one not to, they may be able to browse directories. You can ensure that the directory has ONLY dedicated users and the inherited settings are removed manually.
Option2: I would NOT do this. You will have a maintenance nightmare on your hands as you would have to determine in code who was what and update a list that would probably need to be updated somewhere in SQL or a service. As far as I know SSRS does not work with getting parameters and such directly from AD so you would have to code this time and again. For this reason and security context I would avoid this.
Option3: Set up a 'Subscription' to save the report to a file format(excel, pdf, word, etc) or email on a scedule and turn off permission for everyone but admins. If someone can still see the report or directory there is most likely a security context issue.
Option4: You can do a cheapy 'Hide in tile view' move that for most users will hide the directory unless they go to the URL directly and have access. Click on a folder then choose 'Folder Settings' then check 'hide in tile view' and hit okay. Directory is now gone for most part for regular users browsing in default mode.
I think we can just fix your problem, and avoid inventing a complicated and unnecessary solution:
Option 1: I was thinking I can just create a folder in SSRS and add the report there and hide the folder. I created it and applied the security but it seems that everyone can see the folder. Maybe they can't edit anything in it or even maybe they can't read anything in it, but this solution, if unchanged, will not meet the goal of having them not even see it exists.
Chances are that either you set up the security settings wrong, or there's a bigger configuration nightmare to worry about. What you should do is create the folder, go into the settings of the folder, and edit the security (thus breaking inheritance from the parent folder). Before even adding groups, you need to remove anyone that doesn't belong - namely entries like "YOU\Domain Users" - that gives access to anyone on your domain. Once you've cleaned out whomever shouldn't have access, you can add the users/groups that should. Problem solved.
Now, if that doesn't work, then it would seem to me that your SSRS instance is somehow granting everyone sysadmin access - check the Site Settings to see what users and groups are in the System Administrator role. Investigate any groups thoroughly - is BUILTIN\Administrators a sysadmin in SSRS? Check the group locally on the computer - is there another blanket domain group shown there?
If everyone on your domain has complete access to the SSRS instance, then your goal of "hiding" things is impossible.
I've been playing around with the new "Websites" feature of Azure (which I believe is still in beta), but I've run into a problem. I've got two subscriptions associated with my account - one for personal use, the other for my company. And of course, I'd like to be able to specify which subscription is used when I create a new website. But when I try to create a website, it always picks my second subscription, and never gives me a chance to specify which one I'd like to use. Nor can I figure out how to move the website to a different subscription after I've created it.
I've walked through this several times now, and I can't spot any place where I can specify which subscription to use. Is this just a beta glitch? Or have I missed something?
I ran into the same thing, called MS support. Switch back to the standard portal to make this change.
To get to the old portal hover over the green "preview" button at the top. This doesn't seem to work in Chrome for me, just IE.
Do take a look at my response on MSDN Forums for a similar question there: http://social.msdn.microsoft.com/Forums/en-US/windowsazurepurchasing/thread/d9624b03-1d6c-484a-9fa8-8548c35a9d4f/. Basically you would need to activate this feature for each subscription separately since it is in preview mode.