On-Premise Gateway Instance not showing in Azure On-Premise Gateway - azure

After i Creat On-Premise gateway localy in my computer using the same account with azure, But still i got error message that says No Installed Instance were found for ther curent users. I Already make the region same to SEA but still no instance were found . I already tried to uninstall the On-Premise gateway but the result still the same. For the reference i'm using this tutorial https://blogs.biztalk360.com/access-on-premise-sql-server-data-from-azure-logic-apps-via-on-premises-data-gateway/ .How to fix this, and what cause that happen ? and fyi im using Invitation from Default Directory to acces Azure is that what caused this ?

The user must be created inside the same Azure directory where the gateway is created.
I was trying to use an AD account invited from another directory and it doesn't work. How can you tell if a user has been invited? The "User principal name" will contain #EXT# just before the '#' sign.
In my case the solution was to create a new AD user specifically for the gateway.

Related

How do I sign in to my Azure account from the VSCode Azure Functions extension?

I have been trying to create an Azure Function using the documentation. For example, here:
https://learn.microsoft.com/en-us/learn/modules/develop-azure-functions/5-create-function-visual-studio-code
Every time, and with every Azure account, I can't get past the step where you sign in to your Azure account from the Azure Functions VSCode extension. This is the error I am getting:
"Selected user account does not exist in tenant 'Microsoft Learn Sandbox' and cannot access the application 'aebc6443-996d-45c2-90f0-388ff96faa56' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account."
The Microsoft Learn Sandbox error message is a red herring to me, as I am not trying to do anything with it, only with Azure Functions. The same error appears even with a completely different Azure account.
I have tried looking at several possible solutions, including switching directories (but I only have one directory, so this didn't work), changing settings in Azure AD Connect (but I don't have Azure AD Connect configured, so this didn't work), and I deleted several local .config files and directories on my machine (CentOS 7, btw). If the solution is related to my .config files, I couldn't tell which files I should actually be deleting though.
In my situation, the problem is it was trying to use my "learning" account but I wanted to use my "work" account.
Following the answer here: https://learn.microsoft.com/en-us/answers/questions/696758/how-do-i-sign-in-to-azure-from-vs-code?page=1&orderby=Helpful&comment=answer-697695#newest-answer-comment
Go to the Azure portal and sign out (https://portal.azure.com/) Now
open Visual Studio and Open the Command Palette (Ctrl + Shift + P)
search for Azure: Sign Out and click on it. It will signout you from the Visual Studio extension
Then (this is the important part) it allowed me the option to Clear my Tenant ID.
Then you can sign in again with the new account
Hope this helps someone else!

Set-AzureADuser failing

Trying to streamline our MFA process by manually uploading the -Mobile attribute to Azure in powershell, so that when the user goes to do MFA, it's already filled in.
Set-AzureADUser -ObjectId $emailaddress -Mobile $cellphone
This actually worked before, but now all of a sudden I'm getting
Set-AzureADUser : Error occurred while executing SetUser
Code: Request_BadRequest
Message: Unable to update the specified properties for on-premises mastered Directory
Sync objects or objects currently undergoing migration.
We're in a hybrid environment with a one-way sync, and the "mobile" attribute is not a synced attribute for us. We set it for a few test users in AD, but it never made it to Azure. So we were doing it this way until this showed up all of a sudden. We haven't made any changes to our sync settings.
Microsoft documentation on doing exactly what I'm doing doesn't show me doing anything wrong.
https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-authenticationdata
Figured it out.
Not sure why, since Set-AzureADuser worked before, but Set-MsolUser worked, and was able to update the mobile phone number. When I ran Get-AzureADuser, the number changed by Set-MsolUser was present.
Based on the description and error message, you were using Powershell to update members which were synced from on-premises. This is expected, it is not able to update these objects which synced from on-premises to Azure AD.
To update these type of users, we need to operate it in the on-premises environment and then sync it to Azure. Try changing it on On-prem server and then sync it to Azure AD.
Reference issues:
Getting "Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration" error message when updating a room mailbox contact informations on Exchange
Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration

Azure Storage File Share with Folder Label Permission based on Azure AD and Azure AD Domain Service

I am desperately looking for a solution. Posting this question after wasting almost 4 days. We have a file storage application and we are using Azure File Share to manage the files. The file shared can be connect as a Drive in PC or VM using SMB 3.0 protocol. We are good in this stage. The problem is starting just after it.
Support we have a file shared named Our Projects. Inside of this file share lets have 3 project folders.
Project 1
Project 2
Project 3
We are using AD for user authentication. So, when a user attach a file share into own PC, expecting a solutions like that
User One have the access on Project 1 folder only
User Two have the access on Project 2 and Project 3 folders
After lot's of googling getting suggestions to do it using Azure AD Domain Service and VM. I have watched some tutorials on Azure File Share on Pluralist as well. But, I am not getting confident to active our expected solutions.
Looking for expert suggestions or what could be the best approach to achieve it?
Or is it really possible in azure, what I am expecting?
I really really looking for a good solutions from azure experts desperately.
I am new user in Azure Active Directory and Active Directory Domain Service. Please receive lot's of thanks in advance.
Please read here, https://learn.microsoft.com/en-ca/azure/storage/files/storage-files-active-directory-overview#ad-ds
You can either give users access through either Azure ad ds, or on-prem ad ds by making sure you have a hybrid environment with Azure ad connect so that your users are properly synced across.
After that, you create the Azure file share, then you can mount it and set directory level permissions in that share like you normally would with an on prem server.
https://learn.microsoft.com/en-ca/azure/storage/files/storage-files-active-directory-overview#configure-directory-or-file-level-permissions-for-azure-files

Azure Devops release pipeline unauthorized for some projects

I am trying to release multiple projects in 1 solution using Azure Release pipeline
They are all connected to the same Azure Subscription, but some do deploy to the given app service while others give an unauthorized error.
Ive looked into it and i read that adding website_webdeploy_use_scm to the app service should help the Unauthorized error, but this didnt help for me.
What else could i look at? I connect through Azure Devops so i just selected the subscription from the list it automatically gathers from Azure because im logged in using the same logins as i use for Azure Portal
the full error is:
Connected to the remote computer ("xxxx.azurewebsites.windows.net") using the Web Management Service, but could not authorize. Make sure that you are using the correct user name and password, that the site you are connecting to exists, and that the credentials represent a user who has permissions to access the site. Learn more at: http://go.microsoft.com/fwlink/?LinkId=221672#ERROR_USER_UNAUTHORIZED.
Error: The remote server returned an error: (401) Unauthorized.
according to the error I'd suggest you check service principal permissions. it probably lacks the permissions required to manage those webapps.
So after refresh publishing profile in Azure Portal and trying it again it fixed itself so im not sure if that caused it or not but it worked!
another fix is to delete the slot and make it again

On-premises data gateway location for PowerBI

How can I check where I have installed On-premises data gateway for one PowerBI report?
I looking for solution to find in which server I have installed gateway used by my report. I need it because it gives me error: DM_GWPipeline_Client_GatewayUnreachable.
Looks like the gateway went offline so the service cannot know more info about the Gateway.
Do you have your Recovery Key? It's the key you have provided on install time. If you do, you can install the gateway on a new machine, when you sign in you will be asked whether you want to create a new gateway or restore an existing one, choose "Restore" and that will migrate the existing gateway to the new machine and move all settings and reports that had been associated to the old gateway.
Usually, the default path is:
C:\Program Files\On-premises data gateway
You can also check in services
Open Services from Windows
Check for service "On-premises data gateway service"
Click on Logon Tab
This will show you the account you used for this service

Resources