Janne Kujanpää jikuja

Trigger directives

CI trigger with templates

trigger: none is ignored on template files. Must be used on pipeline level.

Untested if true for other CI triggers and filtering.

Build completion trigger

List all Azure resource access/role assingments

Get-AzRoleAssignment | Sort-Object { $_.Scope} | Format-Table -Property @{ e='DisplayName'; width=30}, @{ e='SignInName'; width=70}, @{ e='RoleDefinitionName'; width=30}, @{ e='Description'; width=30}, ObjectType -GroupBy Scope | Out-String -Stream -Width 200

Using Sort-Object { $_.Scope} ensures correct order for / and for /subscriptions/abcdefgh-0123-0123-0123-abcdefghijkl scopes
Format-Table is used to select required properties and format the output
Out-String -Stream -Width 200 is used to ensure that output is wide enough

Variation: List direct user assignemnts

Azure VPN limitations / features

Feature	Basic + Policy	Basic + Route	VpnGw1 + Route
Bandwidth	100 Mbps	100 Mbsp	650 Mbps
Tunnels	Only one tunnel	max. 10 tunnels	max. 30 tunnels
IKE for S2S	Only IKEv1	Only IKEv2(*)	IKEv1 and IKEv2
P2S	No	Only SSTP	IKEv2 IPSEC, OpenVPN or SSTP
P2S auth	-	Certificate	Certificate, RADIUS, AAD
IPSEC conf	N/A	N/A	Possible to change ciphers

Microsoft Azure Active Directory Module for Windows PowerShell

Basics:

https://learn.microsoft.com/en-us/powershell/azure/active-directory/overview?view=azureadps-1.0
MSOnline is planned for deprecation. For more details on the deprecation plans, see the deprecation update.
Module name: MSOnline
*-MSOL* cmdlets

Resource functions

reference

reference(resourceName or resourceIdentifier, [apiVersion], ['Full'])
Returns an object representing a resource's runtime state.

resourceId

resourceId([subscriptionId], [resourceGroupName], resourceType, resourceName1, [resourceName2], ...)

AD DS

Password hashes generated after AD DS creation
Synchronized credential information in Azure AD can't be re-used if you later create a managed domain - you must reconfigure the password hash synchronization to store the password hashes again. Previously domain-joined VMs or users won't be able to immediately authenticate - Azure AD needs to generate and store the password hashes in the new managed domain.
Azure AD Connect vs Azure AD Connect Cloud Sync
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization#password-hash-sync-process-for-azure-ad-domain-services
The steps to generate and store these password hashes are different for cloud-only user accounts created in Azure AD versus user accounts that are synchronized from your on-premises directory using Azure AD Connect.
Scoped synchronozation
- By groups
Cipher selection

$mma = New-Object -ComObject 'AgentConfigManager.MgmtSvcCfg'
$mma.GetCloudWorkspaces()

$workspaceId = "<Your workspace Id>"
$workspaceKey = "<Your workspace Key>"
$mma = New-Object -ComObject 'AgentConfigManager.MgmtSvcCfg'
$mma.AddCloudWorkspace($workspaceId, $workspaceKey)

fontforge -lang=ff -c 'Open($1);SelectAll();UnlinkReference();Export($2);' "$FONT" "${OUTPUT}/%n_%e.svg"

	# Sqlcmd

	Sqlcmd is a simple tool for SQL Server automation

	## The mess

	### Missing features on Windows

	Access token based Azure AD authentication is not supported: