Reassess delegated role-assignment denylists when roles change
Blocking known privileged role IDs does not automatically block a future role with equivalent role-assignment permissions.
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 56 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
Choose how expired Service Fabric health reports affect evaluation
A report can disappear at expiry or remain as an error; an infinite lifetime does neither automatically.
Read the guide
Investigate partial state after a failed Blob immutability migration
A failed move to version-level immutability can leave blob policies that the portal does not yet display.
Read the guide
Separate Elastic SAN capacity expansion from performance expansion
Additional capacity increases storage space, while base capacity determines the SAN's shared IOPS and throughput pool.
Read the guide
Check recall-memory pressure before assuming a File Sync read warmed the cache
File Sync can stop persisting recalled content to disk when its reserved recall memory reaches the documented threshold.
Read the guide
Check each action type before calling an Azure Monitor action group perimeter-isolated
Does a regional action group place every notification action inside a Network Security Perimeter?
Read the checklist
Bound every log-query branch before trusting a short displayed time range
Why can a Log Analytics query for recent data still scan an entire table's history?
Read the guide
Make the Bicep executable explicit in an MSBuild pipeline
The MSBuild task and platform-specific Bicep command-line package have different roles in locating the compiler.
Read the guide
Design for the finite retry window of managed-application notifications
Azure managed-application webhooks retry selected failures, then drop an unavailable delivery after ten hours.
Read the guide
Separate Bastion shareable-link access from target-machine credentials
A shareable link removes the need to enter the Azure portal, but it does not contain the RDP or SSH credentials.
Read the guide