Live Publish (10/02/2024 12:00:00 PM)

Author: bishalgoswami

power-platform/admin/analytics-common-data-service.md

@@ -1,13 +1,14 @@
 ---
 title: "View and download Dataverse analytics"
 description: "Access Dataverse analytics from the Power Platform admin center to view and download metrics such as active users, API calls, executions, and more."
-author: Zeffin 
+author: sericks007 
 ms.topic: conceptual
 ms.date: 03/26/2024
 ms.subservice: admin
-ms.author: johnev
+ms.author: sericks
 ms.reviewer: sericks
 ms.contriutors:
+ - yingchin
  - mbajwa
  - olegov
 ---
@@ -35,10 +36,6 @@ For more information on the different roles for managing your tenant across the
 
  **Key highlights**  
 
-- **Deprecating the solution**: Organization Insights, available as a preferred solution from AppSource, will no longer be supported or available for use in future releases.  
-
-- **Deprecating Organization Insights dashboard**: This dashboard will be removed from Dataverse in future releases. 
-
 - **Monitor adoption and use**: Identify your most active users, the number and types of operations they're performing, number of pages requests, most-used entities, workflows, plug-ins, and more, over a period of time as you work toward your adoption goals.  
 
 - **Manage storage and performance**: Monitor storage quotas, storage use, and top tables by size to optimize performance.  

power-platform/admin/move-environment-tenant.md

@@ -1,10 +1,11 @@
 ---
 title: Tenant-to-tenant migrations 
 description: Learn about the impact of migrating an environment from one tenant to another. Review the prerequisites and considerations before submitting a request.
-ms.date: 08/01/2024
+ms.date: 10/02/2024
 ms.topic: conceptual
 author: matapg007
 contributors:
+  - val-bc 
   - brsova
   - ImadYanni
   - bevans 
@@ -14,7 +15,9 @@ ms.author: matgupta
 ms.reviewer: sericks
 search.audienceType: 
   - admin
+
 ---
+
 # Tenant-to-tenant migrations 
 
 ## Migrate an environment to a different tenant
@@ -125,7 +128,7 @@ You must provide the following information:
 
 ### Steps to create the mapping file
 
-For full access users:
+#### For full access users:
 1. Access the source environment.
 2. Use Advanced Find (![Screen shot of Advanced Find button.](../admin/media/advanced-find-button2.png "Screen shot of Advanced Find button")) and look for users.
 3. Select **Use Saved View** > **Full Access Users**, and then select **Edit Columns**.
@@ -146,7 +149,10 @@ For full access users:
 
 13.	Save the file as a CSV.
 
-For administrative access users: 
+> [!Note]
+> Application users can't be migrated. Learn more about application users in [System and application users](system-application-users.md).
+
+#### For administrative access users: 
 1. Access the source environment.
 2. Use Advanced Find (![Screen shot of Advanced Find button.](../admin/media/advanced-find-button2.png "Screen shot of Advanced Find button")) and look for users.
 3. Select **Use Saved View** > **Administrative Access Users**, and then select **Results** to see the list of administrative access users.

power-platform/admin/security/data-storage.md

@@ -1,7 +1,7 @@
 ---
 title: Data storage and governance in Power Platform
 description: Learn how data is stored and governed in Power Platform.
-ms.date: 07/17/2024
+ms.date: 10/02/2024
 ms.service: power-platform
 ms.topic: conceptual
 ms.custom: 
@@ -76,20 +76,21 @@ Power Platform has an extensive set of [Data Loss Prevention (DLP) features](../
 > [!NOTE]
 > Prior to activating either of these SAS features, customers must first allow access to the `https://*.api.powerplatformusercontent.com` domain or most SAS functionalities won't work.
 
-This feature set is tenant-specific functionality that restricts Storage Shared Access Signature (SAS) tokens and is controlled through a menu in the [Power Platform admin center](https://admin.powerplatform.microsoft.com). This setting restricts who, based on IP, can use enterprise SAS tokens. 
-
-This feature is currently in private preview. Public preview is planned for later this spring, with general availability in summer 2024. For more information, see [Release Planner](https://releaseplans.microsoft.com/en-US/?app=Governance+and+administration). 
+This feature set is tenant-specific functionality that restricts Storage Shared Access Signature (SAS) tokens and is controlled through a menu in the [Power Platform admin center](https://admin.powerplatform.microsoft.com). This setting restricts who, based on IP (IPv4 and IPv6) can use enterprise SAS tokens. 
 
 These settings can be found in an environment’s **Privacy + Security** settings in the admin center. You must turn on the **Enable IP address based Storage Shared Access Signature (SAS) rule** option.
 
-Admins can enable one of these four configurations for this setting:
+Admins can allow one of these four options for this setting:
+
+| Option | Setting                 | Description                                                                                                                    |
+|--------|-------------------------|--------------------------------------------------------------------------------------------------------------------------------|
+| 1      | IP Binding Only         | This restricts SAS keys to the requester’s IP.                                                                             |
+| 2      | IP Firewall Only        | This restricts using SAS keys to only work within an admin specified range.                                                |
+| 3      | IP Binding and Firewall | This restricts using SAS keys to work within an admin-specified range and only to the requestor's IP.                      |
+| 4      | IP Binding or Firewall  | Allows SAS keys to be used within the specified range. If the request comes from outside the range, IP Binding is applied. |
 
-| Setting                 | Description                                                                                                                    |
-|-------------------------|--------------------------------------------------------------------------------------------------------------------------------|
-| IP Binding Only         | This restricts SAS keys to the requester’s IP.                                                                             |
-| IP Firewall Only        | This restricts using SAS keys to only work within an admin specified range.                                                |
-| IP Binding and Firewall | This restricts using SAS keys to work within an admin-specified range and only to the requestor's IP.                      |
-| IP Binding or Firewall  | Allows SAS keys to be used within the specified range. If the request comes from outside the range, IP Binding is applied. |
+> [!NOTE]
+> Admins who chose to allow IP Firewall (Option 2, 3, and 4 listed in the table above) must enter **both** the IPv4 and IPv6 ranges of their networks to ensure proper coverage of their users.
 
 #### Products enforcing IP Binding when enabled:
 - Dataverse
@@ -107,6 +108,9 @@ Admins can enable one of these four configurations for this setting:
   - More significantly, due to the IP validation that this security setting uses, some functionality may perform slower than if it was turned off.
 
 
+#### Update settings programatically
+Admins can use automation to set and update both the IP binding vs firewall setting, the IP range that is allow-listed, and the **Logging** toggle. Learn more in [Tutorial: Create, update, and list Environment Management Settings](../programmability-tutorial-environmentmanagement-settings.md).
+
 ### Logging of SAS calls
 This setting enables all SAS calls within Power Platform to be logged into Purview. This logging shows the relevant metadata for all creation and usage events and can be enabled independently of the above SAS IP restrictions. Power Platform services are currently onboarding SAS calls in 2024.