πΉ Feature: Generate a Lean, Custom Microsoft Graph SDK With Kiota πΉ What wIt Does: Generates a minimal Microsoft Graph client library containing only the paths your app actually uses β dramatically smaller install footprint than the full Microsoft-published SDK. What Is It Giving You: β Massive Size Reduction vs the Full SDK: The official Microsoft Graph SDK covers the entire Graph surface, but most apps only use a small slice (mail, calendar, Teams, To Do, Planner, SharePoint files). Kiota builds a client that includes just the slices you need. Perfect for mobile apps, edge functions, containers, or any environment where install size matters. β Same Conventions, Same Fluent Syntax: Kiota-generated clients follow the same patterns as the Microsoft-published SDK. Calls like graphClient.Me.Todo.Lists.GetAsync() feel completely familiar. Your team wonβt need to learn a new API style. β Scope With –include-path / –exclude-path: Use URL prefixes at generation time to define your slice. Example: kiota generate –openapi https://aka.ms/graph/v1.0/openapi.yaml –include-path /me/todo/** –language CSharp creates a To Doβonly client. Same pattern works for /me/messages/**, /teams/**, /sites/**, or any subset. β Interops With Microsoft Graph Core Library: Add Microsoft.Graph.Core (or language equivalent) for cross-cutting features like PageIterator, batch requests, and large file uploads. You … Generate a Light, Custom Microsoft Graph SDK With KiotaRead more
Content App on Microsoft Fabric Apps β Sample Deployment Accelerator (New Hosting Model for Content Applications)
πΉ Feature: Content App on Microsoft Fabric Apps β Sample Deployment Accelerator (New Hosting Model for Content Applications) πΉ What It Does: Ready-to-run sample that hosts a content-driven web application entirely on Microsoft Fabric β content lives in a Lakehouse, the API is auto-generated GraphQL, and the frontend is static β with no PHP, no MySQL, no App Service, no backend server anywhere. Why This Matters β A Different Way to Host Applications: πΈ Fabric Apps is a NEW hosting model, not just an analytics surface. Applications become first-class Fabric items alongside Lakehouses, Warehouses, and Notebooks β with the same governance, identity, and access control. πΈ App data lives in OneLake from day one β the SAME data is instantly queryable by Power BI, Notebooks, Fabric data agents, and Warehouses. The classic “operational vs. analytical” data silo disappears. πΈ Consumes CU from your existing Fabric capacity β no separate cloud bill for the app tier. Same monthly line item that powers the rest of the Fabric estate. πΈ Enterprise governance inherited by default β Purview, sensitivity labels, DLP, and Entra ID RBAC apply automatically. No bolted-on compliance layer. What This Sample Is Giving You: β End-to-End Pipeline: CSV data β … Content App on Microsoft Fabric Apps β Sample Deployment Accelerator (New Hosting Model for Content Applications)Read more
Legal Agent for Microsoft Word
πΉ Feature: Legal Agent for Microsoft Word πΉ What It Does: A first-party Microsoft agent in Word built to support time-consuming legal work β contract reviews, redlining, and clause analysis β directly in the document. What Is It Giving You: β Analyzes Contracts: Understand agreements, compare versions across drafts, and cite risks directly back to the source language in the document. No copy-paste into a separate review tool. β Drafts Clean Redlines: Generates precise, negotiation-ready edits with Track Changes β the format legal teams actually send back and forth. Not just “here’s a suggested rewrite” β real Word revisions the counterparty can accept or reject. β Maintains History: Separates prior revisions from new proposals so the negotiation history is preserved intact. What the previous round said stays visible; what the agent proposes now is clearly delineated. β Understands Nuances: Flags non-compliant clauses and recommends approved language from your internal playbooks. Playbook-driven review β not generic legal boilerplate. β Secure by Design: First-party Microsoft agent that operates entirely within the Microsoft 365 trust boundary. Contracts don’t leave your tenant; existing Purview policies, sensitivity labels, and RBAC are respected. π https://techcommunity.microsoft.com/blog/microsoft365copilotblog/word-legal-agent-in-frontier/4516218
Questions and Answers Tool for Microsoft Teams Phone Agent
πΉ Feature: Questions and Answers Tool for Microsoft Teams Phone Agent πΉ What It Does: Grounds the Teams Phone Agent (AI voice agent that answers phone calls on your auto-attendants and call queues) on your own documents and public web pages β so callers get natural-language answers from real organizational knowledge instead of “press 1 for sales.” What Is It Giving You: β Real AI Voice Answering Real Questions: Callers ask questions in natural language on your published phone number; the Teams Phone Agent answers with knowledge sourced from your own documents. Opening hours, product FAQs, policy questions, shipping status, HR benefits β no IVR tree, no waiting for a human, no βyour call is important to us.β β Two Knowledge Source Types: Knowledge – Document (upload files directly) OR Knowledge – URL (point at a public web page). Mix multiple tools per agent to cover different topics. β Broad Document Support: JSON, XML, PDF, TXT, CSV, DOC / DOCX, XLS / XLSX, PPTX, plus ZIP archives containing any of the supported types. Push the docs your team already writes for humans β no rebuilding content in a special “chatbot” format. β Reasonable Content Limits: Up to 10 files per … Questions and Answers Tool for Microsoft Teams Phone AgentRead more
Appointment Tools for Microsoft Teams Phone Agent
πΉ Feature: Appointment Tools for Microsoft Teams Phone Agent πΉ What It Does: Lets the Teams Phone Agent (AI voice agent) book, update, and cancel appointments during a phone call β via Microsoft Bookings or any custom booking system with an API. What Is It Giving You: β Caller Can Actually Book β Not Just Ask: The phone agent confirms available time slots, takes bookings, updates them, or cancels β all via the voice conversation. No callbacks or web redirects. β Microsoft Bookings Integration Out of the Box: Point the agent at a shared Bookings page. One PowerShell call (New-CsMainlineAttendantAppointmentBookingFlow) wires the booking link into the phone agent call flow. β Custom Booking System Support: Connect to any scheduling backend with an API (ServiceNow, healthcare EHR, hotel PMS). Configure in Teams admin center or via PowerShell. β Caller Authentication Built In: Verify callers before touching appointments via SMS code, Email code, or User Details read-back. β Four API Authentication Types: Basic, API Key, Bearer Token (Static), or Bearer Token (Dynamic) β covering everything from simple internal APIs to modern OAuth-protected endpoints. β Full Appointment Lifecycle Call Flows: Generate auth token β Authenticate caller β Get available time slots β Book … Appointment Tools for Microsoft Teams Phone AgentRead more
Application Gateway for Containers (AGC) β Sample Deployment Accelerator
πΉ Feature: Application Gateway for Containers (AGC) β Sample Deployment Accelerator (NGINX Ingress Controller Replacement) πΉ What It Does: End-to-end, copy-paste-ready sample that deploys Application Gateway for Containers on AKS as the RECOMMENDED replacement for the NGINX ingress controller β with a full working app, WAF, external backend routing, and every real-world gotcha documented. Why AGC Is the Right Replacement for NGINX Ingress on AKS: πΈ Fully managed by Azure β no ingress-controller pod to size, monitor, patch, or fail-over yourself. πΈ Native Kubernetes Gateway API β the upstream successor to Ingress. Portable, role-oriented, and where the K8s community is going. πΈ Multiple frontends / FQDNs are FREE in the managed model β one Gateway = one frontend, provisioned automatically. No more running one ingress controller per hostname. πΈ Built-in Azure WAF via WAF policies β no separate ModSecurity/OWASP-CRS deployment to maintain (rules don’t port 1:1 from NGINX, but you also don’t run WAF pods). πΈ Managed identity for backend mTLS β declarative `BackendTLSPolicy` instead of annotations and secrets. πΈ Weight-based canary / blue-green via `HTTPRoute` β native, not custom annotations. πΈ Higher throughput than a single NGINX ingress controller pod, no self-managed HPA on the ingress plane. What This … Application Gateway for Containers (AGC) β Sample Deployment AcceleratorRead more
AKS β Cheap by Default
πΉ Feature: AKS Spot-First with Node Auto Provisioning (NAP) β Cheap by Default, On-Demand Fallback πΉ What It Does: Ready-to-deploy AKS pattern that schedules workloads on Spot VMs first (up to ~90% cheaper) and automatically falls back to on-demand nodes whenever Spot capacity can’t be provisioned or gets reclaimed. What Is It Giving You: β Cheap AKS by Default: Every pod tries a Spot node first at Spot pricing. For dev/test, batch jobs, background processors, and anything interruption-tolerant, this cuts the AKS compute bill dramatically. β Automatic On-Demand Fallback: When Azure can’t provision a Spot node (no capacity in the region, quota hit, spot price above your ceiling, or reclaim event) β Karpenter automatically provisions an on-demand node in the SAME cluster from the fallback NodePool. Workload keeps running, no manual intervention. β Two Karpenter NodePools, Weight-Based Priority: `spot` pool (weight 99, tries first) and `ondemand` pool (weight 10, fallback). Weight tells NAP which pool to try first β you don’t chase resource requests through custom scripts. β You Define Which VM Types Get Booted: Both NodePools let you specify exactly which VM SKUs (or families) NAP is allowed to provision β pin to a single size, widen to a … AKS β Cheap by DefaultRead more
WorkIQ Real-Life Examples β Practical Setup + Query Guide
πΉ Feature: WorkIQ Real-Life Examples β Practical Setup + Query Guide πΉ What It Does: Step-by-step guide to installing Microsoft Work IQ two ways (native npm CLI + GitHub Copilot plugin) and running it β with the exact pay-as-you-go billing path that avoids buying a Microsoft 365 Copilot flat-price license. What Is It Giving You: β Two Install Paths, Documented End-to-End: Native npm i -g @microsoft/workiq@latest for standalone CLI + MCP server, OR /plugin marketplace add microsoft/work-iq inside GitHub Copilot CLI. Pick whichever fits your existing agent toolchain. β The Billing Setup Trick Nobody Tells You: You do NOT need a flat-price Microsoft 365 Copilot license. WorkIQ runs on the Copilot Credits usage-based model, backed by ANY Azure subscription β including Free Trial, Visual Studio Enterprise / Professional monthly credits, Microsoft for Startups / Sponsorship, or standard Pay-As-You-Go. Fasttrack setup with screenshots is in the repo. β Real-Life Query Examples I Actually Use: Not marketing copy β the exact workiq ask -q “…” commands and equivalent Copilot prompts covering: πΈ Email β summarize unread, find by topic, reply, forward with summary, flag as follow-up. πΈ Calendar β check tomorrow’s meetings, find a common 30-min slot, book rooms, reschedule, cancel with … WorkIQ Real-Life Examples β Practical Setup + Query GuideRead more
JWT Validation on Azure Application Gateway
πΉ Feature: JWT Validation on Azure Application Gateway πΉ What It Does: Application Gateway validates Microsoft Entra ID-issued JWTs at the edge β verifying signature, issuer, tenant, audience, and lifetime β and blocks unauthorized requests before they ever reach your backend. What Is It Giving You: β First-Hop Authentication Without Backend Code: JWT validation happens at the gateway. Your APIs stop shipping bearer-token validation code across a dozen microservices β the gateway rejects invalid or expired tokens with a 401 before backends see the request. β Full Token Verification: Signature, issuer (iss), tenant, audience (aud), and lifetime (exp / nbf) all validated per request. Missing critical claims (like oid) return a 403. No half-checks, no assumptions. β Identity Injected to Backends via x-msft-entra-identity: On successful validation, the gateway injects an x-msft-entra-identity header containing tenantId:oid into the request. Backends can trust it β the identity was verified upstream. No re-parsing the token on every service. β Flexible Deny / Allow Actions: Deny returns HTTP 401 for missing or invalid tokens. Allow still forwards the request but omits the identity header β useful for endpoints where authentication is optional but identity is helpful when present. β Multitenant Support: Configure Tenant ID as … JWT Validation on Azure Application GatewayRead more
AI-Assisted Oracle to PostgreSQL Migration Tool
πΉ Feature: AI-Assisted Oracle to PostgreSQL Migration Tool πΉ What It Does: Uses AI to convert Oracle database schemas (DDL), stored procedures, and application code into PostgreSQL-compatible equivalents β directly inside VS Code as a first-class migration project. What Is It Giving You: β Addresses the Migration Complexity Head-On: Oracle-to-Postgres migration has historically been the hardest part of moving off Oracle β PL/SQL, packages, sequences, hierarchical queries, Oracle-specific data types, autonomous transactions. This tool tackles it as the primary problem, not as a footnote. β Native VS Code Migration Project: Right-click in VS Code β “New Oracle to PostgreSQL migration project” β the tool creates a structured migration workspace tied to a folder, tracks progress, and shows converted vs. pending artifacts. Version-control the whole migration in Git alongside your app code. β AI-Guided, Human-Reviewed: The AI proposes conversions; you review, edit, and accept each artifact. No black-box mass conversion β every generated PostgreSQL artifact is auditable and diffed against the Oracle original. β Sits Inside the PostgreSQL Extension for VS Code: Same extension that also provisions Azure Database for PostgreSQL, edits schemas, debugs PL/pgSQL, and monitors performance β one tool for the whole migration lifecycle, from “we still run Oracle” … AI-Assisted Oracle to PostgreSQL Migration ToolRead more
Elastic Clusters for Azure Database for PostgreSQL (Powered by Citus)
πΉ Feature: Elastic Clusters for Azure Database for PostgreSQL (Powered by Citus) πΉ What It Does: Presents a single logical PostgreSQL server to your applications, while distributing the data across a shared-nothing cluster of nodes under the hood β powered by the Citus extension. What Is It Giving You: β Single Logical Postgres Server for Apps: Your application connects to one endpoint and issues standard SQL β no client-side sharding, no custom routing library, no proxy layer. The workload router/load balancer inside the cluster fans queries out to the right nodes transparently. β Citus Extension in Azure Database for PostgreSQL: The proven Citus distributed-PostgreSQL engine, offered as a first-class managed capability inside Azure Database for PostgreSQL. Same PostgreSQL semantics, transactions, indexes, JSON, and extensions β running in a distributed cluster. β Shared-Nothing Scale-Out Architecture: Add nodes to add compute, memory, storage, and IOPS. Each node owns its own data β no shared disk, no single hot-spot. Scale far beyond the ceiling of a single Postgres instance (for example: 4 Γ 128 vCores / 4 Γ 64 TB / 4 Γ 80K IOPS from just four nodes). β Two Sharding Strategies β Rows or Schema: Distribute a single table by shard … Elastic Clusters for Azure Database for PostgreSQL (Powered by Citus)Read more
PostgreSQL Extension for Visual Studio Code (by Microsoft)
πΉ Feature: PostgreSQL Extension for Visual Studio Code (by Microsoft) πΉ What It Does: Official Microsoft extension that lets you provision, develop, debug, manage, monitor, and migrate PostgreSQL databases β Azure-hosted or on-prem β without leaving VS Code. What Is It Giving You: β Provision: Create Azure Database for PostgreSQL Flexible Server directly from VS Code. Guided provisioning wizard β no separate portal, no CLI copy-paste from the docs. β Develop: Full-featured SQL editor with syntax highlighting, IntelliSense (tables, columns, functions), inline execution, result-set grid, and multi-statement scripts. Connect to Azure Database for PostgreSQL Flexible Server, Cosmos DB for PostgreSQL, or any PostgreSQL instance (on-prem, other clouds, Docker). β Debug: Set breakpoints inside PL/pgSQL functions and stored procedures β step through server-side logic just like you’d debug application code. The debugging story PostgreSQL developers have wanted for a decade. β Manage: Visual database dashboard with server metrics, connection info, and configuration. Manage databases, schemas, tables, indexes, extensions, users, and roles β all from the sidebar. β Monitor: Query performance insights, slow-query analysis, EXPLAIN visualization, and server metrics inside the editor. Stop bouncing between the Azure portal and psql to diagnose a bad query. β Migrate: Guided migration flows for moving … PostgreSQL Extension for Visual Studio Code (by Microsoft)Read more
Microsoft Purview β Integrated Solutions to Secure & Govern Your Entire Data Estate
πΉ Feature: Microsoft Purview β Integrated Solutions to Secure & Govern Your Entire Data Estate πΉ What It Does: A single unified platform covering Data Security, Data Governance, and Data Compliance β across unstructured and structured data, traditional and AI-generated data, and Microsoft plus multi-cloud environments. What Is It Giving You: π· Data Security β Secure Data Across Its Lifecycle, Wherever It Lives β Data Loss Prevention (DLP): Prevent sensitive data from leaving your organization β across endpoints, email, Teams, SaaS apps, and cloud storage. β Insider Risk Management: Detect risky user behavior and data exfiltration patterns with ML-based signals; investigate without exposing user privacy. β Information Protection: Sensitivity labels, encryption, and rights management travel with the file β whether stored in OneDrive, forwarded via email, or opened on an unmanaged device. π· Data Governance β Confidently Activate Your Data & Accelerate Time to Insights β Unified Catalog: One catalog across every data source β Fabric, SQL, PostgreSQL, Snowflake, AWS S3, BigQuery, on-prem. Find, understand, and trust data before you use it. β Data Quality: Automated scoring, rules, and monitoring so bad data stops being someone elseβs problem. β Data Lineage: End-to-end lineage from source system through pipelines to analytics … Microsoft Purview β Integrated Solutions to Secure & Govern Your Entire Data EstateRead more
Critique in Researcher (Microsoft 365 Copilot)
πΉ Feature: Critique in Researcher (Microsoft 365 Copilot) πΉ What It Does: GPT and Claude work together inside the Researcher agent β GPT drafts, Claude reviews for accuracy, completeness, and citation integrity before it reaches you. What Is It Giving You: β Two Frontier Models, One Answer: GPT models draft; Claude (Frontier) reviews. Each response cross-checked for factual accuracy, completeness, and supporting citations β the βauto: GPT responses, refined by Claudeβ you see in the UI. β Measurably Better Deep Research: Outperforms competitors on the DRACO benchmark for deep research quality. Not opinion β benchmarked. β Native to Microsoft 365 Copilot: Fully built into the Researcher agent. Same chat surface as Search, Chat, Agents, Notebooks, Pages, Create, and Apps. β Grounded in YOUR Work via WorkIQ: Integrates your meetings, emails, docs, people, and projects β answers reflect your organizational context, not just the public web. β Compliance and Permissions Preserved: Adheres to Microsoft 365 privacy and security boundaries. Purview, sensitivity labels, RBAC, and DLP all inherited automatically. β Ready Task Templates: Daily briefing, topic research, comparative analysis, research brief, competitive analysis, and planning β one-click starting points, all benefiting from the GPT + Claude review loop. β Data Residency Awareness: … Critique in Researcher (Microsoft 365 Copilot)Read more
GitHub Copilot β 10 Practical Use Cases That Actually Move the Needle
πΉ Feature: GitHub Copilot β 10 Practical Use Cases That Actually Move the Needle πΉ What It Does:e The ten highest-leverage workflows where GitHub Copilot pays for itself β for developers, cloud engineers, and platform teams. What Is It Giving You: β 1. Code Completion: Real-time, context-aware suggestions as you type β full lines, function bodies, and boilerplate. Less typing, fewer syntax lookups, faster working code. β 2. Code Refactoring & Optimization: Highlight a function, ask Copilot to simplify it, extract methods, apply patterns, or optimize for performance. Hours become minutes. β 3. Documentation & Comment Generation: Generate accurate XML docs, docstrings, JSDoc, README sections, and inline comments explaining why the code exists β docs match the code. β 4. Test Generation: Create unit, integration, and edge-case tests from function signatures and intent. Boost coverage without writing scaffolding by hand. Supports MSTest, xUnit, NUnit, Jest, pytest, and more. β 5. Bug Fixing & Debugging Assistance: Paste a stack trace or exception β Copilot proposes root causes and fixes. Ask βwhy is this returning null?β and get a diagnosis. β 6. Code Conversion: Translate between languages (Python β C#), migrate frameworks (jQuery β React, .NET Framework β .NET 10), or port … GitHub Copilot β 10 Practical Use Cases That Actually Move the NeedleRead more
Azure Monitor Health Models
πΉ Feature: Azure Monitor Health Models πΉ What It Does: Visually define and track the health of an entire workload β with each Azure resource’s signals rolled up through dependency relationships into a single, business-context-aware health state. What Is It Giving You: β State-Based Monitoring, Not Just Alert-Based: Assigns a health state to every managed entity β Healthy, Degraded, Unhealthy β instead of firing raw metric alerts. Answer βis the workload healthy?β not βwhich of the 200 alerts fired at 3am?β β Alert Noise Reduction Through Correlation: Multiple signals per entity collapse into ONE health state. Multiple entities collapse into ONE workload health state. The 50-alert storm becomes one actionable signal. β Dependency-Aware Rollup: Model relationships between components. When a database goes unhealthy, dependent services roll up as impacted. Root cause becomes visible in the graph β no more chasing symptoms across five different resource types. β Graph View + Timeline View: Graph shows current health with dependencies at a glance. Timeline shows health over time β compare against SLOs, verify improvement after a fix, prove availability to the business. β Reuses Everything You Already Collect: Platform metrics and resource logs, Prometheus metrics from Kubernetes clusters, VM logs and performance … Azure Monitor Health ModelsRead more