Summary This presentation covered a lot of ground, because it was sort of like listening to the voice of WordPress itself. However, the main topic was the release of WordPress 3.7, which sets up auto-updates for WordPress (!), and which Nacin led.
Have written elsewhere about why you want to take the time to update to 3.7 and why you should ever update WordPress in the first place. Worth a look if you're on the fence about moving to 3.7.
Agreed, but was also privately like "…but they are, though" at the sentiment that "core updates shouldn't be a painful task." The problem isn't constant nag messages asking you to update WordPress (which 3.7 fixes), it's that every update feels like it risks breaking your site in impossible-to-predict ways. It rarely does, but the psychological weight of possibly being hit with a three-hour "What did you do, random plugin author?!" session as a result of hitting the button is discouraging.
Recoiled at the intellectual majesty of Andrew Nacin. This is Fred speaking; David wasn't quite as head-over-heels as I was. But Nacin's just got an encyclopedic understanding of WordPress and everything surrounding it that was fascinating to watch. For the record, David's presentation on theme creep (more on that when the video comes out) gave me the same feeling.
Appreciated the honesty of Nacin saying "We're not trying to build—at the moment, at least—a generic framework for anything you might want to run on the web." It sort of sounds like that is what Matt Mullenweg wants to build, maybe, so that should be interesting as it develops. Nacin's perspective is that "WordPress is an amazing platform for working with content," but if your app isn't content-focused, WordPress is not the best.
Summary Jared, sanely, thinks that WordPress templates are a bit hard to read and unsightly. As a result, he's pulled over the Symfony templating engine, Twig, and combined with a WordPress plugin called Timber. Combined, you have the ability to make WordPress template files that are free of <?php ?> tags and unnecessary logic, which makes it easier for designers and other business stakeholders to take part in the making of them. An awesome combination of features.
Got nerd chills at Timber demo. Jared really has built a system that thinks through all the strange things you'll want to be doing in WordPress templates built with Twig.
Worried a little about the extent to which going this route makes your code opaque to an average WordPress developer. If someone's used to PHP templating this may all seem like so much magic.
Summary Chris made a strong case for why the speed to load of your WordPress site matters and did a great job explaining how to do it.
Wished the world knew about "CSS at the top, JS at the bottom" as best practice. In WordPress, that means the fifth parameter of wp_enqueue_script() is set to true. Simple but important.
Nodded in agreement with the idea that fewer style and script files is ALWAYS faster. And minification of those files makes them faster still.
Curiosity piqued by the Minqueue plugin. Seems like a great way to concatenate and minify your styles and scripts I'd never seen before.
Summary George started by calling out everyone who capitalizes the P in Jetpack. And then he called out a number of great functionalities of Jetpack that I'd not know about. He especially called out the value of their contact forms, Photon image CDN, and Omnisearch —which hopefully will come to WordPress core soon.
Felt a slight thawing in the ice in my heart around Jetpack—which does a few things I like and manny more I don't. It's a strange model; in retail, it'd be like package-selling a flatscreen TV with a car jack, a croquet set, and arm floaties.
Intrigued by the stats_get_csv() function, which lets you get statistics data to use programmatically. It'll take care of authentication so you just have to worry about what you're doing with the data.
Glad to learn about JETPACK_DEV_DEBUG, a useful constant to have set for a number of reasons, especially for local development of a Jetpack site.
Summary Corey's presentation was the craziest thing I saw at the entire WordCamp. The things that the jQuery team and the WordPress guys were able to put together serve the jQuery use case so perfectly, and are really far outside the box of traditional WordPress implementations. It's some deep nerdy developer stuff, so I'll not summarize it too closely, but check out that deck if you want to be amazed.
Will have to check out Grunt-WordPress, which allows a simple command-line front end for the jQuery team to build and deploy their site.
Felt sympathetic joy at the jQuery team's appreciation of the utility and value of parent and child theme relationships. It's a great feature of WordPress, and one that deserves love.
Summary Eric started with a good summary of the value of testing your code: it keeps its defects to a minimum and saves you from spending your time manually checking all on your existing functionality. He then explained some of the best practices, and how to use them to write better and more testable code.
Excited to dig into WP Mock. It really seems like the 10up team has made testing WordPress code easier than I expected to find it.
Surprised that Eric and team haven't actually automated their testing. It makes sense—if you trust your whole team to run their tests and not break them, you don't need to—but I would have guessed they did.
Summary Brennan covered three of the most common types of vulnerabilities on the internet: XSS, Clickjacking, and SQLi. XSS — cross site scripting — occurs when a developer doesn't clean user inputs before they show it back to them. Clickjacking is when an attacker user something like a hidden iframe to make you click something you don't mean to. SQLi, which stands for SQL (database) injection, and happens when a developer lets user input go into the database before making assurances it won't do harm.
Entertained by Andrew Nacin breaking into the presentation to point out that WordPress now runs more than 20% of the internet. Also, Brennan's auto-tweets.
Felt a shiver of transgressive glee at Brennan's vandalism of Cardinal's websites to show off how to attack the vulnerabilities.
Reassured to see that for the SQL injection attack he had to be running WordPress 2.2 to find a vulnerability in core.
Summary JJJ has been the driving force behind bbPress ever since it got rolled into a WordPress plugin in 2010. He hates slides, but did talk over some pretty cool features of bbPress, like its use of the singleton pattern in contrast to WordPress's "everything's global" approach.
Surprised to learn that for a while between 2004 and 2010, it seemed like bbPress may have ended up more popular than WordPress.
Struck by the possibility of something like bbp_register_template_stack() coming into WordPress core, so that it can move past the "no grandchildren templates" problem.
Intimidated upon hearing Matt point out just how much of the documentation around the customizer is under-explored and incomplete. I have little doubt that his assessment is correct, but it did scare me a bit.
Curious to try out the Advanced Upload Customizer component Matt has put on Github.
Summary: Mo is a "VIP Wrangler" at Automattic which means he's working really hard to keep high-traffic high-prestige websites online and speedy. He went over the basics of how caching works in WordPress, what its limitations are, and when and how you use the APIs.
Nodded knowingly as Mo repeatedly mentioned that caching can't solve slow queries and other long-running processes that block page loading. Simply, there's no way around the need to build the page sometime, and if that takes a while it's always going to take a while.
Intrigued that many Automatticians, including Mo, recommend Batcache. It doesn't get a lot of love out among us civilians, but these Automatticians are probably loving it for a reason.
Was glad to hear reiterated that the WordPress Transients API is just that—transient. Made to exist for a short time. Likely to disappear unexpectedly. It's a thing people always struggle to keep in mind.
Summary Casie discussed the current state of SEO, which is generally "back to basics"—meaning that old SEO tricks don't work. (This is especially true of building thousands of low-quality links through link-building schemes.) The presentation was also full of a number of helpful but difficult-to-summarize tips (about Google+, WordPress plugins and tools for SEO, and a lot else), making it a recommended listen once the video's posted.
Enjoyed the mental picture of Penguin, Panda, and Hummingbird, Google's algorithm updates, being devastating forces of destruction. These updates are indeed wreaking havoc on the SEO world—Penguin and Panda penalize duplicate content and low-quality links—leading to my next takeaway.
Felt vindicated in my perception that SEO "as a thing" is probably over. Most SEO best practices are simply content marketing best practices: knowing your audience, producing regular, high-quality content, and working to share that content through real, natural channels. Just about anything on top of that is obsolete.
Greatly appreciated this three-part summary of what actually works in SEO: (1) Keywords—good and relevant, and the first thing to research; (2) Content—regular, useful, and helpful, and with keywords; and (3) Link-building, based on delivering actual value to real people and including links in that.
Glimpsed the black heart of Google, who are building more and more rich search results so you never have to go to other sites. (Googling "Red Sox" will give you scores and ticket times—no need to go to MLB.com.) More time on Google itself means more ad revenue.
Summary Chris reinforced the keynote theme that "responsive design is putting content first." "Design is 95% typography"; he walks through a layered design approach that starts just with HTML markup on a page (no stylesheet), then proceeds to typography, then proceeds to everything else. Advocates letting "typography dictate layout widths," with characters per line (CPL) as an important layout metric.
Had mind blown by @height media queries! They exist, and let you make decisions based on how tall the browser device's window is. I started using them right away for a project.
Found at once mischievous and sensible the advice to test cross-device compatibility by visiting phone and mobile device stores. You just pretend you're there to buy something, and test your sites across every device you find. Brilliant!
Seemed to glimpse The Future in PostListr, a sample app built using Backbone and that makes use of the recently completed JSON API for WordPress. The app can pull the most recent posts from any WordPress site that uses the JSON API (all wordpress.com sites, sites running Jetpack, and a few others). This points at the possible future of WordPress, with custom admin interfaces and a bunch else made possible through the API.
Was floored by the high quality of this presentation, and the amazing amount of ground it covered. If you're at all interested in highly technical JS frameworks, do yourself a favor and watch this presentation when the video comes live.
Felt a stiff breeze directly above my head during parts of this presentation.
Summary Jon presented the basics of Git, the standard version-control system. Outlined its simplest use as "a wonderful backup tool." Gave a basic overview of version control concepts, and introduced a visual Git interface I hadn't known about called SourceTree that appears to simplify using Git considerably.
Agree-raged when the presenter said "Part of the problem with Git is that it's a tool made by developers and for developers." My notes read "This is true; I hate this." My experience with Git has been a million obscure command-line errors.
Appreciated this quick beginner glossary: revision: a change or group of changes; commit: "save the changes to"; creates the revision; remote server: an external server which hosts your repository; needed to share or deploy code (never log into it or do work on it; it's just a storage space); push: what moves revision onto remote server; pull: what gets remote server contents to local directory structure.
Also appreciated the following advice for using Git (some of it WordPress-specific): don't create a Git repository at WordPress root, since you don't want to keep track of the WordPress core, plugins, etc.; never change revisions, but create new revision reflecting changes; don't expect Git to version-control your WordPress MySQL database (this makes Git a bit awkward for WordPress); and do "commit often" rather than doing eight hours of work and forgetting what you've done.
Laughed like an idiot at the slide to the right—just caught me in the right way. Slide of the Weekend honors.
Summary Dan gave a quick introduction to using custom post types—the smart way to add your own data types to WordPress. Particularly focused on adding custom meta boxes: "A custom post is good; customizing meta boxes is better." Meta boxes do not need to be registered along with a particular custom post type; they can be added to arbitrary post types without hacking existing plugins (which is a bad idea).
Find worth repeating the bit about meta boxes above—was my major takeaway. If you're digging around in WooCommerce trying to add a custom post class to some of your products, take a break and flip through this presentation.
Summary A general discussion of best practices for WordPress freelancers. A main takeaway was to "sell on value"—that is, get potential clients' imaginations working around how much value a properly-done website will add to their business, and then have pricing be a fraction of that. It's a contrast to selling on hours (a sort of "builder" or "contractor" mentality). Matt also recommended some time management tools for entrepreneurs and freelancers: Google Calendar, WonderList, Trello (which he finds lighter than Basecamp).
Agreed that "time blocking is awesome"—Matt blocks out Monday and Tuesday for his podcast, and doesn't schedule calls on Fridays or after 2 PM. Finding the discipline to do similar things has been really helpful, and I aspire to do it more.
This isn't a game to me.
Feel a pure, simple, uncomplicated love for Trello, which we ended up adopting shortly after WordCamp. It is the handsome, overachieving older brother of every JS project management application we've seen to date.
Summary An overview of content marketing best practices; how to grow site traffic and marketing reach by creating and marketing blog content.
Felt self-conscious about our slowness to adopt Google and Bing authorship, which match content to a particular author/personality.
Summary Formally defined design: "Design both inspires and transforms an idea into a blueprint for something that adds value." Basically attempting to help people understand that design is about solving problems, and not just adding aesthetics.
Was intrigued by but may never use a set of complementary design process tools: (1) grayscreen prototype: "How site's going to work" without talking about what it'll look like (function not form); (2) style tiles: Look-and-feel without actual function (form not function); (3) whitescreen prototype: "Fully functional version of the site" but with no CSS.
Well, that's what we were able to make! What did we miss? Please comment below; we'd love to hear from you.
And as always, thanks so much to Boston WordPress for putting on the Boston WordCamps. It was a huge privilege to attend.
Amazing summary of the event & thanks for coming to the SEO session!


text:
Tovomita parviflora är en tvåhjärtbladig växtart som beskrevs av José Cuatrecasas. Tovomita parviflora ingår i släktet Tovomita och familjen Clusiaceae. Inga underarter finns listade i Catalogue of Life.

Källor

Malpigiaordningen
parviflora

redpajama_set_name: RedPajamaWikipedia


text:
The Mentor • October 14, 2020 • https://www.mhsmentor.com/13180/sports/manhattan-on-winning-streak/
Manhattan on winning streak
Lasirra Hines, Entertainment Editor
The Manhattan High Girls Varsity tennis team won first place with a total score of 66 at the 2020 Centennial League in Topeka last Monday. This is Manhattan's third straight League Championship.
The top three from the meet were Manhattan in first, Topeka Seaman in second with 60, and Hayden coming in third with 58.
In Doubles, the team of junior Hannah Loub and sophomore Maura Wiens placed fourth, going 3-2 and the team of junior Ava Bahr and senior Cooper Lohman placed sixth going 3-2 as well.
Sophomore Jillian Harkin placed first, with a score of 5-0, becoming the 2020 Centennial League Singles Champion. Senior Kayla Lei placed third, going 4-1 in Singles.This win makes Harkin a back to back League champion.
"I was super excited to be back to back League Champion, but I didn't let myself celebrate too much because I know I still have Regionals and State ahead of me," Harkin said.
As League was approaching, Harkin prepared by keeping her game and practicing as much as she could for the meet.
"I feel like my hard work has been paying off and it feels super rewarding to have had such good results throughout the entire season," Harkin said.
The team continued the winning streak last Friday at the 2020 Regionals meet in Topeka at Kossover. They placed first, with Washburn Rural in second. Harkin won going 4-0 in Singles, and Lei placed second overall going 4-1. Loub and Wiens placed second in doubles going 4-1 with Bahr and Lohman placing third also going 4-1.
Regionals ended up being a great experience for the team, as all of the girls qualified for State. Harkin, also a back to back champion for Regionals, is proud of the entire team for their win.
"Regionals was a great experience for the whole team. I placed first and so did the team, and all the girls qualified for State," Harkin said. "I am so excited to be back to back champion, and also very excited for the other girls. I am so proud that all of us are playing so well at this point in the season."
Lei placed second at Regionals, which she wasn't expecting.
"I was thrilled to win second. Going into the competition, I didn't think I was going to place that high," Lei said. "It honestly surprised me by showing me what I am capable of and really helped me gain more confidence as a tennis player."
The season, according to Lei, had a rocky start for her. Here were some days that didn't turn out the best, and it affected her. However, she continued working hard, practicing and building up confidence in herself at competitions.
"I continued working hard at practice and trusted myself during competitions and now feel more confident in my game and am excited to compete at State," Lei said. " No matter what my scores end up being, I'll know that I truly gave it my all."
The team will travel to Topeka again for the 6A State Tournament on Oct. 16-17.

redpajama_set_name: RedPajamaCommonCrawl


text:
Q: Private bytes for IIS Pool Increases Greatly after loading XMLs             try
                {
                    using (FileStream fs = new FileStream(filePathAndName, FileMode.Open))
                    {
                        using (XmlReader xmlReader = XmlReader.Create(fs))
                        {
                            using (XmlDictionaryReader xmlDictionaryReader = XmlDictionaryReader.CreateDictionaryReader(xmlReader))
                            {
                                DataContractSerializer deserializer = new DataContractSerializer(typeof(T));
                                obj = (T)deserializer.ReadObject(xmlDictionaryReader);
                                xmlDictionaryReader.Dispose();
                            }
                            xmlReader.Dispose();
                        }
                        fs.Dispose();
                    }
                }

Above mentioned code increases private bytes for my IIS pool by 300 MB. The number of files loaded are ~16,000 with an average size of 3 KB each. That's around ~60 MB of data causing an increase of 300 MB in memory.
Is there anything I am missing here which is causing the private bytes to balloon so much? Can I make it more efficient?
Interesting observation: I tried adding GC.Collect() right after all the files are loaded, it decreased the GC.GetTotalMemory(false) but did not affect the IIS APP POOL private bytes.

redpajama_set_name: RedPajamaStackExchange


"Being a first timer, I was super nervous. Taelyr made me feel so comfortable right from the beginning. I won't lie and say it didn't hurt because it did but she was so reassuring and professional. I loved it. I have already booked my next 3 sessions...."
"Great service and I am in love with my lashes Thanks Lash Out."


text:
Some players have not felt 'in the loop' with union
By Kurt HelinNov 15, 2011, 11:38 AM EDT
When NBA union director Billy Hunter asked for a show of hands in a New York hotel on Monday it was unanimous. All the guys in the room backed the idea of the union filing a "disclaimer of interest" and taking the fight to the courts.
But for some rank-and-file players who would rather just get back on the court, they don't feel heard in all this.
Take what Glen Davis told the Boston Herald. The Celtics (well, free agent) forward speaks for others.
"I don't think I've been kept in the loop as far as what's going on and how things are going on," he said. "I want to be kept in the loop, but when I say that, they say, well, come to the meetings.
"It's not just Paul (Pierce, Celtics team rep) making that decision," said Davis. "It's also Derek (Fisher) and Billy Hunter. I talk to players, but my friends are guys like Paul and (Kevin Garnett) – guys who are in a different stage of their careers. I don't talk to a lot of the guys who are more in my stage, like Carl Landry and DeJuan Blair."
On the other coast, Kings forward DeMarcus Cousins was frustrated, too, as are a number of younger players, he told the Sacramento Bee.
"Some of the young players I talked to, it's not about the money. We just want to go out there and play ball," Cousins said. "For me, it's knocking off time for me to be improving as a player. This whole situation is really not helping out us younger players."
With 450 members in the players' union — well, trade association now — it's not going to be able to keep everyone happy. Some guys care and seek out the information, others stand back and let others take the lead. Not everyone is going to seek out the information on where things stand.
But remember that while the sentiment in that New York hotel conference room was unanimous, it is not across the full width of the NBA.
Tags: Basketball Related Income, Billy Hunter, BRI, David Stern, Derek Fisher, NBA amnesty clause, NBA CBA, NBA Collective Bargaining Agreement, NBA hard salary cap, NBA lockout, NBA owners, NBA Players Association, NBA players union, NBA union decertification


text:
posted Friday, August 25, 2017 - Volume 45 Issue 34
ACLU files legal action moving Gavin Grimm case forward in District Court
GLOUCESTER COUNTY, VA. - [On Friday, August 11] the American Civil Liberties Union filed papers ending Gavin Grimm's request for an immediate halt to the Gloucester County School Board's policy prohibiting him and other transgender students from using the common restrooms at school. The new filings clear the way for the ACLU to proceed with litigating Grimm's case in district court.
'We believe that today's filing represents the most efficient path forward to ensuring that justice is served for Gavin,' said Josh Block, senior staff attorney with the ACLU's LGBT & HIV Project. 'Gavin graduated from high school before his simple request to his school board to treat him like every other boy could be validated, but this case is far from over. We'll continue to move forward so that Gavin's rights are vindicated and so that we can ensure that no other transgender students in Gloucester County have to go through what Gavin went through.'
For the past three years, the ACLU has represented Grimm in a lawsuit challenging the school board's discriminatory policy prohibiting boys and girls who are transgender from using the common student restrooms and forcing them to use separate facilities. Grimm had sought an immediate preliminary injunction ordering the school board to stop enforcing its policy against him while his case proceeded.
The landmark transgender rights case briefly made its way to the Supreme Court earlier this year before eventually being sent back down to lower courts for reconsideration following the Trump administration's withdrawal of a Title IX guidance clarifying protections for transgender students.
Arguments at the Fourth Circuit Court of Appeals, which had previously ruled in Grimm's favor, were originally scheduled for September. But the Fourth Circuit recently cancelled those arguments and asked the trial court to hold additional hearings to determine whether Grimm still needs an immediate injunction now that he has graduated from high school.
The ACLU has now withdrawn that request for an immediate injunction. The filing today instead continues to seek a more permanent injunction halting the school board's implementation of their anti-trans restroom policy, as well as continuing to seek nominal damage claims on behalf of Grimm.
'Our fight to have our rights and dignity respected as trans people didn't end just because I graduated from high school. I am in this for the long haul, and I remain hopeful that my case will help make sure that other transgender students are able to attend school safely and without discrimination,' said Grimm.
This statement is at: https://www.aclu.org/news/aclu-files-legal-action-moving-gavin-grimm-case-forward-district-court
Grays Harbor Pride Festival incident:
Bar owner accused of making threats and filing for a permit to hold anti-LGBTQ protest in response
Former dues-paying Teamster Jenny Durkan receives sole endorsement from Teamsters Joint Council No. 28 and Washington State Council of County and City Employees
ST. LOUIS: Car hits three at vigil for Trans woman killed by police, minor injuries, driver arrested
Health experts sue to block I-27 from ballot
Initiative would ban safe injection sites
JESSE'S JOURNAL: The 'Lost Cause' and its monuments
QLaw is happy to share the news that the Judges' Bench Guide is here!
White House issues guidelines for Transgender military ban
Pentagon ordered to enact policy within six months, lawsuits expected
Lambda Legal sues U.S. Departments of Education and Justice for documents about withdrawal of guidance on transgender students
Hate group sues Southern Poverty Law Center
Don't call us haters, haters say
Groups launch 'Freda Fairness, a Farmer for the People' at KY State Fair to counter 'Freddy Farm Bureau'
Weekly Pets


Using Azure Active Directory (Azure AD), you can designate limited administrators to manage identity tasks in less-privileged roles. Administrators can be assigned for such purposes as adding or changing users, assigning administrative roles, resetting user passwords, managing user licenses, and managing domain names. The default user permissions can be changed only in user settings in Azure AD.
The Global Administrator has access to all administrative features. By default, the person who signs up for an Azure subscription is assigned the Global Administrator role for the directory. Only Global Administrators and Privileged Role Administrators can delegate administrator roles. To reduce the risk to your business we recommend that you assign this role to only a few people in your company.
Application Administrator: Users in this role can create and manage all aspects of enterprise applications, application registrations, and application proxy settings. This role also grants the ability to consent to delegated permissions, and application permissions excluding Microsoft Graph and Azure AD Graph. Users assigned to this role are not added as owners when creating new application registrations or enterprise applications.
Important: This role grants the ability to manage application credentials. Users assigned this role can add credentials to an application, and use those credentials to impersonate the application's identity. If the application's identity has been granted access to Azure Active Directory, such as the ability to create or update User or other objects, then a user assigned to this role could perform those actions while impersonating the application. This ability to impersonate the application's identity may be an elevation of privilege over what the user can do via their role assignments in Azure AD. It is important to understand that assigning a user to the Application Administrator role gives them the ability to impersonate an application's identity.
Application Developer: Users in this role can create application registrations when the "Users can register applications" setting is set to No. This role also grants permission to consent on one's own behalf when the "Users can consent to apps accessing company data on their behalf" setting is set to No. Users assigned to this role are added as owners when creating new application registrations or enterprise applications.
Application Registration and Enterprise Application owners, who can manage credentials of apps they own. Those apps may have privileged permissions in Azure AD and elsewhere not granted to Authentication Administrators. Through this path an Authentication Administrator may be able to assume the identity of an application owner and then further assume the identity of a privileged application by updating the credentials for the application.
Azure subscription owners, who may have access to sensitive or private information or critical configuration in Azure.
Security Group and Office 365 Group owners, who can manage group membership. Those groups may grant access to sensitive or private information or critical configuration in Azure AD and elsewhere.
Administrators in other services outside of Azure AD like Exchange Online, Office Security and Compliance Center, and human resources systems.
Non-administrators like executives, legal counsel, and human resources employees who may have access to sensitive or private information.
Cloud Application Administrator: Users in this role have the same permissions as the Application Administrator role, excluding the ability to manage application proxy. This role grants the ability to create and manage all aspects of enterprise applications and application registrations. This role also grants the ability to consent to delegated permissions, and application permissions excluding Microsoft Graph and Azure AD Graph. Users assigned to this role are not added as owners when creating new application registrations or enterprise applications.
Important: This role grants the ability to manage application credentials. Users assigned this role can add credentials to an application, and use those credentials to impersonate the application's identity. If the application's identity has been granted access to Azure Active Directory, such as the ability to create or update User or other objects, then a user assigned to this role could perform those actions while impersonating the application. This ability to impersonate the application's identity may be an elevation of privilege over what the user can do via their role assignments in Azure AD. It is important to understand that assigning a user to the Cloud Application Administrator role gives them the ability to impersonate an application's identity.
Cloud Device Administrator: Users in this role can enable, disable, and delete devices in Azure AD and read Windows 10 BitLocker keys (if present) in the Azure portal. The role does not grant permissions to manage any other properties on the device.
Compliance Administrator: Users with this role have permissions to manage compliance-related features in the Microsoft 365 compliance center, Microsoft 365 admin center, Azure, and Office 365 Security & Compliance Center. Users can also manage all features within the Exchange admin center and Teams & Skype for Business admin center and create support tickets for Azure and Microsoft 365. More information is available at About Office 365 admin roles.
Conditional Access Administrator: Users with this role have the ability to manage Azure Active Directory conditional access settings.
To deploy Exchange ActiveSync conditional access policy in Azure, the user must also be a Global Administrator.
Customer Lockbox access approver: Manages Customer Lockbox requests in your organization. They receive email notifications for Customer Lockbox requests and can approve and deny requests from the Microsoft 365 admin center. They can also turn the Customer Lockbox feature on or off. Only global admins can reset the passwords of people assigned to this role.
Device Administrators: This role is available for assignment only as an additional local administrator in Device settings. Users with this role become local machine administrators on all Windows 10 devices that are joined to Azure Active Directory. They do not have the ability to manage devices objects in Azure Active Directory.
Directory Readers: This is a role that should be assigned only to legacy applications that do not support the Consent Framework. Don't assign it to users.
Dynamics 365 administrator / CRM Administrator: Users with this role have global permissions within Microsoft Dynamics 365 Online, when the service is present, as well as the ability to manage support tickets and monitor service health. More information at Use the service admin role to manage your tenant.
In Microsoft Graph API, Azure AD Graph API, and Azure AD PowerShell, this role is identified as "Dynamics 365 Service Administrator". It is "Dynamics 365 Administrator" in the Azure portal.
Exchange Administrator: Users with this role have global permissions within Microsoft Exchange Online, when the service is present. Also has the ability to create and manage all Office 365 Groups, manage support tickets, and monitor service health. More information at About Office 365 admin roles.
In Microsoft Graph API, Azure AD Graph API, and Azure AD PowerShell, this role is identified as "Exchange Service Administrator ". It is "Exchange Administrator" in the Azure portal. It is "Exchange Online admininistrator" in the Exchange admin center.
Global Administrator / Company Administrator: Users with this role have access to all administrative features in Azure Active Directory, as well as services that use Azure Active Directory identities like Microsoft 365 security center, Microsoft 365 compliance center, Exchange Online, SharePoint Online, and Skype for Business Online. The person who signs up for the Azure Active Directory tenant becomes a global administrator. Only global administrators can assign other administrator roles. There can be more than one global administrator at your company. Global admins can reset the password for any user and all other administrators.
In Microsoft Graph API, Azure AD Graph API, and Azure AD PowerShell, this role is identified as "Company Administrator". It is "Global Administrator" in the Azure portal.
Guest Inviter: Users in this role can manage Azure Active Directory B2B guest user invitations when the Members can invite user setting is set to No. More information about B2B collaboration at About Azure AD B2B collaboration. It does not include any other permissions.
Information Protection Administrator: Users with this role have all permissions in the Azure Information Protection service. This role allows configuring labels for the Azure Information Protection policy, managing protection templates, and activating protection. This role does not grant any permissions in Identity Protection Center, Privileged Identity Management, Monitor Office 365 Service Health, or Office 365 Security & Compliance Center.
In Microsoft Graph API, Azure AD Graph API, and Azure AD PowerShell, this role is identified as "Intune Service Administrator ". It is "Intune Administrator" in the Azure portal.
License Administrator: Users in this role can add, remove, and update license assignments on users, groups (using group-based licensing), and manage the usage location on users. The role does not grant the ability to purchase or manage subscriptions, create or manage groups, or create or manage users beyond the usage location. This role has no access to view, create, or manage support tickets.
Message Center Reader: Users in this role can monitor notifications and advisory health updates in Office 365 Message center for their organization on configured services such as Exchange, Intune, and Microsoft Teams. Message Center Readers receive weekly email digests of posts, updates, and can share message center posts in Office 365. In Azure AD, users assigned to this role will only have read-only access on Azure AD services such as users and groups. This role has no access to view, create, or manage support tickets.
Partner Tier1 Support: Do not use. This role has been deprecated and will be removed from Azure AD in the future. This role is intended for use by a small number of Microsoft resale partners, and is not intended for general use.
Partner Tier2 Support: Do not use. This role has been deprecated and will be removed from Azure AD in the future. This role is intended for use by a small number of Microsoft resale partners, and is not intended for general use.
Application Registration and Enterprise Application owners, who can manage credentials of apps they own. Those apps may have privileged permissions in Azure AD and elsewhere not granted to Helpdesk Administrators. Through this path a Helpdesk Administrator may be able to assume the identity of an application owner and then further assume the identity of a privileged application by updating the credentials for the application.
This role was previously called "Password Administrator" in Azure portal. We are changing its name to "Helpdesk Administrator" to match its name in Azure AD PowerShell, Azure AD Graph API and Microsoft Graph API. For a short time, we will change the name to "Helpdesk (Password) Administrator" in Azure portal before the change to "Helpdesk Administrator".
Power BI Administrator: Users with this role have global permissions within Microsoft Power BI, when the service is present, as well as the ability to manage support tickets and monitor service health. More information at Understanding the Power BI admin role.
In Microsoft Graph API, Azure AD Graph API, and Azure AD PowerShell, this role is identified as "Power BI Service Administrator ". It is "Power BI Administrator" in the Azure portal.
Important: This role grants the ability to manage assignments for all Azure AD roles including the Global Administrator role. This role does not include any other privileged abilities in Azure AD like creating or updating users. However, users assigned to this role can grant themselves or others additional privilege by assigning additional roles.
Reports Reader: Users with this role can view usage reporting data and the reports dashboard in Microsoft 365 admin center and the adoption context pack in Power BI. Additionally, the role provides access to sign-in reports and activity in Azure AD and data returned by the Microsoft Graph reporting API. A user assigned to the Reports Reader role can access only relevant usage and adoption metrics. They don't have any admin permissions to configure settings or access the product-specific admin centers like Exchange. This role has no access to view, create, or manage support tickets.
Security Administrator: Users with this role have permissions to manage security-related features in the Microsoft 365 security center, Azure Active Directory Identity Protection, Azure Information Protection, and Office 365 Security & Compliance Center. More information about Office 365 permissions is available at Permissions in the Office 365 Security & Compliance Center.
Security Reader: Users with this role have global read-only access on security-related feature, including all information in Microsoft 365 security center, Azure Active Directory, Identity Protection, Privileged Identity Management, as well as the ability to read Azure Active Directory sign-in reports and audit logs, and in Office 365 Security & Compliance Center. More information about Office 365 permissions is available at Permissions in the Office 365 Security & Compliance Center.
Privileged Identity Management Has read-only access to all information surfaced in Azure AD PIM: Policies and reports for Azure AD role assignments, security reviews and in the future read access to policy data and reports for scenarios besides Azure AD role assignment.
Cannot sign up for Azure AD PIM or make any changes to it. In the PIM portal or via PowerShell, someone in this role can activate additional roles (for example, Global Admin or Privileged Role Administrator), if the user is eligible for them.
Intune Views user, device, enrollment, configuration, and application information. Cannot make changes to Intune.
Service Support Administrator: Users with this role can open support requests with Microsoft for Azure and Office 365 services, and views the service dashboard and message center in the Azure portal and Microsoft 365 admin center. More information at About Office 365 admin roles.
In Microsoft Graph API, Azure AD Graph API, and Azure AD PowerShell, this role is identified as "Service Support Administrator." It is "Service Administrator" in the Azure portal, the Microsoft 365 admin center, and the Intune portal.
SharePoint Administrator: Users with this role have global permissions within Microsoft SharePoint Online, when the service is present, as well as the ability to create and manage all Office 365 Groups, manage support tickets, and monitor service health. More information at About Office 365 admin roles.
In Microsoft Graph API, Azure AD Graph API, and Azure AD PowerShell, this role is identified as "SharePoint Service Administrator." It is "SharePoint Administrator" in the Azure portal.
In Microsoft Graph API, Azure AD Graph API, and Azure AD PowerShell, this role is identified as "Lync Service Administrator". It is "Skype for Business Administrator" in the Azure portal.
Teams Administrator: Users in this role can manage all aspects of the Microsoft Teams workload via the Microsoft Teams & Skype for Business admin center and the respective PowerShell modules. This includes, among other areas, all management tools related to telephony, messaging, meetings, and the teams themselves. This role additionally grants the ability to create and manage all Office 365 Groups, manage support tickets, and monitor service health.
In Microsoft Graph API, Azure AD Graph API, and Azure AD PowerShell, this role is identified as "Teams Service Administrator ". It is "Teams Administrator" in the Azure portal.
Teams Communications Administrator: Users in this role can manage aspects of the Microsoft Teams workload related to voice & telephony. This includes the management tools for telephone number assignment, voice and meeting policies, and full access to the call analytics toolset.
Teams Communications Support Engineer: Users in this role can troubleshoot communication issues within Microsoft Teams & Skype for Business using the user call troubleshooting tools in the Microsoft Teams & Skype for Business admin center. Users in this role can view full call record information for all participants involved. This role has no access to view, create, or manage support tickets.
Teams Communications Support Specialist: Users in this role can troubleshoot communication issues within Microsoft Teams & Skype for Business using the user call troubleshooting tools in the Microsoft Teams & Skype for Business admin center. Users in this role can only view user details in the call for the specific user they have looked up. This role has no access to view, create, or manage support tickets.
User Administrator: Users with this role can create users, and manage all aspects of users with some restrictions (see below), and can update password expiration policies. Additionally, users with this role can create and manage all groups. This role also includes the ability to create and manage user views, manage support tickets, and monitor service health.
Application Registration and Enterprise Application owners, who can manage credentials of apps they own. Those apps may have privileged permissions in Azure AD and elsewhere not granted to User Administrators. Through this path a User Administrator may be able to assume the identity of an application owner and then further assume the identity of a privileged application by updating the credentials for the application.
The following tables describe the specific permissions in Azure Active Directory given to each role. Some roles may have additional permissions in Microsoft services outside of Azure Active Directory.
Can create and manage all aspects of app registrations and enterprise apps.
microsoft.aad.directory/applications/audience/update Update applications.audience property in Azure Active Directory.
microsoft.aad.directory/applications/authentication/update Update applications.authentication property in Azure Active Directory.
microsoft.aad.directory/applications/basic/update Update basic properties on applications in Azure Active Directory.
microsoft.aad.directory/applications/create Create applications in Azure Active Directory.
microsoft.aad.directory/applications/credentials/update Update applications.credentials property in Azure Active Directory.
microsoft.aad.directory/applications/delete Delete applications in Azure Active Directory.
microsoft.aad.directory/applications/owners/update Update applications.owners property in Azure Active Directory.
microsoft.aad.directory/applications/permissions/update Update applications.permissions property in Azure Active Directory.
microsoft.aad.directory/applications/policies/update Update applications.policies property in Azure Active Directory.
microsoft.aad.directory/appRoleAssignments/create Create appRoleAssignments in Azure Active Directory.
microsoft.aad.directory/appRoleAssignments/read Read appRoleAssignments in Azure Active Directory.
microsoft.aad.directory/appRoleAssignments/update Update appRoleAssignments in Azure Active Directory.
microsoft.aad.directory/appRoleAssignments/delete Delete appRoleAssignments in Azure Active Directory.
microsoft.aad.directory/auditLogs/allProperties/read Read all properties (including privileged properties) on auditLogs in Azure Active Directory.
microsoft.aad.directory/policies/applicationConfiguration/basic/read Read policies.applicationConfiguration property in Azure Active Directory.
microsoft.aad.directory/policies/applicationConfiguration/basic/update Update policies.applicationConfiguration property in Azure Active Directory.
microsoft.aad.directory/policies/applicationConfiguration/create Create policies in Azure Active Directory.
microsoft.aad.directory/policies/applicationConfiguration/delete Delete policies in Azure Active Directory.
microsoft.aad.directory/policies/applicationConfiguration/owners/read Read policies.applicationConfiguration property in Azure Active Directory.
microsoft.aad.directory/policies/applicationConfiguration/owners/update Update policies.applicationConfiguration property in Azure Active Directory.
microsoft.aad.directory/policies/applicationConfiguration/policyAppliedTo/read Read policies.applicationConfiguration property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/appRoleAssignedTo/update Update servicePrincipals.appRoleAssignedTo property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/appRoleAssignments/update Update servicePrincipals.appRoleAssignments property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/audience/update Update servicePrincipals.audience property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/authentication/update Update servicePrincipals.authentication property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/basic/update Update basic properties on servicePrincipals in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/create Create servicePrincipals in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/credentials/update Update servicePrincipals.credentials property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/delete Delete servicePrincipals in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/owners/update Update servicePrincipals.owners property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/permissions/update Update servicePrincipals.permissions property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/policies/update Update servicePrincipals.policies property in Azure Active Directory.
microsoft.aad.directory/signInReports/allProperties/read Read all properties (including privileged properties) on signInReports in Azure Active Directory.
microsoft.azure.serviceHealth/allEntities/allTasks Read and configure Azure Service Health.
microsoft.azure.supportTickets/allEntities/allTasks Create and manage Azure support tickets.
microsoft.office365.serviceHealth/allEntities/allTasks Read and configure Office 365 Service Health.
microsoft.office365.supportTickets/allEntities/allTasks Create and manage Office 365 support tickets.
Can create application registrations independent of the 'Users can register applications' setting.
microsoft.aad.directory/applications/createAsOwner Create applications in Azure Active Directory. Creator is added as the first owner, and the created object counts against the creator's 250 created objects quota.
microsoft.aad.directory/appRoleAssignments/createAsOwner Create appRoleAssignments in Azure Active Directory. Creator is added as the first owner, and the created object counts against the creator's 250 created objects quota.
microsoft.aad.directory/oAuth2PermissionGrants/createAsOwner Create oAuth2PermissionGrants in Azure Active Directory. Creator is added as the first owner, and the created object counts against the creator's 250 created objects quota.
microsoft.aad.directory/servicePrincipals/createAsOwner Create servicePrincipals in Azure Active Directory. Creator is added as the first owner, and the created object counts against the creator's 250 created objects quota.
Allowed to view, set and reset authentication method information for any non-admin user.
microsoft.aad.directory/users/invalidateAllRefreshTokens Invalidate all user refresh tokens in Azure Active Directory.
microsoft.aad.directory/users/strongAuthentication/update Update strong authentication properties like MFA credential information.
microsoft.office365.webPortal/allEntities/basic/read Read basic properties on all resources in microsoft.office365.webPortal.
Can perform common billing related tasks like updating payment information.
This role has additonal permissions outside of Azure Active Directory. For more information, see role description above.
microsoft.aad.directory/organization/basic/update Update basic properties on organization in Azure Active Directory.
microsoft.commerce.billing/allEntities/allTasks Manage all aspects of Office 365 billing.
Can access and manage Desktop management tools and services including Intune.
microsoft.office365.desktopAnalytics/allEntities/allTasks Manage all aspects of Desktop Analytics.
Can create and manage all aspects of app registrations and enterprise apps except App Proxy.
Full access to manage devices in Azure AD.
microsoft.aad.directory/devices/bitLockerRecoveryKeys/read Read devices.bitLockerRecoveryKeys property in Azure Active Directory.
microsoft.aad.directory/devices/delete Delete devices in Azure Active Directory.
microsoft.aad.directory/devices/disable Disable devices in Azure Active Directory.
microsoft.aad.directory/devices/enable Enable devices in Azure Active Directory.
Can manage all aspects of Azure AD and Microsoft services that use Azure AD identities.
microsoft.aad.cloudAppSecurity/allEntities/allTasks Create and delete all resources, and read and update standard properties in microsoft.aad.cloudAppSecurity.
microsoft.aad.directory/administrativeUnits/allProperties/allTasks Create and delete administrativeUnits, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/applications/allProperties/allTasks Create and delete applications, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/appRoleAssignments/allProperties/allTasks Create and delete appRoleAssignments, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/contacts/allProperties/allTasks Create and delete contacts, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/contracts/allProperties/allTasks Create and delete contracts, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/devices/allProperties/allTasks Create and delete devices, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/directoryRoles/allProperties/allTasks Create and delete directoryRoles, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/directoryRoleTemplates/allProperties/allTasks Create and delete directoryRoleTemplates, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/domains/allProperties/allTasks Create and delete domains, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/groups/allProperties/allTasks Create and delete groups, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/groupSettings/allProperties/allTasks Create and delete groupSettings, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/groupSettingTemplates/allProperties/allTasks Create and delete groupSettingTemplates, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/loginTenantBranding/allProperties/allTasks Create and delete loginTenantBranding, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/oAuth2PermissionGrants/allProperties/allTasks Create and delete oAuth2PermissionGrants, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/organization/allProperties/allTasks Create and delete organization, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/policies/allProperties/allTasks Create and delete policies, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/roleAssignments/allProperties/allTasks Create and delete roleAssignments, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/roleDefinitions/allProperties/allTasks Create and delete roleDefinitions, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/scopedRoleMemberships/allProperties/allTasks Create and delete scopedRoleMemberships, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/allProperties/allTasks Create and delete servicePrincipals, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/subscribedSkus/allProperties/allTasks Create and delete subscribedSkus, and read and update all properties in Azure Active Directory.
microsoft.aad.directory/users/allProperties/allTasks Create and delete users, and read and update all properties in Azure Active Directory.
microsoft.aad.directorySync/allEntities/allTasks Perform all actions in Azure AD Connect.
microsoft.aad.identityProtection/allEntities/allTasks Create and delete all resources, and read and update standard properties in microsoft.aad.identityProtection.
microsoft.aad.privilegedIdentityManagement/allEntities/read Read all resources in microsoft.aad.privilegedIdentityManagement.
microsoft.azure.advancedThreatProtection/allEntities/read Read all resources in microsoft.azure.advancedThreatProtection.
microsoft.azure.informationProtection/allEntities/allTasks Manage all aspects of Azure Information Protection.
microsoft.intune/allEntities/allTasks Manage all aspects of Intune.
microsoft.office365.exchange/allEntities/allTasks Manage all aspects of Exchange Online.
microsoft.office365.messageCenter/messages/read Read messages in microsoft.office365.messageCenter.
microsoft.office365.messageCenter/securityMessages/read Read securityMessages in microsoft.office365.messageCenter.
microsoft.office365.protectionCenter/allEntities/allTasks Manage all aspects of Office 365 Protection Center.
microsoft.office365.securityComplianceCenter/allEntities/allTasks Create and delete all resources, and read and update standard properties in microsoft.office365.securityComplianceCenter.
microsoft.office365.sharepoint/allEntities/allTasks Create and delete all resources, and read and update standard properties in microsoft.office365.sharepoint.
microsoft.office365.skypeForBusiness/allEntities/allTasks Manage all aspects of Skype for Business Online.
microsoft.office365.usageReports/allEntities/read Read Office 365 usage reports.
microsoft.powerApps.dynamics365/allEntities/allTasks Manage all aspects of Dynamics 365.
microsoft.powerApps.powerBI/allEntities/allTasks Manage all aspects of Power BI.
microsoft.windows.defenderAdvancedThreatProtection/allEntities/read Read all resources in microsoft.windows.defenderAdvancedThreatProtection.
Can read and manage compliance configuration and reports in Azure AD and Office 365.
Can manage conditional access capabilities.
microsoft.aad.directory/policies/conditionalAccess/basic/read Read policies.conditionalAccess property in Azure Active Directory.
microsoft.aad.directory/policies/conditionalAccess/basic/update Update policies.conditionalAccess property in Azure Active Directory.
microsoft.aad.directory/policies/conditionalAccess/create Create policies in Azure Active Directory.
microsoft.aad.directory/policies/conditionalAccess/delete Delete policies in Azure Active Directory.
microsoft.aad.directory/policies/conditionalAccess/owners/read Read policies.conditionalAccess property in Azure Active Directory.
microsoft.aad.directory/policies/conditionalAccess/owners/update Update policies.conditionalAccess property in Azure Active Directory.
microsoft.aad.directory/policies/conditionalAccess/policiesAppliedTo/read Read policies.conditionalAccess property in Azure Active Directory.
microsoft.aad.directory/policies/conditionalAccess/tenantDefault/update Update policies.conditionalAccess property in Azure Active Directory.
Can manage all aspects of the Dynamics 365 product.
Can approve Microsoft support requests to access customer organizational data.
Users assigned to this role are added to the local administrators group on Azure AD-joined devices.
microsoft.aad.directory/groupSettings/basic/read Read basic properties on groupSettings in Azure Active Directory.
microsoft.aad.directory/groupSettingTemplates/basic/read Read basic properties on groupSettingTemplates in Azure Active Directory.
Can read basic directory information. For granting access to applications, not intended for users.
microsoft.aad.directory/administrativeUnits/basic/read Read basic properties on administrativeUnits in Azure Active Directory.
microsoft.aad.directory/administrativeUnits/members/read Read administrativeUnits.members property in Azure Active Directory.
microsoft.aad.directory/applications/basic/read Read basic properties on applications in Azure Active Directory.
microsoft.aad.directory/applications/owners/read Read applications.owners property in Azure Active Directory.
microsoft.aad.directory/applications/policies/read Read applications.policies property in Azure Active Directory.
microsoft.aad.directory/contacts/basic/read Read basic properties on contacts in Azure Active Directory.
microsoft.aad.directory/contacts/memberOf/read Read contacts.memberOf property in Azure Active Directory.
microsoft.aad.directory/contracts/basic/read Read basic properties on contracts in Azure Active Directory.
microsoft.aad.directory/devices/basic/read Read basic properties on devices in Azure Active Directory.
microsoft.aad.directory/devices/memberOf/read Read devices.memberOf property in Azure Active Directory.
microsoft.aad.directory/devices/registeredOwners/read Read devices.registeredOwners property in Azure Active Directory.
microsoft.aad.directory/devices/registeredUsers/read Read devices.registeredUsers property in Azure Active Directory.
microsoft.aad.directory/directoryRoles/basic/read Read basic properties on directoryRoles in Azure Active Directory.
microsoft.aad.directory/directoryRoles/eligibleMembers/read Read directoryRoles.eligibleMembers property in Azure Active Directory.
microsoft.aad.directory/directoryRoles/members/read Read directoryRoles.members property in Azure Active Directory.
microsoft.aad.directory/domains/basic/read Read basic properties on domains in Azure Active Directory.
microsoft.aad.directory/groups/appRoleAssignments/read Read groups.appRoleAssignments property in Azure Active Directory.
microsoft.aad.directory/groups/basic/read Read basic properties on groups in Azure Active Directory.
microsoft.aad.directory/groups/memberOf/read Read groups.memberOf property in Azure Active Directory.
microsoft.aad.directory/groups/members/read Read groups.members property in Azure Active Directory.
microsoft.aad.directory/groups/owners/read Read groups.owners property in Azure Active Directory.
microsoft.aad.directory/groups/settings/read Read groups.settings property in Azure Active Directory.
microsoft.aad.directory/oAuth2PermissionGrants/basic/read Read basic properties on oAuth2PermissionGrants in Azure Active Directory.
microsoft.aad.directory/organization/basic/read Read basic properties on organization in Azure Active Directory.
microsoft.aad.directory/organization/trustedCAsForPasswordlessAuth/read Read organization.trustedCAsForPasswordlessAuth property in Azure Active Directory.
microsoft.aad.directory/roleAssignments/basic/read Read basic properties on roleAssignments in Azure Active Directory.
microsoft.aad.directory/roleDefinitions/basic/read Read basic properties on roleDefinitions in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/appRoleAssignedTo/read Read servicePrincipals.appRoleAssignedTo property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/appRoleAssignments/read Read servicePrincipals.appRoleAssignments property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/basic/read Read basic properties on servicePrincipals in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/memberOf/read Read servicePrincipals.memberOf property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/oAuth2PermissionGrants/basic/read Read servicePrincipals.oAuth2PermissionGrants property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/ownedObjects/read Read servicePrincipals.ownedObjects property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/owners/read Read servicePrincipals.owners property in Azure Active Directory.
microsoft.aad.directory/servicePrincipals/policies/read Read servicePrincipals.policies property in Azure Active Directory.
microsoft.aad.directory/subscribedSkus/basic/read Read basic properties on subscribedSkus in Azure Active Directory.
microsoft.aad.directory/users/appRoleAssignments/read Read users.appRoleAssignments property in Azure Active Directory.
microsoft.aad.directory/users/basic/read Read basic properties on users in Azure Active Directory.
microsoft.aad.directory/users/directReports/read Read users.directReports property in Azure Active Directory.
microsoft.aad.directory/users/manager/read Read users.manager property in Azure Active Directory.
microsoft.aad.directory/users/memberOf/read Read users.memberOf property in Azure Active Directory.
microsoft.aad.directory/users/oAuth2PermissionGrants/basic/read Read users.oAuth2PermissionGrants property in Azure Active Directory.
microsoft.aad.directory/users/ownedDevices/read Read users.ownedDevices property in Azure Active Directory.
microsoft.aad.directory/users/ownedObjects/read Read users.ownedObjects property in Azure Active Directory.
microsoft.aad.directory/users/registeredDevices/read Read users.registeredDevices property in Azure Active Directory.
Only used by Azure AD Connect service.
microsoft.aad.directory/organization/dirSync/update Update organization.dirSync property in Azure Active Directory.
microsoft.aad.directory/policies/create Create policies in Azure Active Directory.
microsoft.aad.directory/policies/delete Delete policies in Azure Active Directory.
microsoft.aad.directory/policies/basic/read Read basic properties on policies in Azure Active Directory.
microsoft.aad.directory/policies/basic/update Update basic properties on policies in Azure Active Directory.
microsoft.aad.directory/policies/owners/read Read policies.owners property in Azure Active Directory.
microsoft.aad.directory/policies/owners/update Update policies.owners property in Azure Active Directory.
microsoft.aad.directory/policies/policiesAppliedTo/read Read policies.policiesAppliedTo property in Azure Active Directory.
microsoft.aad.directory/policies/tenantDefault/update Update policies.tenantDefault property in Azure Active Directory.
Can read & write basic directory information. For granting access to applications, not intended for users.
microsoft.aad.directory/groups/create Create groups in Azure Active Directory.
microsoft.aad.directory/groups/createAsOwner Create groups in Azure Active Directory. Creator is added as the first owner, and the created object counts against the creator's 250 created objects quota.
microsoft.aad.directory/groups/appRoleAssignments/update Update groups.appRoleAssignments property in Azure Active Directory.
microsoft.aad.directory/groups/basic/update Update basic properties on groups in Azure Active Directory.
microsoft.aad.directory/groups/members/update Update groups.members property in Azure Active Directory.
microsoft.aad.directory/groups/owners/update Update groups.owners property in Azure Active Directory.
microsoft.aad.directory/groups/settings/update Update groups.settings property in Azure Active Directory.
microsoft.aad.directory/groupSettings/basic/update Update basic properties on groupSettings in Azure Active Directory.
microsoft.aad.directory/groupSettings/create Create groupSettings in Azure Active Directory.
microsoft.aad.directory/groupSettings/delete Delete groupSettings in Azure Active Directory.
microsoft.aad.directory/users/appRoleAssignments/update Update users.appRoleAssignments property in Azure Active Directory.
microsoft.aad.directory/users/assignLicense Manage licenses on users in Azure Active Directory.
microsoft.aad.directory/users/basic/update Update basic properties on users in Azure Active Directory.
microsoft.aad.directory/users/manager/update Update users.manager property in Azure Active Directory.
microsoft.aad.directory/users/userPrincipalName/update Update users.userPrincipalName property in Azure Active Directory.
Can manage all aspects of the Exchange product.
microsoft.aad.directory/groups/unified/appRoleAssignments/update Update groups.unified property in Azure Active Directory.
microsoft.aad.directory/groups/unified/basic/update Update basic properties of Office 365 Groups.
microsoft.aad.directory/groups/unified/create Create Office 365 Groups.
microsoft.aad.directory/groups/unified/delete Delete Office 365 Groups.
microsoft.aad.directory/groups/unified/members/update Update membership of Office 365 Groups.
microsoft.aad.directory/groups/unified/owners/update Update ownership of Office 365 Groups.
Can invite guest users independent of the 'members can invite guests' setting.
microsoft.aad.directory/users/inviteGuest Invite guest users in Azure Active Directory.
Can reset passwords for non-administrators and Helpdesk Administrators.
microsoft.aad.directory/users/password/update Update passwords for all users in Azure Active Directory. See online documentation for more detail.
Can manage all aspects of the Azure Information Protection product.
Can manage all aspects of the Intune product.
microsoft.aad.directory/contacts/basic/update Update basic properties on contacts in Azure Active Directory.
microsoft.aad.directory/contacts/create Create contacts in Azure Active Directory.
microsoft.aad.directory/contacts/delete Delete contacts in Azure Active Directory.
microsoft.aad.directory/devices/basic/update Update basic properties on devices in Azure Active Directory.
microsoft.aad.directory/devices/create Create devices in Azure Active Directory.
microsoft.aad.directory/devices/registeredOwners/update Update devices.registeredOwners property in Azure Active Directory.
microsoft.aad.directory/devices/registeredUsers/update Update devices.registeredUsers property in Azure Active Directory.
microsoft.aad.directory/groups/delete Delete groups in Azure Active Directory.
microsoft.aad.directory/groups/hiddenMembers/read Read groups.hiddenMembers property in Azure Active Directory.
microsoft.aad.directory/groups/restore Restore groups in Azure Active Directory.
Can manage product licenses on users and groups.
microsoft.aad.directory/users/usageLocation/update Update users.usageLocation property in Azure Active Directory.
Can manage all aspects of the Skype for Business product.
Can read messages and updates for their organization in Office 365 Message Center only.
Do not use - not intended for general use.
microsoft.aad.directory/users/delete Delete users in Azure Active Directory.
microsoft.aad.directory/users/restore Restore deleted users in Azure Active Directory.
microsoft.aad.directory/domains/allTasks Create and delete domains, and read and update standard properties in Azure Active Directory.
Can manage all aspects of the Power BI product.
Allowed to view, set and reset authentication method information for any user (admin or non-admin).
Can manage role assignments in Azure AD, and all aspects of Privileged Identity Management.
microsoft.aad.directory/directoryRoles/update Update directoryRoles in Azure Active Directory.
microsoft.aad.privilegedIdentityManagement/allEntities/allTasks Create and delete all resources, and read and update standard properties in microsoft.aad.privilegedIdentityManagement.
Can read sign-in and audit reports.
Can read security information and reports, and manage configuration in Azure AD and Office 365.
microsoft.aad.identityProtection/allEntities/read Read all resources in microsoft.aad.identityProtection.
microsoft.aad.identityProtection/allEntities/update Update all resources in microsoft.aad.identityProtection.
microsoft.office365.protectionCenter/allEntities/read Read all aspects of Office 365 Protection Center.
microsoft.office365.protectionCenter/allEntities/update Update all resources in microsoft.office365.protectionCenter.
Can read security information and reports in Azure AD and Office 365.
Can read service health information and manage support tickets.
Can manage all aspects of the SharePoint service.
Can manage calling and meetings features within the Microsoft Teams service.
Can troubleshoot communications issues within Teams using advanced tools.
Can troubleshoot communications issues within Teams using basic tools.
Can manage the Microsoft Teams service.
Can manage all aspects of users and groups, including resetting passwords for limited admins.
microsoft.aad.directory/users/create Create users in Azure Active Directory.
Role template IDs are used mainly by Graph API or PowerShell users.
The following roles should not be used. They have been deprecated and will be removed from Azure AD in the future.


We got a parking ticket this weekend.
Our permit lives loose on the dashboard, and in trying to stop it from flying out of the car I'd pushed it down – to the point where the expiry date couldn't be seen. So we got a parking ticket. It's the second time this has happened.
You can appeal, of course. So theoretically, it should just be a nuisance – not a problem. Even if we did have to pay it, we have the luxury of being able to afford it. Not everyone does.
The problem is, my brain doesn't work this way. When things like this crop up, my brain's reaction is not to go "ugh, that's so annoying!" and then carry on, or "oh well, it'll be fine". No, my brain does something very different.
Presented with the parking ticket, I had several reactions all at once: it is my fault; I am a terrible person; why does anyone even bother with me.
I completely shut down and became unable to do – well, anything, really. I couldn't even respond to the person right in front of me straight away. It seemed that all I was was the screaming litany of abuse in my head.
It's very easy to characterise anxiety disorders as just being nervous when doing certain things. But whilst that's certainly a part of it, in many ways it's not the worst part.
No, the worst part is that anxiety makes something moderately annoying turn into the Worst Thing That Has Ever Happened And Proof That You Are A Terrible Human Being.
This isn't hyperbole or humour. I spent fifteen minutes sitting on my bed gripped by the realisation that I had not only done something wrong, I had done something wrong and then done precisely the same thing again. I hadn't learned. I hadn't improved. I obviously wasn't worth anyone's time.
This is the pain of anxiety that you cannot properly articulate the gravity of to someone who hasn't experienced it. Because it's piercing and all-encompassing. It's everything that you are feeling pressing in on you, and none of those feelings are ones you want and very few of them are true.
Think of moments where you've been overwhelmed by an emotion. Getting terrible news, getting brilliant news, the sad bit of a film, the euphoria of your sports team winning. Think of that surge of emotion.
Now imagine that surge of emotion is the belief that you, and you alone, are a sorry excuse for a human being who is not worth anyone's time. That it would be better if you had never existed. That you should immediately leave all of the people around you because, surely, they cannot possibly want to be with you.
And you can't stop thinking it, even though you know it's wrong. That's what anxiety is. It's not just anxiety, either – there are plenty of mental health conditions which can be characterised by this kind of mind-numbing, paralysing panic.
Now add this into the mix: it can happen at any time. You can knock a mug off the table and feel like this because you broke it. You can be scrolling through Facebook and see the face of someone who hurt you and become overwhelmed. You can get a parking ticket because you pushed the permit half an inch too far down.
This is why we talk about anxiety being so draining. So exhausting. This is why if you are anxious and you're alone, it's so terrifying – because there is no one to help you break yourself out of that loop. You've got to do it all on your own, whilst believing that you're worthless and incapable of anything.
You can do it. It's not impossible. But it might be the hardest thing you ever do.
If you or someone you care about is experiencing anxiety like this, please get or support them to get help.


text:
Q: Should an adjective or adverb be used? "writing this haphazard" I am reading EB White's letters and encountered the following sentence:

I'm just writing this haphazard for no reason other than that I felt like awriting you a letter before going to bed.

I am wondering if he should have used haphazard or haphazardly in the above sentence. Why?

A: It may just be a mistake — this is a personal letter, written with haste and emotion, so it may not have been carefully edited.
But E. B. White was well-read, so he was probably using haphazard in the old way: before it was an adjective, it was a noun meaning "chance, accident". So he's calling his letter a haphazard, i.e. saying it was unplanned.
This usage is archaic now, and even native speakers no longer recognize it.
(Is "awriting" in the original, or is that a typo?)

A: The word 'haphazard' is an adjective, so it is supposed to modify noun after it.
But I think the writer means "I'm just writing this haphazard thing for no reason"
without mentioning the word 'thing'.
And yes, if you use haphazardly there, it will be correct as haphazardly is an adverb that will modify the action verb 'writing'.
Hope my opinion helps!


York Mailing (Holdings) Ltd had agreed terms to purchase the Letterbox Group, whose headquarters building was based on Whitehall Road in Leeds.
A Schedule of Condition to evidence the condition of the premises (including mechanical and electrical installations) was undertaken with strict confidentiality by GV during the time of the business acquisition. The Schedule also limited York Mailing's repairing and reinstatement obligation in the lease.
GV undertook the survey and procured the services of Mechanical and Electrical Engineers. The project was turned around in 1 1/2 weeks in line with the clients requirements.


For your security, please don't include personal account information in your communication.
Looking to contact Comenity Direct? Click here.
Thank you! Your inquiry has been sent.
Interested in doing business? Go to Business Inquiries.
Were you wondering? Wonder no more.


As far as I remember, WIZO has always been part of my surroundings. When I was a little girl, I looked at my mother with admiration whilst she was getting ready to attend the superb ball that was organized every year by the WIZO "EIN GEDI" branch in CREIL, the small town near Paris where I grew up.
How did you come to WIZO?
The EIF (Jewish Scouts of France) helped the WIZO branch of Creil to organize its various activities. We sold oranges from Israel, prepared baskets for Hanuka and were in charge of the cloakrooms at all WIZO gala evenings.
Since when have you been President of WIZO France ?
I have been President of the French Federation for 7 years, after having been chairperson of the WIZO EIN GEDI branch in Creteil for 6 years.
Can you describe your work ?
It is difficult for me to describe my job with precision. My position is more than work, it is a task. For me, this job is an honor and gives me immense satisfaction, but also gives me a lot of stress and sleepless nights!
Nevertheless, I am going to summarize in a few words my daily work in my capacity of President of WIZO France. My team (some volunteers and 3 workers) and I are working on every front to ensure the good functioning of the Federation. I am the one who decides the course of action and I try to coordinate it with all the branch chairpersons throughout France.
WIZO France has 40 branches and 3000 members. We also have a database with 10.000 supporters. As President, I have to be available, reachable and present for everyone.
I have a lot of telephone calls during the day, and a large number of emails concerning bank problems of certain branches or for maintaining contact and good relationship with our sponsors.
I also have to meet all the people who wish to submit a project to WIZO; it can be a show or an exhibition which we might include in our yearly activities. I must also meet all potential supporters. The list goes on and on!
At the same time, WIZO must maintain its relationship with all the other entities (Jewish and non-Jewish). This is another aspect of my work that requires me to represent the organization and which is very time consuming.
A large part of my work consists of REMOTIVATING my members. For, if on the paper the number of members is significant, the number of real activists is not so important. That is why we face true and worrying fundraising problems.
I am at the office every day from 10h00 to 18h00. The role of the President is undoubtedly to succeed the best she can in the fundraising field.
But, I think that it is true to say that to be President of a WIZO Federation, is more than a simple job, it is a way of life, a way of thinking. WIZO is always on my mind, every minute of the day.
First of all: regarding the work that has to be done to reach equality between men and women.
Secondly: the President must arouse Zionist behavior and promote the work of the Hasbara Department, especially with the French institutions and within the Jewish community as well. A WIZO President is somehow a representative of Israel in her country, an ambassador who can and should contribute to promote Israel's image within the non-Jewish community.
Could you give us a brief review on WIZO France history?
WIZO France's history is intimately linked to the history of the country. Founded in 1935, a few years later the organization faced war and anti-Semitism. WIZO worked underground and took part in the Resistance. WIZO rescued lives of Jewish children by organizing their transit into the free zone.
Since then, WIZO France has always been part of the French social landscape. WIZO France contributed to women's emancipation, for example promoting their right to vote.
Years later, WIZO France fought for the right of women to have abortions. For many years, Simone Veil has been sponsoring WIZO France and she initiated a wonderful project regarding abortion rights. The 'Veil Law' is an essential step toward the progress of the status of women.
I want to believe that Simone Veil was not a WIZO member by accident. WIZO's values, all the ideals that Rebecca Sieff stood for, were not strange to her.
Moreover, WIZO France initiated the first SOS telephone helpline for Jewish battered women. The NOA association (Naming, Daring, Acting) filled an important void in this field.
Which women do you admire in particular?
For me, all women are worthy of admiration. I feel a deep empathy for all women: those African or Syrian women, who go through circumcision, who are raped, and wear veils or burkas up to their eyes: all these women for whom, to breathe freely is even a struggle.
I am amazed by the energy of a mother who smiles and is always available when she comes to pick up her children after 10 hours of work and commuting. These women work a double day !
I am thunderstruck by the determination of all women activists, who fight for equality and fundamental rights for their sisters.
I applaud those who have had the courage to fight against sexual abuse and harassment at work and in their daily life.
Yes for me women are worthy of admiration, whether they are in darkness or light. A Simone Veil, a Marie Curie or a Golda Meir are indeed monuments but…… all women are amazing.
What is your relationship with Israel?
The feeling that I have for Israel is visceral.
First of all, a large part of my family lives in Israel; that is why I see the country with different eyes. I look at it with more attention, with more concern. Israel is another part of me, it is not only a nice place for vacation, it is a country where one can live. My relationship with the country is complex.
Being a Jew from North Africa, since my early childhood Israel has always been a presence in my life. My grand-mother, on my father's side, often spoke to us about Palestine. She was not referring to the Palestine of today but about the land where all Jews should live together one day.
Her message to us was : Palestine is the place for Jews.
I became Zionist when I was an adolescent. My relationship with Eretz Israel became more intellectual, more political, more emotional. At that time, I thought of Zionism as a concept which was linked more to the defense of the fundamental law of return rather than to making Aliya.
Today, my relationship with Israel is something else : it is a true relationship, almost a carnal and physical relationship. A few times a year I need to know that I will stay in Israel for some period of time. I miss the light of Jerusalem, like the air of the see, the sunset in Cesaree, and the Shuk Hacarmel shouting and perfumes. …Today and in spite of all the love that I have for France, it happens to me of thinking about Aliya.
What is the motto guiding your work?
Among the numerous sentences that are used or simply heard, one has become my motto: WIZO AND EVERYTHING IS POSSIBLE. For me, it means the fierce desire of doing, but it also means hope.
In your capacity as President of WIZO France, did you experience a strong moment in your work, a moment of which you were very proud?
Thinking of the work which we have done, I recall many wonderful moments. First of all, the inauguration of the Day Care Centre, Casa Mathilda, that completed the work started by Nathalie Cohen Beizermann and then the publication of the "Get" booklet.
But, I cannot forget all the pride that I feel when we light the Hanuka candles at the Hotel de Ville in Paris, a place which symbolizes all the values of the French Republic. Each time we are there, the Mayor of Paris or his first deputy congratulates and encourages us for our work, saying: "this wonderful organization of ZIONIST women".
I am very proud of our work.
In addition, the celebration of WIZO's 90th anniversary at the Blancs Manteaux Hall was for me an event that I won't ever forget. More than 1,000 people attended in the heart of Paris, in a neighborhood which commemorates the Jewish presence in this city. What a beautiful memory ! For me, it was truly a great moment!
What were the main events organized by WIZO France in 2014?
1. The exhibition "Women and the Olive Tree – from symbol to art". This function will be a first achievement for WIZO as an event that will be organized all over Europe. The exhibition that shows the work of more than 30 women on the symbolic theme of the olive tree - tree of life - the tree of peace – today the subject of dispute and friction - was a true challenge. When these artists, who are Israeli, Palestinian, Jewish, Moslem and Christian, took up the challenge, it became a crazy bet. But WIZO did it and I am terribly proud of it and so happy !
This exhibition opens hopeful horizons. In the present situation, it is a wonderful accomplishment that contributes to "our basic work and makes small steps toward PEACE"
For me it is the culmination of a dream: doing something together to change the world.
2. The second event, which is also very meaningful, was the lighting of the third candle of Hanuka at the Hotel de Ville together with the children of the WIZO Nachlat Yehuda Youth Village. It was a magnificent performance, so emotional !
That evening will remain engraved in the memory of the 250 guests who attended the function. It was so emotional and moving to be in the Hotel de Ville, a place symbolizing the history of the French Republic, and to see the performance of 35 children from Israel. No one remained indifferent when at the end of the evening, we sang the Hatikva.
Many personalities attended this event and showed their support for WIZO's work and values.
Mrs. Anne Hidalgo, Mayor of Paris, was represented by her deputy, Mr. Klugman, in charge of International Relations. M. Joel Mergui, President of the Consistoire, though he was in mourning, came to show his support to WIZO France. Mr. Meir Habib, deputy representing French citizens living abroad, was there to light the Hanuka candles, symbolizing the resistance and the miracle of the Jewish People. Baronne Ariane de Rothschild also attended. Like everyone, she was literally charmed by the performance of these gifted youngsters, full of life and energy.
I must express my sincere thanks to Prof. Rivka Lazovsky, Chairperson of the World WIZO Executive, who honored us by coming to the event and for being the kingpin of our remarkable organization.
Is this old saying regarding French Jews: "Jews are happy like God in France" indeed so far away and belonging to the past?
But there were the attacks at Toulouse and the Hypercacher at the Porte of Vincennes.
What do we have to think? Do we have to be scared? Do we have to think of leaving the country which is not anymore "the Sweet France"?
For me, I am not that concerned ... I am determined, I refuse to be scared and I won't leave!
It is true that, in some cities of France, to be Jewish has become difficult. It is true, that we, as French Jewish women, are facing rising fears. We are scared to leave our children in the school of the Republic, where they are not allowed to wear a kippa, where they will have to hide their Star of David and where they cannot talk about their Judaism. We are also scared to send our children to Jewish schools since they can be targeted!
It is unbearable to be constantly forced to explain that the word "Jewish" is not a "dirty word, an insult", that Zionism is not like barbarism. The inadequate work of some media and some teachers is terrible and dangerous. They practice shortcuts, short-sightedness, unfinished analysis of a "problem" of which they, too often, ignore the complexity.
And here is the problem, in the eyes of some others. For them, the citizen disappears behind the Jew. Yet, for years, I did not have to think about my inner link to Israel. I did not have to justify my behavior in the city. I was elected in my municipality, in the Republic, and never thought or had to think that I was Jewish, fulfilling my responsibilities toward my city. I have always acted as a citizen and even more in my capacity as President of a Zionist organization. What frightens me today is that it seems that this has become a problem. In the value that I have fought for, that I continue to consider as fundamental values of democracy and of the French Republic, there is SECULARISM. This state of mind enabled me to practice my Judaism, to share its values with others. That is what I would like to fight for, that is what I can fight for, that is what French Jewish citizens have the duty to fight for.
WIZO can and must contribute in defending these values. As women, we can convey, explain, discuss and fight! Yes, we can truly fight for the respect of people (which is a basic value of Judaism) so that this value becomes a reality, at our door, in our protests, in our meetings.
It is a fact that the feeling of insecurity is justified and that alas, we can see it in the media. Must we run away because of that? Is it conceivable to encourage an Aliya of fear?
If we have to be careful, for me, it seems unthinkable to give up, ever! And above all, we must support this evidence: France is not racist, France is not anti-Semitic.
Institutions, politicians, except from the nationalistic parties, are not racist. It is crucial to emphasize this. We must absolutely refuse dangerous shortcuts that rely on a recent and painful past of the history of our democracy in order to fuel the fears and generate anxiety.
We have to remember that France considers anti-Semitism as a crime and has provided legal tools to fight this plague. We have to use these tools, not to let anything slip through, be responsive and always be "on our guard" !
But, and this is our responsibility, and we must be able to do it: we have to remain active and vigilant and not allow any racist drift. This struggle is very important and we must not and cannot lose it.


This week Apple announced their latest update to OS X Mountain Lion, version 10.8.3. We highly recommend that Fusion users running Mountain Lion apply this update. Not only does it come with great new features, it also includes a fix for the graphics problem that could cause some virtual machines to unexpectedly crash on certain Macs.
To coincide with the release of OS X 10.8.3 we have released VMware Fusion 5.0.3. This includes a number of important bug fixes and minor improvements including better support for Office 2013, improved cursor performance in Unity mode and support for Boot Camp partitions on 3TB drives.
To update VMware Fusion 5 to version 5.0.3. click on: VMware Fusion Menu > Check for Updates… or click here!
This entry was posted in apple, fusion, Uncategorized, vmware, vmware_fusion on March 15, 2013 by Nicolas Rochard.