Update setup instructions in login_and_acl.md

docs/login_and_acl.md

@@ -68,18 +68,6 @@
     azd env set AZURE_USE_AUTHENTICATION true
     ```
 
-1. **Enable access control on your search index**
-
-    - **If the index does not exist yet:**
-      Run the `prepdocs` script.
-
-    - **If the index already exists:**
-      Execute this command to enable ACLs:
-
-      ```shell
-      python ./scripts/manageacl.py --acl-action enable_acls
-      ```
-
 1. (Optional) **Enforce access control**
   To ensure that the app restricts search results to only documents that the user has access to, run the following command:
 
@@ -117,6 +105,16 @@
     azd auth login --tenant-id <YOUR-TENANT-ID>
     ```
 
+1. **Enable access control on your search index (if it already exists)**
+
+    If your search index already exists, you need to enable access control on it:
+
+    ```shell
+    python ./scripts/manageacl.py --acl-action enable_acls
+    ```
+
+    If your index does not exist yet, access control will be automatically enabled when the index is created during deployment.
+
 1. **Deploy the app**
   Finally, run the following command to provision and deploy the app:
 
@@ -375,7 +373,7 @@
 The following table describes the impact of the `AZURE_USE_AUTHENTICATION` and `AZURE_ENFORCE_ACCESS_CONTROL` variables depending on the environment you are deploying the application in:
 
 | AZURE_USE_AUTHENTICATION | AZURE_ENFORCE_ACCESS_CONTROL | Environment | Default Behavior |
 |-|-|-|-|
 | True | False | App Services | Use integrated auth <br /> Login page blocks access to app <br /> User can opt-into access control in developer settings <br /> Allows unrestricted access to sources |
 | True | True | App Services | Use integrated auth <br /> Login page blocks access to app <br /> User must use access control |
 | True | False | Local or Codespaces | Do not use integrated auth <br /> Can use app without login <br /> User can opt-into access control in developer settings <br /> Allows unrestricted access to sources |