Merge pull request #1765 from MicrosoftDocs/main

11/29/2024 AM Publish

Author: Taojunshen

articles/search/search-get-started-rbac.md

@@ -7,26 +7,26 @@ ms.author: heidist
 ms.service: azure-ai-search
 
 ms.topic: quickstart
-ms.date: 11/28/2024
+ms.date: 11/29/2024
 ---
 
 # Quickstart: Connect without keys
 
-Configure Azure AI Search to use Microsoft Entra ID authentication and role-based access control (RBAC). Connect from your local system using your personal identity, using Jupyter notebooks or a REST client to interact with your search service.
+Configure Azure AI Search to use Microsoft Entra ID authentication and role-based access control (RBAC). Connect from your local system with your personal identity, using Jupyter notebooks or a REST client to interact with your search service.
 
 If you stepped through other quickstarts that connect using API keys, this quickstart shows you how to switch to identity-based authentication so that you can avoid hard-coded keys in your example code.
 
 ## Prerequisites
 
 - An Azure subscription. [Create one for free](https://azure.microsoft.com/free/).
 
-- [Azure AI Search](search-create-service-portal.md), any region or tier, but you need Basic or higher to configure a system-assigned managed identity for Azure AI Search.
+- [Azure AI Search](search-create-service-portal.md), any region or tier, but you need Basic or higher to configure a managed identity for Azure AI Search.
 
 - A command line tool, such as the [Azure CLI](/cli/azure/install-azure-cli).
 
 ## Step 1: Get your Azure subscription and tenant IDs
 
-This step is necessary if you have more than one subscription or tenant.
+You need this step if you have more than one subscription or tenant.
 
 1. Get the Azure subscription and tenant for your search service:
 
@@ -38,13 +38,13 @@ This step is necessary if you have more than one subscription or tenant.
 
       :::image type="content" source="media/search-get-started-rbac/select-subscription-name.png" lightbox="media/search-get-started-rbac/select-subscription-name.png" alt-text="Screenshot of the portal page providing the subscription name":::
 
-1. Switching to your local device and a command prompt, identify the active Azure subscription and tenant:
+1. You now know which subscription and tenant Azure AI Search is under. Switching to your local device and a command prompt, identify the active Azure subscription and tenant on your device:
 
    ```azurecli
    az account show
    ```
 
-1. If the active subscription is different from the information obtained in the previous step, change the subscription ID. Next, sign in to Azure using the tenant ID also found in the previous step:
+1. If the active subscription and tenant differ from the information obtained in the previous step, change the subscription ID. Next, sign in to Azure using the tenant ID also found in the previous step:
 
    ```azurecli
     az account set --subscription <your-subscription-id>
@@ -122,24 +122,33 @@ az login
 
 ### Using a REST client
 
-Several quickstarts and tutorials use a REST client, such as Visual Studio Code with the REST extension. Here's how you connect to Azure AI Search from Visual Studio Code.
+[Several quickstarts](search-get-started-vector.md) and tutorials use a REST client, such as Visual Studio Code with the REST extension. Here's how you connect to Azure AI Search from Visual Studio Code.
 
 1. Get a personal identity token:
 
-   `az account get-access-token --scope https://search.azure.com/.default`
+   ```azurecli
+   az account get-access-token --scope https://search.azure.com/.default
+   ```
+
+1. Set variables used for the connection, pasting the full search service endpoint and the token you got in the previous step.
+
+    ```http
+    @baseUrl = PUT-YOUR-SEARCH-SERVICE-URL-HERE
+    @token = PUT-YOUR-PERSONAL-IDENTITY-TOKEN-HERE
+    ```
 
-1. Extract the token from the output:
+<!-- 1. Extract the token from the output:
 
    `TOKEN=$(az account get-access-token --resource https://<your-search-service-name>.search.windows.net --query accessToken --output tsv)`
 
 1. Provide the token in a request header:
 
-   `az rest --method get --url "https://<your-search-service-name>.search.windows.net/indexes/<your-index-name>/docs?api-version=2021-04-30-Preview&search=*" --headers "Authorization=Bearer $TOKEN"`
+   `az rest --method get --url "https://<your-search-service-name>.search.windows.net/indexes/<your-index-name>/docs?api-version=2021-04-30-Preview&search=*" --headers "Authorization=Bearer $TOKEN"` -->
 
 1. Specify the authorization bearer token in a REST call:
 
    ```REST
-    POST https://{{baseUrl}}/indexes/{{index-name}}/docs/search?api-version=2024-07-01 HTTP/1.1
+    POST https://{{baseUrl}}/indexes/hotels-sample-index/docs/search?api-version=2024-07-01 HTTP/1.1
       Content-type: application/json
       Authorization: Bearer {{token}}