Merge pull request #251662 from jenniferf-skc/steps2

JamesJBarnett · web-flow · commit 01c9c8241965 · 2023-09-15T11:14:00.000-07:00
Content refresh and Azure migration updates
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-add-remove-role-task.md b/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-add-remove-role-task.md
@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: ciem
 ms.workload: identity
 ms.topic: how-to
-ms.date: 06/16/2023
+ms.date: 09/13/2023
 ms.author: jfields
 ---
 
@@ -21,7 +21,7 @@ This article describes how you can add and remove roles and tasks for Microsoft
 
 ## View permissions
 
-1. On the Entra home page, select the **Remediation** tab, and then select the **Permissions** subtab.
+1. On the Permissions Management home page, select the **Remediation** tab, and then select the **Permissions** subtab.
 1. From the **Authorization System Type** dropdown, select **Azure** or **GCP**.
 1. From the **Authorization System** dropdown, select the accounts you want to access.
 1. From the **Search For** dropdown, select **Group**, **User**, or **APP**.
@@ -37,7 +37,7 @@ This article describes how you can add and remove roles and tasks for Microsoft
 
 ## Add a role
 
-1. On the Entra home page, select the **Remediation** tab, and then select the **Permissions** subtab.
+1. On the Permissions Management home page, select the **Remediation** tab, and then select the **Permissions** subtab.
 1. From the **Authorization System Type** dropdown, select **Azure** or **GCP**.
 1. From the **Authorization System** dropdown, select the accounts you want to access.
 1. From the **Search For** dropdown, select **Group**, **User**, or **APP/Service Account**, and then select **Apply**.
@@ -53,7 +53,7 @@ This article describes how you can add and remove roles and tasks for Microsoft
 
 ## Remove a role
 
-1. On the Entra home page, select the **Remediation** tab, and then select the **Permissions** subtab.
+1. On the Permissions Management home page, select the **Remediation** tab, and then select the **Permissions** subtab.
 1. From the **Authorization System Type** dropdown, select **Azure** or **GCP**.
 1. From the **Authorization System** dropdown, select the accounts you want to access.
 1. From the **Search For** dropdown, select **Group**, **User**, or **APP/Service Account**, and then select **Apply**.
@@ -85,7 +85,7 @@ This article describes how you can add and remove roles and tasks for Microsoft
 
 ## Remove a task
 
-1. On the Entra home page, select the **Remediation** tab, and then select the **Permissions** subtab.
+1. On the Permissions Management home page, select the **Remediation** tab, and then select the **Permissions** subtab.
 1. From the **Authorization System Type** dropdown, select **Azure** or **GCP**.
 1. From the **Authorization System** dropdown, select the accounts you want to access.
 1. From the **Search For** dropdown, select **Group**, **User**, or **APP/Service Account**, and then select **Apply**.
@@ -103,9 +103,4 @@ This article describes how you can add and remove roles and tasks for Microsoft
 
 
 - For information on how to view existing roles/policies, requests, and permissions, see [View roles/policies, requests, and permission in the Remediation dashboard](ui-remediation.md).
-- To view information about roles/policies, see [View information about roles/policies](how-to-view-role-policy.md).
-- For information on how to create a role/policy, see [Create a role/policy](how-to-create-role-policy.md).
-- For information on how to clone a role/policy, see [Clone a role/policy](how-to-clone-role-policy.md).
-- For information on how to delete a role/policy, see [Delete a role/policy](how-to-delete-role-policy.md).
-- For information on how to modify a role/policy, see [Modify a role/policy](how-to-modify-role-policy.md).
-- For information on how to attach and detach permissions for Amazon Web Services (AWS) identities, see [Attach and detach policies for AWS identities](how-to-attach-detach-permissions.md).
+- To view information about roles/policies, see [View information about roles/policies](how-to-view-role-policy.md).
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-add-remove-user-to-group.md b/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-add-remove-user-to-group.md
@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: ciem
 ms.workload: identity
 ms.topic: how-to
-ms.date: 06/16/2023
+ms.date: 09/14/2023
 ms.author: jfields
 ---
 
@@ -21,8 +21,8 @@ This article describes how you can add or remove a new user for a group in Permi
 
 ## Add a user
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/#home).
-1. From the Azure Active Directory tile, select **Go to Azure Active Directory**. 
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/#home) as a Global Administrator.
+1. Browse to **Microsoft Entra ID** > **Go to Azure Active Directory**. 
 1. From the navigation pane, select the **Groups** drop-down menu, then **All groups**.
 1. Select the group name for the group you want to add the user to.
 1. From the group's **Manage** menu, click **Members**.
@@ -37,8 +37,8 @@ This article describes how you can add or remove a new user for a group in Permi
 
 ## Remove a user
 
-1. Sign in to the Microsoft [Entra admin center](https://entra.microsoft.com/#home). 
-1. From the Azure Active Directory tile, select **Go to Azure Active Directory**. 
+1. Sign in to the Microsoft [Entra admin center](https://entra.microsoft.com/#home) as a Global Administrator. 
+1. Browse to **Microsoft Entra ID** > **Go to Azure Active Directory**. 
 1. From the navigation pane, select the **Groups** drop-down menu, then **All groups**.
 1. Select the group name for the group you want to remove the user from.
 1. From the groups **Manage** menu, click **Members**.
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-attach-detach-permissions.md b/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-attach-detach-permissions.md
@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: ciem
 ms.workload: identity
 ms.topic: how-to
-ms.date: 06/16/2023
+ms.date: 09/14/2023
 ms.author: jfields
 ---
 
@@ -67,12 +67,5 @@ This article describes how you can attach and detach permissions for users, role
 
 ## Next steps
 
-
-- To view existing roles/policies, requests, and permissions, see [View roles/policies, requests, and permission in the Remediation dashboard](ui-remediation.md).
-- To create a role/policy, see [Create a role/policy](how-to-create-role-policy.md).
-- To clone a role/policy, see [Clone a role/policy](how-to-clone-role-policy.md).
-- To delete a role/policy, see [Delete a role/policy](how-to-delete-role-policy.md).
-- To modify a role/policy, see [Modify a role/policy](how-to-modify-role-policy.md).
-- To view information about roles/policies, see [View information about roles/policies](how-to-view-role-policy.md).
 - To revoke high-risk and unused tasks or assign read-only status for Microsoft Azure and Google Cloud Platform (GCP) identities, see [Revoke high-risk and unused tasks or assign read-only status for Azure and GCP identities](how-to-revoke-task-readonly-status.md)
 To create or approve a request for permissions, see [Create or approve a request for permissions](how-to-create-approve-privilege-request.md).
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-audit-trail-results.md b/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-audit-trail-results.md
@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: ciem
 ms.workload: identity
 ms.topic: how-to
-ms.date: 06/16/2023
+ms.date: 09/14/2023
 ms.author: jfields
 ---
 
@@ -32,6 +32,4 @@ This article describes how you can generate an on-demand report from a query in
 
 ## Next steps
 
-- For information on how to view how users access information, see [Use queries to see how users access information](ui-audit-trail.md).
-- For information on how to filter and view user activity, see [Filter and query user activity](product-audit-trail.md).
-- For information on how to create a query,see [Create a custom query](how-to-create-custom-queries.md).
+- For information on how to view system reports, see [Generate and view a system report in Permissions Management](report-view-system-report.md)
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-clone-role-policy.md b/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-clone-role-policy.md
@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: ciem
 ms.workload: identity
 ms.topic: how-to
-ms.date: 06/16/2023
+ms.date: 09/14/2023
 ms.author: jfields
 ---
 
@@ -41,11 +41,4 @@ This article describes how you can use the **Remediation** dashboard in Microsof
 
 
 - To view existing roles/policies, requests, and permissions, see [View roles/policies, requests, and permission in the Remediation dashboard](ui-remediation.md).
-- To create a role/policy, see [Create a role/policy](how-to-create-role-policy.md).
-- To delete a role/policy, see [Delete a role/policy](how-to-delete-role-policy.md).
-- To modify a role/policy, see [Modify a role/policy](how-to-modify-role-policy.md).
-- To view information about roles/policies, see [View information about roles/policies](how-to-view-role-policy.md).
-- To attach and detach permissions for AWS identities, see [Attach and detach policies for AWS identities](how-to-attach-detach-permissions.md).
-- To revoke high-risk and unused tasks or assign read-only status for  Azure and GCP identities, see [Revoke high-risk and unused tasks or assign read-only status for Azure and GCP identities](how-to-revoke-task-readonly-status.md)
-- To create or approve a request for permissions, see [Create or approve a request for permissions](how-to-create-approve-privilege-request.md).
 - To view information about roles/policies, see [View information about roles/policies](how-to-view-role-policy.md)
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-create-alert-trigger.md b/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-create-alert-trigger.md
@@ -107,5 +107,3 @@ This article describes how you can create and view activity alerts and alert tri
 
 - For an overview on activity triggers, see [View information about activity triggers](ui-triggers.md).
 - For information on rule-based anomalies and anomaly triggers, see [Create and view rule-based anomalies and anomaly triggers](product-rule-based-anomalies.md).
-- For information on finding outliers in identity's behavior, see [Create and view statistical anomalies and anomaly triggers](product-statistical-anomalies.md).
-- For information on permission analytics triggers, see [Create and view permission analytics triggers](product-permission-analytics.md).
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-create-approve-privilege-request.md b/articles/active-directory/cloud-infrastructure-entitlement-management/how-to-create-approve-privilege-request.md
@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: ciem
 ms.workload: identity
 ms.topic: how-to
-ms.date: 06/16/2023
+ms.date: 09/15/2023
 ms.author: jfields
 ---
 
@@ -104,13 +104,6 @@ The **Remediation** dashboard has two privilege-on-demand (POD) workflows you ca
 
 ## Next steps
 
-
-- For information on how to view existing roles/policies, requests, and permissions, see [View roles/policies, requests, and permission in the Remediation dashboard](ui-remediation.md).
-- For information on how to create a role/policy, see [Create a role/policy](how-to-create-role-policy.md).
-- For information on how to clone a role/policy, see [Clone a role/policy](how-to-clone-role-policy.md).
-- For information on how to delete a role/policy, see [Delete a role/policy](how-to-delete-role-policy.md).
-- For information on how to modify a role/policy, see [Modify a role/policy](how-to-modify-role-policy.md).
-- To view information about roles/policies, see [View information about roles/policies](how-to-view-role-policy.md).
 - For information on how to attach and detach permissions for Amazon Web Services (AWS) identities, see [Attach and detach policies for AWS identities](how-to-attach-detach-permissions.md).
 - For information on how to add and remove roles and tasks for Microsoft Azure and Google Cloud Platform (GCP) identities, see [Add and remove roles and tasks for Azure and GCP identities](how-to-attach-detach-permissions.md).
 - For information on how to revoke high-risk and unused tasks or assign read-only status for Microsoft Azure and Google Cloud Platform (GCP) identities, see [Revoke high-risk and unused tasks or assign read-only status for Azure and GCP identities](how-to-revoke-task-readonly-status.md)
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/onboard-azure.md b/articles/active-directory/cloud-infrastructure-entitlement-management/onboard-azure.md
@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: ciem
 ms.workload: identity
 ms.topic: how-to
-ms.date: 08/24/2023
+ms.date: 09/15/2023
 ms.author: jfields
 ---
 
@@ -137,9 +137,4 @@ To view status of onboarding after saving the configuration:
 
 ## Next steps
 
-- For information on how to onboard an Amazon Web Services (AWS) account, see [Onboard an Amazon Web Services (AWS) account](onboard-aws.md).
-- For information on how to onboard a Google Cloud Platform (GCP) project, see [Onboard a Google Cloud Platform (GCP) project](onboard-gcp.md).
-- For information on how to enable or disable the controller after onboarding is complete, see [Enable or disable the controller](onboard-enable-controller-after-onboarding.md).
-- For information on how to add an account/subscription/project after onboarding is complete, see [Add an account/subscription/project after onboarding is complete](onboard-add-account-after-onboarding.md).
-- For an overview on Permissions Management, see [What's Microsoft Entra Permissions Management?](overview.md).
 - For information on how to start viewing information about your authorization system in Permissions Management, see [View key statistics and data about your authorization system](ui-dashboard.md).
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/onboard-enable-controller-after-onboarding.md b/articles/active-directory/cloud-infrastructure-entitlement-management/onboard-enable-controller-after-onboarding.md
@@ -104,7 +104,4 @@ You can enable or disable the controller in Azure at the Subscription level of y
 
 ## Next steps
 
-- For information on how to onboard an Amazon Web Services (AWS) account, see [Onboard an AWS account](onboard-aws.md).
-- For information on how to onboard a Microsoft Azure subscription, see [Onboard a Microsoft Azure subscription](onboard-azure.md).
-- For information on how to onboard a Google Cloud Platform (GCP) project, see [Onboard a GCP project](onboard-gcp.md).
 - For information on how to add an account/subscription/project after onboarding is complete, see [Add an account/subscription/project after onboarding is complete](onboard-add-account-after-onboarding.md).
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/onboard-enable-tenant.md b/articles/active-directory/cloud-infrastructure-entitlement-management/onboard-enable-tenant.md
@@ -66,5 +66,3 @@ Use the **Data Collectors** dashboard in Permissions Management to configure dat
 ## Next steps
 
 - For an overview of Permissions Management, see [What's Microsoft Entra Permissions Management?](overview.md)
-- For a list of frequently asked questions (FAQs) about Permissions Management, see [FAQs](faqs.md).
-- To start viewing information about your authorization system in Permissions Management, see [View key statistics and data about your authorization system](ui-dashboard.md).
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/onboard-gcp.md b/articles/active-directory/cloud-infrastructure-entitlement-management/onboard-gcp.md
@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: ciem
 ms.workload: identity
 ms.topic: how-to
-ms.date: 08/24/2023
+ms.date: 09/15/2023
 ms.author: jfields
 ---
 
@@ -17,7 +17,7 @@ ms.author: jfields
 This article describes how to onboard a Google Cloud Platform (GCP) project in Microsoft Entra Permissions Management.
 
 > [!NOTE]
-> A *global administrator* or *super admin* (an admin for all authorization system types) can perform the tasks in this article after the global administrator has initially completed the steps provided in [Enable Permissions Management on your Azure Active Directory tenant](onboard-enable-tenant.md).
+> You must have the Global Administrator role assignment to perform the tasks in this article.
 
 ## Explanation
 
@@ -141,7 +141,5 @@ The required commands to run in Google Cloud Shell are listed in the Manage Auth
 
 ## Next steps
 
-- To onboard an Amazon Web Services (AWS) account, see [Onboard an Amazon Web Services (AWS) account](onboard-aws.md).
-- To onboard a Microsoft Azure subscription, see [Onboard a Microsoft Azure subscription](onboard-azure.md).
 - To enable or disable the controller after onboarding is complete, see [Enable or disable the controller](onboard-enable-controller-after-onboarding.md).
 - To add an account/subscription/project after onboarding is complete, see [Add an account/subscription/project after onboarding is complete](onboard-add-account-after-onboarding.md).
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/overview.md b/articles/active-directory/cloud-infrastructure-entitlement-management/overview.md
@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: ciem
 ms.workload: identity
 ms.topic: overview
-ms.date: 06/16/2023
+ms.date: 09/15/2023
 ms.author: jfields
 ---
 
@@ -70,6 +70,6 @@ Once your organization has explored and implemented the discover, remediation an
 
 ## Next steps
 
-- Deepen your learning with the [Introduction to Microsoft Entra Permissions Management](https://go.microsoft.com/fwlink/?linkid=2240016) learn module. 
+- Deepen your learning with [Introduction to Microsoft Entra Permissions Management](https://go.microsoft.com/fwlink/?linkid=2240016) learn module. 
 - Sign up for a [45-day free trial](https://aka.ms/TryPermissionsManagement) of Permissions Management.
 - For a list of frequently asked questions (FAQs) about Permissions Management, see [FAQs](faqs.md).
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/permissions-management-quickstart-guide.md b/articles/active-directory/cloud-infrastructure-entitlement-management/permissions-management-quickstart-guide.md
@@ -40,7 +40,7 @@ If the above points are met, continue with:
 
 [Enable Microsoft Entra Permissions Management in your organization](onboard-enable-tenant.md)
 
-Ensure you're a *Global Administrator*. Learn more about [Permissions Management roles and permissions](product-roles-permissions.md). 
+Ensure you're a Global Administrator. Learn more about [Permissions Management roles and permissions](product-roles-permissions.md). 
 
  
 ## Step 2: Onboard your multicloud environment
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/permissions-management-trial-user-guide.md b/articles/active-directory/cloud-infrastructure-entitlement-management/permissions-management-trial-user-guide.md
@@ -1,5 +1,5 @@
 ---
-title: Trial User Guide - Microsoft Entra Permissions Management
+title: Trial User Guide - Microsoft Entra Permissions Management - OBSOLETE
 description: How to get started with your Microsoft Entra Permissions Management free trial
 services: active-directory
 author: jenniferf-skc
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/ui-remediation.md b/articles/active-directory/cloud-infrastructure-entitlement-management/ui-remediation.md
@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: ciem
 ms.workload: identity
 ms.topic: overview
-ms.date: 02/23/2022
+ms.date: 09/15/2023
 ms.author: jfields
 ---
 
@@ -223,14 +223,5 @@ The **Settings** subtab provides the following settings that you can use to make
 
 ## Next steps
 
-
 - For information on how to view existing roles/policies, requests, and permissions, see [View roles/policies, requests, and permission in the Remediation dashboard](ui-remediation.md).
-- For information on how to create a role/policy, see [Create a role/policy](how-to-create-role-policy.md).
-- For information on how to clone a role/policy, see [Clone a role/policy](how-to-clone-role-policy.md).
-- For information on how to delete a role/policy, see [Delete a role/policy](how-to-delete-role-policy.md).
-- For information on how to modify a role/policy, see Modify a role/policy](how-to-modify-role-policy.md).
-- To view information about roles/policies, see [View information about roles/policies](how-to-view-role-policy.md).
-- For information on how to attach and detach permissions for AWS identities, see [Attach and detach policies for AWS identities](how-to-attach-detach-permissions.md).
-- For information on how to revoke high-risk and unused tasks or assign read-only status for Azure and GCP identities, see [Revoke high-risk and unused tasks or assign read-only status for Azure and GCP identities](how-to-revoke-task-readonly-status.md)
-- For information on how to create or approve a request for permissions, see [Create or approve a request for permissions](how-to-create-approve-privilege-request.md).
-- For information on how to view information about roles/policies, see [View information about roles/policies](how-to-view-role-policy.md)
+- For information on how to create or approve a request for permissions, see [Create or approve a request for permissions](how-to-create-approve-privilege-request.md).
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/ui-triggers.md b/articles/active-directory/cloud-infrastructure-entitlement-management/ui-triggers.md
@@ -76,13 +76,8 @@ The **Alert Triggers** subtab in the **Activity**, **Rule-Based Anomaly**, **Sta
     - **Modified By**: The name of the user who modified the alert.
 
 
-
-
-
-
 ## Next steps
 
 - For information on activity alerts and alert triggers, see [Create and view activity alerts and alert triggers](how-to-create-alert-trigger.md).
 - For information on rule-based anomalies and anomaly triggers, see [Create and view rule-based anomalies and anomaly triggers](product-rule-based-anomalies.md).
-- For information on finding outliers in identity's behavior, see [Create and view statistical anomalies and anomaly triggers](product-statistical-anomalies.md).
 - For information on permission analytics triggers, see [Create and view permission analytics triggers](product-permission-analytics.md).
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/ui-user-management.md b/articles/active-directory/cloud-infrastructure-entitlement-management/ui-user-management.md
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-access-keys.md b/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-access-keys.md
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-active-resources.md b/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-active-resources.md
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-active-tasks.md b/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-active-tasks.md
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-groups.md b/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-groups.md
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-home.md b/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-home.md
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-serverless-functions.md b/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-serverless-functions.md
diff --git a/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-users.md b/articles/active-directory/cloud-infrastructure-entitlement-management/usage-analytics-users.md
