Merge pull request #259905 from MicrosoftDocs/repo_sync_working_branch

Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-docs (branch main)

Author: Taojunshen

articles/aks/operator-best-practices-advanced-scheduler.md

@@ -160,8 +160,7 @@ spec:
         cpu: 4.0
         memory: 16Gi
   nodeSelector:
-      hardware:
-      values: highmem
+      hardware: highmem
 ```
 
 When you use these scheduler options, work with your application developers and owners to allow them to correctly define their pod specifications.
@@ -247,4 +246,4 @@ This article focused on advanced Kubernetes scheduler features. For more informa
 [aks-best-practices-isolation]: operator-best-practices-cluster-isolation.md
 [use-multiple-node-pools]: create-node-pools.md
 [taint-node-pool]: manage-node-pools.md#specify-a-taint-label-or-tag-for-a-node-pool
-[use-gpus-aks]: gpu-cluster.md
+[use-gpus-aks]: gpu-cluster.md

articles/backup/azure-kubernetes-service-cluster-manage-backups.md

@@ -130,10 +130,10 @@ To enable Trusted Access between Backup vault and AKS cluster, use the following
 
    ```azurecli-interactive
    az aks trustedaccess rolebinding create \
-   -g $myResourceGroup \ 
-   --cluster-name $myAKSCluster 
-   -n <randomRoleBindingName> \ 
-   --source-resource-id <vaultID> \ 
+   -g <aksclusterrg> \
+   --cluster-name <aksclustername> \
+   -n <randomRoleBindingName> \
+   --source-resource-id $(az dataprotection backup-vault show -g <vaultrg> -v <VaultName> --query id -o tsv) \
    --roles Microsoft.DataProtection/backupVaults/backup-operator   
    ```
 

articles/service-bus-messaging/compare-messaging-services.md

@@ -77,7 +77,7 @@ For more information, see [Service Bus overview](../service-bus-messaging/servic
 ## Use the services together
 In some cases, you use the services side by side to fulfill distinct roles. For example, an e-commerce site can use Service Bus to process the order, Event Hubs to capture site telemetry, and Event Grid to respond to events like an item was shipped.
 
-In other cases, you link them together to form an event and data pipeline. You use Event Grid to respond to events in the other services. For an example of using Event Grid with Event Hubs to migrate data to Azure Synapse Analytics, see [Stream big data into a Azure Synapse Analytics](../event-grid/event-hubs-integration.md). The following image shows the workflow for streaming the data.
+In other cases, you link them together to form an event and data pipeline. You use Event Grid to respond to events in the other services. For an example of using Event Grid with Event Hubs to migrate data to Azure Synapse Analytics, see [Stream big data into Azure Synapse Analytics](../event-grid/event-hubs-integration.md). The following image shows the workflow for streaming the data.
 
 :::image type="content" source="./media/compare-messaging-services/overview.svg" alt-text="Diagram showing how Event Hubs, Service Bus, and Event Grid can be connected together.":::
 

articles/site-recovery/site-recovery-runbook-automation.md

@@ -81,6 +81,10 @@ If you want to access all VMs in VMMap in a loop, you can use the following code
 
 
 ```powershell
+param (
+    [parameter(Mandatory=$false)]
+    [Object]$RecoveryPlanContext
+)
 $VMinfo = $RecoveryPlanContext.VmMap | Get-Member | Where-Object MemberType -EQ NoteProperty | select -ExpandProperty Name
 $vmMap = $RecoveryPlanContext.VmMap
     foreach($VMID in $VMinfo)

articles/virtual-network/manage-network-security-group.md

@@ -665,6 +665,9 @@ az network asg delete --resource-group myResourceGroup --name myASG
 
 To manage network security groups, security rules, and application security groups, your account must be assigned to the [Network contributor](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json#network-contributor) role. A [Custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json) can also be used that's assigned the appropriate permissions as listed in the following tables:
 
+> [!NOTE]
+> You might NOT see the full list of service tags if the Network Contributor role has been assigned at a Resource Group level. To view the full list, you can assign this role at a Subscription scope instead. If you can only allow Network Contributor for the Resource Group, you can then also create a custom role for the permissions "Microsoft.Network/locations/serviceTags/read" and "Microsoft.Network/locations/serviceTagDetails/read" and assign them at a Subscription scope along with the Network Contributor at Resource Group scope.
+
 ### Network security group
 
 | Action                                                        |   Name                                                                |