Merge pull request #275259 from JnHs/jh-cob-man2

further updates

Author: prmerger-automator[bot]

articles/copilot/manage-access.md

@@ -13,16 +13,18 @@ author: JnHs
 > [!NOTE]
 > We're currently in the process of rolling out Microsoft Copilot for Azure (preview) to all Azure tenants. We'll remove this note once the functionality is available to all users.
 
-Microsoft Copilot for Azure only has access to resources that the user has access to. It can only take actions that the user has permission to perform, and requires confirmation before making changes. Microsoft Copilot for Azure complies with all existing access management rules and protections such as Azure role-based access control (Azure RBAC), Privileged Identity Management, Azure Policy, and resource locks.
+By default, Copilot for Azure is available to all users in a tenant. However, [Global Administrators](/entra/identity/role-based-access-control/permissions-reference#global-administrator) can choose to limit access to Copilot for Azure for their organization. If you turn off access for your tenant, you can still grant access to specific Microsoft Entra users or groups.
 
-By default, Copilot for Azure is available to all users in a tenant. However, [Global Administrators](/entra/identity/role-based-access-control/permissions-reference#global-administrator) can choose to limit access to Copilot for Azure for their organization. If you turn access off for your tenant, you can still grant access to specific Microsoft Entra users or groups.
+As always, Microsoft Copilot for Azure only has access to resources that the user has access to. It can only take actions that the user has permission to perform, and requires confirmation before making changes. Copilot for Azure complies with all existing access management rules and protections such as Azure role-based access control (Azure RBAC), Privileged Identity Management, Azure Policy, and resource locks.
 
 [!INCLUDE [preview-note](includes/preview-note.md)]
 
 ## Limit user access to Microsoft Copilot for Azure
 
 To limit access to Microsoft Copilot for Azure for users in your tenant, any Global Administrator in that tenant can follow these steps.
 
+1. [Elevate your access](/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal#step-1-elevate-access-for-a-global-administrator) so that your Global Administrator account can manage all subscriptions in your tenant.
+
 1. In the Azure portal, search for **Copilot for Azure admin center** and select it.
 
 1. In **Copilot for Azure admin center**, under **Settings**, select **Access management**.
@@ -33,6 +35,8 @@ To limit access to Microsoft Copilot for Azure for users in your tenant, any Glo
 
 1. Assign the **Copilot for Azure User** role to specific users or groups. For detailed steps, see [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal).
 
+1. When you're finished, [remove your elevated access](/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal#step-2-remove-elevated-access).
+
 Global Administrators for a tenant can change the **Access management** selection at any time.
 
 > [!IMPORTANT]