Merge pull request #257542 from dcurwin/wi-176795-add-permissions-nov6-2023

Permissions required

Author: prmerger-automator[bot]

articles/defender-for-cloud/data-aware-security-dashboard-overview.md

@@ -4,7 +4,7 @@ description: Learn about the capabilities and functions of the data-aware securi
 author: AlizaBernstein
 ms.author: v-bernsteina
 ms.topic: conceptual
-ms.date: 10/17/2023
+ms.date: 11/06/2023
 ---
 
 # Data security dashboard
@@ -25,20 +25,20 @@ You can select any element on the page to get more detailed information.
 |---------|---------|
 |Release state: | Public Preview |
 | Prerequisites: | Defender for CSPM fully enabled, including sensitive data discovery <br/> Workload protection for database and storage to explore active risks |
-| Required roles and permissions: | No other roles needed on top of what is required for the security explorer. |
+| Required roles and permissions: | No other roles needed aside from what is required for the security explorer. <br><br> To access the dashboard with more than 1000 subscriptions, you must have tenant-level permissions, which include one of the following roles: **Global Reader**, **Global Administrator**, **Security Administrator**, or **Security Reader**. |
 | Clouds: | :::image type="icon" source="./media/icons/yes-icon.png":::  Commercial clouds <br/> :::image type="icon" source="./media/icons/no-icon.png"::: Azure Government <br/> :::image type="icon" source="./media/icons/no-icon.png"::: Azure China 21Vianet |
 
 ## Prerequisites
 
-In order to view the dashboard, you must enable Defender CSPM and also enable the sensitive data discovery extensions button underneath.  In addition, to receive the alerts for data sensitivity, you must also enable the Defender for Storage plan.
+In order to view the dashboard, you must enable Defender CSPM and also enable the sensitive data discovery extension button underneath.  In addition, to receive the alerts for data sensitivity, you must also enable the Defender for Storage plan for storage related alerts or Defender for Databases for database related alerts.
 
 :::image type="content" source="media/data-aware-security-dashboard/select-sensitive-data-discovery.png" alt-text="Screenshot that shows where to turn on the sensitive data discovery extension." lightbox="media/data-aware-security-dashboard/select-sensitive-data-discovery.png":::
 
 The feature is turned on at the subscription level.
 
 ## Required permissions and roles
 
-- To view the dashboard you must have either one of the following scenarios:
+- To view the dashboard, you must have either one of the following scenarios:
 
   - **all of the following permissions**:
 
@@ -99,7 +99,7 @@ You can select the **Manage data sensitivity settings** to get to the **Data sen
 
 ### Data resources security status
 
-**Sensitive resources status over time** - displays how data security evolves over time with a graph that shows the number of sensitive resources affected by alerts, attack paths, and recommendations within a defined period (last 30, 14, or 7 days). 
+**Sensitive resources status over time** - displays how data security evolves over time with a graph that shows the number of sensitive resources affected by alerts, attack paths, and recommendations within a defined period (last 30, 14, or 7 days).
 
 :::image type="content" source="media/data-aware-security-dashboard/data-resources-security-status.png" alt-text="Screenshot that shows the data resources security status section of the data security view." lightbox="media/data-aware-security-dashboard/data-resources-security-status.png":::