Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into rolyon-aadroles-roles-limits-scope-link

Author: rolyon

articles/governance/management-groups/overview.md

@@ -1,7 +1,7 @@
 ---
 title: Organize your resources with management groups - Azure Governance
 description: Learn about the management groups, how their permissions work, and how to use them.
-ms.date: 01/03/2023
+ms.date: 01/24/2023
 ms.topic: overview
 author: timwarner-msft
 ms.author: timwarner
@@ -107,35 +107,6 @@ access and policies that other customers within the directory can't bypass. Anyt
 root will apply to the entire hierarchy, which includes all management groups, subscriptions,
 resource groups, and resources within that Azure AD tenant.
 
-## Trouble seeing all subscriptions
-
-A few directories that started using management groups early in the preview before June 25, 2018
-could see an issue where not all the subscriptions were within the hierarchy. The process to have
-all subscriptions in the hierarchy was put in place after a role or policy assignment was done on
-the root management group in the directory.
-
-### How to resolve the issue
-
-There are two options you can do to resolve this issue.
-
-- Remove all role and policy assignments from the root management group
-  - By removing any policy and role assignments from the root management group, the service
-    backfills all subscriptions into the hierarchy the next overnight cycle. This process is so
-    there's no accidental access given or policy assignment to all of the tenants subscriptions.
-  - The best way to do this process without impacting your services is to apply the role or policy
-    assignments one level below the root management group. Then you can remove all assignments from
-    the root scope.
-- Call the API directly to start the backfill process
-  - Any customer in the directory can call the _TenantBackfillStatusRequest_ or
-    _StartTenantBackfillRequest_ APIs. When the StartTenantBackfillRequest API is called, it kicks
-    off the initial setup process of moving all the subscriptions into the hierarchy. This process
-    also starts the enforcement of all new subscription to be a child of the root management group.
-    This process can be done without changing any assignments on the root level. By calling the API,
-    you're saying it's okay that any policy or access assignment on the root can be applied to all
-    subscriptions.
-
-If you have questions on this backfill process, contact: `[email protected]`
-
 ## Management group access
 
 Azure management groups support

articles/postgresql/flexible-server/concepts-data-encryption.md

@@ -4,7 +4,7 @@ description: Azure Database for PostgreSQL Flexible server data encryption with
 author: gennadNY
 ms.author: gennadyk
 ms.reviewer: maghan
-ms.date: 11/03/2022
+ms.date: 1/24/2023
 ms.service: postgresql
 ms.subservice: flexible-server
 ms.topic: conceptual
@@ -176,11 +176,11 @@ Follow the steps below to enable CMK while creating Postgres Flexible Server usi
 
 1. Provide required information on Basics and Networking tabs
 
-1. Navigate to Security(preview) tab. On the screen, provide Azure Active Directory (Azure AD)  identity that has access to the Key Vault and Key in Key Vault in the same region where you're creating this server
+1. Navigate to Security tab. On the screen, provide Azure Active Directory (Azure AD)  identity that has access to the Key Vault and Key in Key Vault in the same region where you're creating this server
 
 1. On Review Summary tab, make sure that you provided correct information in Security section and press Create button
 
-1. Once it's finished, you should be able to navigate to Data Encryption (preview) screen for the server and update identity or key if necessary
+1. Once it's finished, you should be able to navigate to Data Encryption  screen for the server and update identity or key if necessary
 
 
 ### CLI:
@@ -229,7 +229,7 @@ Follow the steps below to update CMK on CMK enabled Flexible Server using Azure
 
 1. Navigate to Azure Database for PostgreSQL - Flexible Server create a page via the Azure portal.
 
-1. Navigate to Data Encryption (preview) screen under Security tab
+1. Navigate to Data Encryption screen under Security tab
 
 1. Select different identity to connect to Azure Key Vault, remembering that this identity needs to have proper access rights to the Key Vault
 

articles/postgresql/flexible-server/how-to-connect-with-managed-identity.md

@@ -4,7 +4,7 @@ description: Learn about how to connect and authenticate using Managed Identity
 author: kabharati
 ms.author: kabharati
 ms.reviewer: maghan
-ms.date: 11/04/2022
+ms.date: 01/24/2023
 ms.service: postgresql
 ms.subservice: flexible-server
 ms.topic: how-to

articles/postgresql/flexible-server/how-to-create-server-customer-managed-key-portal.md

@@ -27,11 +27,11 @@ Follow the steps below to enable CMK while creating Postgres Flexible Server usi
 
 2. Provide required information on Basics and Networking tabs
 
-3. Navigate to Security(preview) tab. On the screen, provide Azure Active Directory (Azure AD)  identity that has access to the Key Vault and Key in Key Vault in the same region where you're creating this server
+3. Navigate to Security tab. On the screen, provide Azure Active Directory (Azure AD)  identity that has access to the Key Vault and Key in Key Vault in the same region where you're creating this server
 
 4. On Review Summary tab, make sure that you provided correct information in Security section and press Create button
 
-5. Once it's finished, you should be able to navigate to Data Encryption (preview) screen for the server and update identity or key if necessary
+5. Once it's finished, you should be able to navigate to Data Encryption  screen for the server and update identity or key if necessary
 
 ## Update Customer Managed Key on the CMK enabled Flexible Server
 
@@ -45,7 +45,7 @@ Follow the steps below to update CMK on CMK enabled Flexible Server using Azure
 
 1. Navigate to Azure Database for PostgreSQL - Flexible Server create a page via the Azure portal.
 
-2. Navigate to Data Encryption (preview) screen under Security tab
+2. Navigate to Data Encryption screen under Security tab
 
 3. Select different identity to connect to Azure Key Vault, remembering that this identity needs to have proper access rights to the Key Vault
 

articles/storage/files/understanding-billing.md

@@ -4,7 +4,7 @@ description: Learn how to interpret the provisioned and pay-as-you-go billing mo
 author: khdownie
 ms.service: storage
 ms.topic: conceptual
-ms.date: 06/16/2022
+ms.date: 01/24/2023
 ms.author: kendownie
 ms.subservice: files
 ---
@@ -73,6 +73,7 @@ Azure Files supports reservations (also referred to as *reserved instances*), wh
 - **Tier**: The tier of Azure Files for the Reservation. Reservations currently are available for the premium, hot, and cool tiers.
 - **Location**: The Azure region for the Reservation. Reservations are available in a subset of Azure regions.
 - **Redundancy**: The storage redundancy for the Reservation. Reservations are supported for all redundancies Azure Files supports, including LRS, ZRS, GRS, and GZRS.
+- **Billing frequency**: Indicates how often the account is billed for the Reservation. Options include *Monthly* or *Upfront*.
 
 Once you purchase a Reservation, it will automatically be consumed by your existing storage utilization. If you use more storage than you have reserved, you'll pay list price for the balance not covered by the Reservation. Transaction, bandwidth, data transfer, and metadata storage charges aren't included in the Reservation.