Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into rolyon-aadroles-understand-roles

Author: rolyon

articles/active-directory/saas-apps/recurly-tutorial.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: saas-app-tutorial
 ms.workload: identity
 ms.topic: tutorial
-ms.date: 02/08/2022
+ms.date: 04/21/2022
 ms.author: jeedes
 
 ---
@@ -140,7 +140,7 @@ Follow these steps to configure single sign-on for your **Recurly** site.
 
    a. In **PROVIDER NAME**, select **Azure**.
 
-   b. In the **SAML ISSUER ID** textbox, paste the **Identifier URL** value which you have copied from the Azure portal.
+   b. In the **SAML ISSUER ID** textbox, paste the **Application(Client ID)** value from the Azure portal.
 
    c. In the **LOGIN URL** textbox, paste the **Login URL** value which you have copied from the Azure portal.
 

articles/active-directory/saas-apps/talentlms-tutorial.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: saas-app-tutorial
 ms.workload: identity
 ms.topic: tutorial
-ms.date: 09/14/2021
+ms.date: 04/21/2022
 ms.author: jeedes
 ---
 # Tutorial: Azure AD SSO integration with TalentLMS
@@ -70,7 +70,7 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
 4. On the **Basic SAML Configuration** section, perform the following steps:
 
     a. In the **Identifier (Entity ID)** text box, type a URL using the following pattern:
-    `http://<tenant-name>.talentlms.com`
+    `<tenant-name>.talentlms.com`
 
     b. In the **Sign on URL** text box, type a URL using the following pattern:
     `https://<tenant-name>.TalentLMSapp.com`
@@ -187,4 +187,4 @@ In this section, you test your Azure AD single sign-on configuration with follow
 
 ## Next steps
 
-Once you configure TalentLMS you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Defender for Cloud Apps](/cloud-app-security/proxy-deployment-any-app).
+Once you configure TalentLMS you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Defender for Cloud Apps](/cloud-app-security/proxy-deployment-any-app).

articles/azure-app-configuration/howto-integrate-azure-managed-service-identity.md

@@ -84,11 +84,11 @@ The following steps describe how to assign the App Configuration Data Reader rol
 
 1. Select **Add** > **Add role assignment**.
 
-    ![Access control (IAM) page with Add role assignment menu open.](../../includes/role-based-access-control/media/add-role-assignment-menu-generic.png)
+    :::image type="content" source="../../includes/role-based-access-control/media/add-role-assignment-menu-generic.png" alt-text="Screenshot showing Access control (IAM) page with Add role assignment menu open.":::
 
 1. On the **Role** tab, select the **App Configuration Data Reader** role.
 
-    ![Add role assignment page with Role tab selected.](./media/add-role-assignment-role.png)
+    :::image type="content" source="../../includes/role-based-access-control/media/add-role-assignment-role-generic.png" alt-text="Screenshot showing Add role assignment page with Role tab selected.":::
 
 1. On the **Members** tab, select **Managed identity**, and then select **Select members**.
 

articles/azure-monitor/agents/data-collection-text-log.md

@@ -105,12 +105,6 @@ A [data collection endpoint (DCE)](../essentials/data-collection-endpoint-overvi
             },
             "location": {
                 "type": "string",
-                "defaultValue": "westus2",
-                "allowedValues": [
-                    "westus2",
-                    "eastus2",
-                    "eastus2euap"
-                ],
                 "metadata": {
                     "description": "Specifies the location in which to create the Data Collection Endpoint."
                 }
@@ -195,12 +189,6 @@ The [data collection rule (DCR)](../essentials/data-collection-rule-overview.md)
             },
             "location": {
                 "type": "string",
-            "defaultValue": "westus2",
-                "allowedValues": [
-                    "westus2",
-                    "eastus2",
-                    "eastus2euap"
-                ],
                 "metadata": {
                     "description": "Specifies the location in which to create the Data Collection Rule."
                 }
@@ -250,7 +238,7 @@ The [data collection rule (DCR)](../essentials/data-collection-rule-overview.md)
                         "logFiles   ": [
                             {
                                 "streams": [
-                                    "Custom-MyLogFileFormat "
+                                    "Custom-MyLogFileFormat"
                                 ],
                                 "filePatterns": [
                                     "C:\\JavaLogs\\*.log"
@@ -268,7 +256,7 @@ The [data collection rule (DCR)](../essentials/data-collection-rule-overview.md)
                                     "Custom-MyLogFileFormat" 
                                 ],
                                 "filePatterns": [
-                                    "/var/*.log"
+                                    "//var//*.log"
                                 ],
                                 "format": "text",
                                 "settings": {
@@ -327,12 +315,6 @@ The [data collection rule (DCR)](../essentials/data-collection-rule-overview.md)
             },
             "location": {
                 "type": "string",
-            "defaultValue": "westus2",
-                "allowedValues": [
-                    "westus2",
-                    "eastus2",
-                    "eastus2euap"
-                ],
                 "metadata": {
                     "description": "Specifies the location in which to create the Data Collection Rule."
                 }

articles/azure-monitor/azure-monitor-monitoring-reference.md

@@ -474,4 +474,4 @@ The following schemas are relevant to action groups, which are part of the notif
 ## See Also
 
 - See [Monitoring Azure Azure Monitor](monitor-azure-monitor.md) for a description of what Azure Monitor monitors in itself. 
-- See [Monitoring Azure resources with Azure Monitor](/azure/azure-monitor/insights/monitor-azure-resources) for details on monitoring Azure resources.
+- See [Monitoring Azure resources with Azure Monitor](/azure/azure-monitor/essentials/monitor-azure-resource) for details on monitoring Azure resources.

articles/azure-netapp-files/faq-smb.md

@@ -6,7 +6,7 @@ ms.workload: storage
 ms.topic: conceptual
 author: b-hchen
 ms.author: anfdocs
-ms.date: 04/06/2022
+ms.date: 04/21/2022
 ---
 # SMB FAQs for Azure NetApp Files
 
@@ -75,6 +75,22 @@ Azure NetApp Files supports [`CHANGE_NOTIFY` response](/openspecs/windows_protoc
 
 Azure NetApp Files also supports [`LOCK` response](/openspecs/windows_protocols/ms-smb2/e215700a-102c-450a-a598-7ec2a99cd82c). This response is for the client’s request that comes in the form of a [`LOCK` request](/openspecs/windows_protocols/ms-smb2/6178b960-48b6-4999-b589-669f88e9017d).  
 
+## What is the password rotation policy for the Active Directory machine account for SMB volumes?
+
+The Azure NetApp Files service has a policy that automatically updates the password on the Active Directory machine account that is created for SMB volumes. This policy has the following properties:   
+
+* Schedule interval: 4 weeks
+* Schedule randomization period: 120 minutes
+* Schedule: Sunday `@0100`
+
+To see  when the password was last updated on the Azure NetApp Files SMB machine account, check the `pwdLastSet` property on the computer account using the [Attribute Editor](create-volumes-dual-protocol.md#access-active-directory-attribute-editor) in the **Active Directory Users and Computers** utility:
+
+![Screenshot that shows the Active Directory Users and Computers utility](../media/azure-netapp-files/active-directory-users-computers-utility.png )
+
+>[!NOTE] 
+> Due to an interoperability issue with the [April 2022 Monthly Windows Update](
+https://support.microsoft.com/topic/april-12-2022-kb5012670-monthly-rollup-cae43d16-5b5d-43ea-9c52-9174177c6277), the policy that automatically updates the Active Directory machine account password for SMB volumes has been suspended until a fix is deployed.
+
 ## Next steps  
 
 - [FAQs about SMB performance for Azure NetApp Files](azure-netapp-files-smb-performance.md)

articles/azure-signalr/signalr-howto-authorize-application.md

@@ -72,13 +72,13 @@ The following steps describe how to assign a `SignalR App Server` role to a serv
 
 1. From the [Azure portal](https://portal.azure.com/), navigate to your SignalR resource.
 
-1. Select **Access Control (IAM)**.
+1. Select **Access control (IAM)**.
 
 1. Select **Add > Add role assignment**.
 
    :::image type="content" source="../../includes/role-based-access-control/media/add-role-assignment-menu-generic.png" alt-text="Screenshot that shows Access control (IAM) page with Add role assignment menu open.":::
 
-1. On the **Roles** tab, select **SignalR App Server**.
+1. On the **Role** tab, select **SignalR App Server**.
 
 1. On the **Members** tab, select **User, group, or service principal**, and then select **Select members**.
 

articles/azure-signalr/signalr-howto-authorize-managed-identity.md

@@ -52,16 +52,18 @@ The following steps describe how to assign a `SignalR App Server` role to a syst
 
 1. From the [Azure portal](https://portal.azure.com/), navigate to your SignalR resource.
 
-1. Select **Access Control (IAM)**.
+1. Select **Access control (IAM)**.
 
 1. Select **Add > Add role assignment**.
 
    :::image type="content" source="../../includes/role-based-access-control/media/add-role-assignment-menu-generic.png" alt-text="Screenshot that shows Access control (IAM) page with Add role assignment menu open.":::
 
-1. On the **Roles** tab, select **SignalR App Server**.
+1. On the **Role** tab, select **SignalR App Server**.
 
 1. On the **Members** tab, select **Managed identity**, and then select **Select members**.
 
+1. Select your Azure subscription.
+
 1. Select **System-assigned managed identity**, search for a virtual machine to which would you'd like to assign the role, and then select it.
 
 1. On the **Review + assign** tab, select **Review + assign** to assign the role.

articles/backup/backup-azure-vms-enhanced-policy.md

@@ -2,7 +2,7 @@
 title: Back up Azure VMs with Enhanced policy (in preview)
 description: Learn how to configure Enhanced policy to back up VMs.
 ms.topic: how-to
-ms.date: 03/25/2022
+ms.date: 04/12/2022
 ms.reviewer: geg
 author: v-amallick
 ms.service: backup
@@ -19,7 +19,7 @@ Azure Backup now supports _Enhanced policy_ that's needed to support new Azure o
 
 You must enable backup of Trusted Launch VM through enhanced policy only. Enhanced policy provides the following features:
 
-- Supports _Multiple Backups Per Day_. To enroll your subscription for this feature, write to us at [[email protected]](mailto:[email protected]).
+- Supports *Multiple Backups Per Day* (in preview).
 - Instant Restore tier is zonally redundant using Zone-redundant storage (ZRS) resiliency. See the [pricing details for Enhanced policy storage here](https://azure.microsoft.com/pricing/details/managed-disks/).
 
 :::image type="content" source="./media/backup-azure-vms-enhanced-policy/enhanced-backup-policy-settings.png" alt-text="Screenshot showing the enhanced backup policy options.":::
@@ -57,7 +57,7 @@ Follow these steps:
 
      With backup schedule set to **Hourly**, the default selection for start time is **8 AM**, schedule is **Every 4 hours**, and duration is **24 Hours**. Hourly backup has a minimum RPO of 4 hours and a maximum of 24 hours. You can set the backup schedule to 4, 6, 8, 12, and 24 hours respectively.
 
-     Note that Hourly backup frequency is in preview. To enroll your subscription for this feature, write to us at [[email protected]](mailto:[email protected]).
+     Note that Hourly backup frequency is in preview.
 
    - **Instant Restore**: You can set the retention of recovery snapshot from _1_ to _30_ days. The default value is set to _7_.
    - **Retention range**: Options for retention range are auto-selected based on backup frequency you choose. The default retention for daily, weekly, monthly, and yearly backup points are set to 180 days, 12 weeks, 60 months, and 10 years respectively. You can customize these values as required.

articles/backup/backup-support-matrix-iaas.md

@@ -2,7 +2,7 @@
 title: Support matrix for Azure VM backup
 description: Provides a summary of support settings and limitations when backing up Azure VMs with the Azure Backup service.
 ms.topic: conceptual
-ms.date: 02/18/2022
+ms.date: 04/12/2022
 ms.custom: references_regions 
 ms.reviewer: geg
 author: v-amallick
@@ -49,7 +49,7 @@ Monthly/yearly backup| Not supported when backing up with Azure VM extension. On
 Automatic clock adjustment | Not supported.<br/><br/> Azure Backup doesn't automatically adjust for daylight saving time changes when backing up a VM.<br/><br/>  Modify the policy manually as needed.
 [Security features for hybrid backup](./backup-azure-security-feature.md) |Disabling security features isn't supported.
 Back up the VM whose machine time is changed | Not supported.<br/><br/> If the machine time is changed to a future date-time after enabling backup for that VM, however even if the time change is reverted, successful backup isn't guaranteed.
-Multiple Backups Per Day   |  Supported, using _Enhanced policy_ (in preview). To enroll your subscription for this feature, write to us at [[email protected]](mailto:[email protected]).     <br><br>   For hourly backup, the minimum RPO is 4 hours and the maximum is 24 hours. You can set the backup schedule to 4, 6, 8, 12, and 24 hours respectively. Learn about how to [back up an Azure VM using Enhanced policy](backup-azure-vms-enhanced-policy.md).
+Multiple Backups Per Day    |  Supported (in preview), using *Enhanced policy* (in preview). <br><br>   For hourly backup, the minimum RPO is 4 hours and the maximum is 24 hours. You can set the backup schedule to 4, 6, 8, 12, and 24 hours respectively. Learn about how to [back up an Azure VM using Enhanced policy](backup-azure-vms-enhanced-policy.md).
 
 ## Operating system support (Windows)