Merge pull request #281281 from davidsmatlak/ds-mg-updates-20240718

Fixes typo and product name

Author: prmerger-automator[bot]

articles/governance/management-groups/create-management-group-azure-cli.md

@@ -28,14 +28,14 @@ directory. You receive a notification when the process is complete. For more inf
   locally. To find the version, run `az --version`. If you need to install or upgrade, see
   [Install Azure CLI](/cli/azure/install-azure-cli).
 
-- Any Azure AD user in the tenant can create a management group without the management group write
+- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
   permission assigned to that user if
   [hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
   isn't enabled. This new management group becomes a child of the Root Management Group or the
   [default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
   and the creator is given an "Owner" role assignment. Management group service allows this ability
   so that role assignments aren't needed at the root level. No users have access to the Root
-  Management Group when it's created. To avoid the hurdle of finding the Azure AD Global Admins to
+  Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to
   start using management groups, we allow the creation of the initial management groups at the root
   level.
 

articles/governance/management-groups/create-management-group-dotnet.md

@@ -28,14 +28,14 @@ directory. You receive a notification when the process is complete. For more inf
   [Azure management libraries for .NET authentication](/dotnet/azure/sdk/authentication#mgmt-auth).
   Skip the step to install the .NET Core packages as we'll do that in the next steps.
 
-- Any Azure AD user in the tenant can create a management group without the management group write
+- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
   permission assigned to that user if
   [hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
   isn't enabled. This new management group becomes a child of the Root Management Group or the
   [default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
   and the creator is given an "Owner" role assignment. Management group service allows this ability
   so that role assignments aren't needed at the root level. No users have access to the Root
-  Management Group when it's created. To avoid the hurdle of finding the Azure AD Global Admins to
+  Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to
   start using management groups, we allow the creation of the initial management groups at the root
   level.
 

articles/governance/management-groups/create-management-group-go.md

@@ -29,14 +29,14 @@ directory. You receive a notification when the process is complete. For more inf
   [Azure management libraries for .NET authentication](/dotnet/azure/sdk/authentication#mgmt-auth).
   Skip the step to install the .NET Core packages as we'll do that in the next steps.
 
-- Any Azure AD user in the tenant can create a management group without the management group write
+- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
   permission assigned to that user if
   [hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
   isn't enabled. This new management group becomes a child of the Root Management Group or the
   [default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
   and the creator is given an "Owner" role assignment. Management group service allows this ability
   so that role assignments aren't needed at the root level. No users have access to the Root
-  Management Group when it's created. To avoid the hurdle of finding the Azure AD Global Admins to
+  Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to
   start using management groups, we allow the creation of the initial management groups at the root
   level.
 

articles/governance/management-groups/create-management-group-javascript.md

@@ -26,14 +26,14 @@ directory. You receive a notification when the process is complete. For more inf
 - Before you start, make sure that at least version 12 of [Node.js](https://nodejs.org/) is
   installed.
 
-- Any Azure AD user in the tenant can create a management group without the management group write
+- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
   permission assigned to that user if
   [hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
   isn't enabled. This new management group becomes a child of the Root Management Group or the
   [default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
   and the creator is given an "Owner" role assignment. Management group service allows this ability
   so that role assignments aren't needed at the root level. No users have access to the Root
-  Management Group when it's created. To avoid the hurdle of finding the Azure AD Global Admins to
+  Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to
   start using management groups, we allow the creation of the initial management groups at the root
   level.
 

articles/governance/management-groups/create-management-group-portal.md

@@ -23,14 +23,14 @@ directory. You receive a notification when the process is complete. For more inf
 - If you don't have an Azure subscription, create a [free](https://azure.microsoft.com/free/)
   account before you begin.
 
-- Any Azure AD user in the tenant can create a management group without the management group write
+- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
   permission assigned to that user if
   [hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
   isn't enabled. This new management group becomes a child of the Root Management Group or the
   [default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
   and the creator is given an "Owner" role assignment. Management group service allows this ability
   so that role assignments aren't needed at the root level. No users have access to the Root
-  Management Group when it's created. To avoid the hurdle of finding the Azure AD Global Admins to
+  Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to
   start using management groups, we allow the creation of the initial management groups at the root
   level.
 

articles/governance/management-groups/create-management-group-powershell.md

@@ -26,14 +26,14 @@ directory. You receive a notification when the process is complete. For more inf
 - Before you start, make sure that the latest version of Azure PowerShell is installed. See
   [Install Azure PowerShell module](/powershell/azure/install-azure-powershell) for detailed information.
 
-- Any Azure AD user in the tenant can create a management group without the management group write
+- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
   permission assigned to that user if
   [hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
   isn't enabled. This new management group becomes a child of the Root Management Group or the
   [default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
   and the creator is given an "Owner" role assignment. Management group service allows this ability
   so that role assignments aren't needed at the root level. No users have access to the Root
-  Management Group when it's created. To avoid the hurdle of finding the Azure AD Global Admins to
+  Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to
   start using management groups, we allow the creation of the initial management groups at the root
   level.
 

articles/governance/management-groups/create-management-group-python.md

@@ -23,14 +23,14 @@ directory. You receive a notification when the process is complete. For more inf
 - If you don't have an Azure subscription, create a [free](https://azure.microsoft.com/free/)
   account before you begin.
 
-- Any Azure AD user in the tenant can create a management group without the management group write
+- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
   permission assigned to that user if
   [hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
   isn't enabled. This new management group becomes a child of the Root Management Group or the
   [default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
   and the creator is given an "Owner" role assignment. Management group service allows this ability
   so that role assignments aren't needed at the root level. No users have access to the Root
-  Management Group when it's created. To avoid the hurdle of finding the Azure AD Global Admins to
+  Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to
   start using management groups, we allow the creation of the initial management groups at the root
   level.
 

articles/governance/management-groups/create-management-group-rest-api.md

@@ -28,14 +28,14 @@ directory. You receive a notification when the process is complete. For more inf
   [Invoke-RestMethod](/powershell/module/microsoft.powershell.utility/invoke-restmethod) or
   [Postman](https://www.postman.com).
 
-- Any Azure AD user in the tenant can create a management group without the management group write
+- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
   permission assigned to that user if
   [hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
   isn't enabled. This new management group becomes a child of the Root Management Group or the
   [default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
   and the creator is given an "Owner" role assignment. Management group service allows this ability
   so that role assignments aren't needed at the root level. No users have access to the Root
-  Management Group when it's created. To avoid the hurdle of finding the Azure AD Global Admins to
+  Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to
   start using management groups, we allow the creation of the initial management groups at the root
   level.
 

articles/governance/management-groups/overview.md

@@ -141,7 +141,7 @@ will inherit down the hierarchy like any built-in role. For information about th
 
 [Defining and creating a custom role](../../role-based-access-control/custom-roles.md) doesn't
 change with the inclusion of management groups. Use the full path to define the management group
-**/providers/Microsoft.Management/managementgroups/{_groupId_}**.
+`/providers/Microsoft.Management/managementgroups/{_groupId_}`.
 
 Use the management group's ID and not the management group's display name. This common error happens
 since both are custom-defined fields when creating a management group.
@@ -154,11 +154,11 @@ since both are custom-defined fields when creating a management group.
   "IsCustom": true,
   "Description": "This role provides members understand custom roles.",
   "Actions": [
-    "Microsoft.Management/managementgroups/delete",
-    "Microsoft.Management/managementgroups/read",
-    "Microsoft.Management/managementgroup/write",
-    "Microsoft.Management/managementgroup/subscriptions/delete",
-    "Microsoft.Management/managementgroup/subscriptions/write",
+    "Microsoft.Management/managementGroups/delete",
+    "Microsoft.Management/managementGroups/read",
+    "Microsoft.Management/managementGroups/write",
+    "Microsoft.Management/managementGroups/subscriptions/delete",
+    "Microsoft.Management/managementGroups/subscriptions/write",
     "Microsoft.resources/subscriptions/read",
     "Microsoft.Authorization/policyAssignments/*",
     "Microsoft.Authorization/policyDefinitions/*",