Verified updates

Author: flang-msft

articles/partner-solutions/dynatrace/dynatrace-create.md

@@ -1,10 +1,9 @@
 ---
 title: Create Azure Native Dynatrace Service resource
 description: This article describes how to use the Azure portal to create an instance of Dynatrace.
+
 ms.topic: quickstart
-author: flang-msft
-ms.author: franlanglois
-ms.date: 10/12/2022
+ms.date: 02/04/2023
 
 ---
 
@@ -17,7 +16,7 @@ When you use the integrated Dynatrace experience in Azure portal, the following
 :::image type="content" source="media/dynatrace-create/dynatrace-entities.png" alt-text="Flowchart showing three entities: Marketplace S A A S connecting to Dynatrace resource, connecting to Dynatrace environment.":::
 
 - **Dynatrace resource in Azure** - Using the Dynatrace resource, you can manage the Dynatrace environment in Azure. The resource is created in the Azure subscription and resource group that you select during the create process or linking process.
-- **Dynatrace environment** - This is the Dynatrace environment on Dynatrace _Software as a Service_ (SaaS). When you create a new environment, the environment on Dynatrace SaaS is automatically created, in addition to the Dynatrace resource in Azure.
+- **Dynatrace environment** - The Dynatrace environment on Dynatrace _Software as a Service_ (SaaS). When you create a new environment, the environment on Dynatrace SaaS is automatically created, in addition to the Dynatrace resource in Azure.
 - **Marketplace SaaS resource** - The SaaS resource is created automatically, based on the plan you select from the Dynatrace Marketplace offer. This resource is used for billing purposes.
 
 ## Prerequisites
@@ -57,52 +56,57 @@ Use the Azure portal to find Azure Native Dynatrace Service application.
 
     | **Property** |   **Description** |
     |--------------|-------------------|
-    | Subscription | Select the Azure subscription you want to use for creating the Dynatrace resource. You must have owner or contributor access.|
-    | Resource group | Specify whether you want to create a new resource group or use an existing one. A [resource group](../../azure-resource-manager/management/overview.md) is a container that holds related resources for an Azure solution. |
-    | Resource name   | Specify a name for the Dynatrace resource. This name will be the friendly name of the new Dynatrace environment.|
-    | Location        | Select the region. Select the region where the Dynatrace resource in Azure and the Dynatrace environment is created.|
-    | Pricing plan    | Select from the list of available plans. |
+    | **Subscription** | Select the Azure subscription you want to use for creating the Dynatrace resource. You must have owner or contributor access.|
+    | **Resource group** | Specify whether you want to create a new resource group or use an existing one. A [resource group](../../azure-resource-manager/management/overview.md) is a container that holds related resources for an Azure solution. |
+    | **Resource name**  | Specify a name for the Dynatrace resource. This name will be the friendly name of the new Dynatrace environment.|
+    | **Location**        | Select the region. Select the region where the Dynatrace resource in Azure and the Dynatrace environment is created.|
+    | **Pricing plan**   | Select from the list of available plans. |
 
 ### Configure metrics and logs
 
-1. Your next step is to configure metrics and logs for your resources. Azure Native Dynatrace Service supports the metrics for compute (such as VMs, App Services etc.) and non-compute resources.
+1. Your next step is to configure metrics and logs for your resources. Azure Native Dynatrace Service supports the metrics for both compute and non-compute resources. Compute resources include VMs, app services and more.
 
     :::image type="content" source="media/dynatrace-create/dynatrace-metrics-and-logs.png" alt-text="Screenshot showing options for metrics and logs.":::
 
-    - **Metrics for compute resources** – Users can send metrics for the compute resources (Virtual machines and App services) by installing the Dynatrace OneAgent as extensions on the compute resources after the Dynatrace resource has been created.
-    - **Metrics for non-compute resources** – These metrics can be collected by configuring the Dynatrace resource to automatically query Azure monitor for metrics. To enable metrics collection, click the checkbox. If you have an **owner access** in your subscription, then you can enable/disable the metrics collection using the checkbox and proceed to the configuring logs. However, if you have a contributor access then please use the information in the following step.
+   - **Metrics for compute resources** – Users can send metrics for the compute resources, virtual machines and app services, by installing the Dynatrace OneAgent extension on the compute resources after the Dynatrace resource has been created.
+   - **Metrics for non-compute resources** – These metrics can be collected by configuring the Dynatrace resource to automatically query Azure monitor for metrics. To enable metrics collection, select the checkbox. If you have an **owner access** in your subscription, you can enable and disable the metrics collection using the checkbox. Proceed to the configuring logs. However, if you have contributor access, use the information in the following step.
 
-2. **Contributor guide** - If you have a contributor role in the subscription, then you would not see the option to enable metrics collection because in Azure, a contributor cannot assign a ‘monitoring reader’ role to a resource which is required by the metrics crawler to collect metrics. 
+1.  If you have a _contributor role_ in the subscription, you don't see the option to enable metrics collection because in Azure a contributor can't assign a _monitoring reader_ role to a resource that is required by the metrics crawler to collect metrics. 
 
   :::image type="content" source="media/dynatrace-create/dynatrace-contributor-UI.png" alt-text="Screenshot showing contributor view of metrics and logs.":::
 
   Complete the resource provisioning excluding the metrics configuration and ask an owner to assign an appropriate role manually to your resource.
 
-   - **Owner’s guide to manage contributor access** - The owner can take the following steps to grant a monitoring reader identity to a contributor user:
-        - Go to the resource created by a contributor.
-        - Go to Access control on the left blade and click on ‘+ Add’ and ‘add role assignment.’
-        - Click on ‘Monitoring reader’ in the list of roles and then click on Next.
-        - Click on assign access to managed identity then select members.
-        - Select the subscription, managed identity (Dynatrace) and the Dynatrace resource created by the contributor.
-        - Review + assign
-
- :::image type="content" source="media/dynatrace-create/dynatrace-contributor-guide-1.png" alt-text="Screenshot showing the access control page.":::
+1. If you have an _owner role_ in the subscription, you can take the following steps to grant a monitoring reader identity to a contributor user:
+
+   1. Go to the resource created by a contributor.
 
- :::image type="content" source="media/dynatrace-create/dynatrace-contributor-guide-2.png" alt-text="Screenshot showing the process for selecting Monitoring reader role.":::
-  
- :::image type="content" source="media/dynatrace-create/dynatrace-contributor-guide-3.png" alt-text="Screenshot showing the process to assign a role to a managed identity.":::
-   
-3. When creating the Dynatrace resource, you can set up automatic log forwarding for three types of logs:
+   1. Go to **Access control** in the resource menu on the left and select **Add** then **Add role assignment**.
+         :::image type="content" source="media/dynatrace-create/dynatrace-contributor-guide-1.png" alt-text="Screenshot showing the access control page.":::
+
+   1. In the list, scroll down and select on **Monitoring reader**. Then, select **Next**.
+    :::image type="content" source="media/dynatrace-create/dynatrace-contributor-guide-2.png" alt-text="Screenshot showing the process for selecting Monitoring reader role.":::     
+
+   1. In **Assign access to**, select **Managed identity**.  Then, **Select members**.
+         :::image type="content" source="media/dynatrace-create/dynatrace-contributor-guide-3.png" alt-text="Screenshot showing the process to assign a role to a managed identity":::
+
+   1. Select the **Subscription**. In **Managed identity**, select **Dynatrace** and the Dynatrace resource created by the contributor. After you select the resource, use **Select** to continue.
+          :::image type="content" source="media/dynatrace-create/dynatrace-contributor-select.png" alt-text="Screenshot showing the Dynatrace resource with a new contributor selected.":::
+
+   1. When you have completed the selection, select **Review + assign**
+           :::image type="content" source="media/dynatrace-create/dynatrace-review-and-assign.png" alt-text="Screenshot showing Add role assignment working pane with Review and assign with a red box around it.":::
+
+1. When creating the Dynatrace resource, you can set up automatic log forwarding for three types of logs:
 
-    - **Subscription activity logs** - These logs provide insight into the operations on your resources at the [control plane](../../azure-resource-manager/management/control-plane-and-data-plane.md). Updates on service-health events are also included. Use the activity log to determine the what, who, and when for any write operations (PUT, POST, DELETE). There's a single activity log for each Azure subscription.
+   - **Subscription activity logs** - These logs provide insight into the operations on your resources at the [control plane](/azure/azure-resource-manager/management/control-plane-and-data-plane). Updates on service-health events are also included. Use the activity log to determine the what, who, and when for any write operations (PUT, POST, DELETE). There's a single activity log for each Azure subscription.
 
-    - **Azure resource logs** - These logs provide insight into operations that were taken on an Azure resource at the [data plane](../../azure-resource-manager/management/control-plane-and-data-plane.md). For example, getting a secret from a Key Vault is a data plane operation. Or, making a request to a database is also a data plane operation. The content of resource logs varies by the Azure service and resource type.
+   - **Azure resource logs** - These logs provide insight into operations that were taken on an Azure resource at the [data plane](/azure/azure-resource-manager/management/control-plane-and-data-plane). For example, getting a secret from a Key Vault is a data plane operation. Or, making a request to a database is also a data plane operation. The content of resource logs varies by the Azure service and resource type.
 
-    - **Azure   Active Directory logs** – The global administrator or Security Administrator for your Azure AD tenant can enable AAD logs so that you can route the audit, sign-in, and provisioning logs to Dynatrace. The details are listed in [Azure AD activity logs in Azure Monitor](../../active-directory/reports-monitoring/concept-activity-logs-azure-monitor.md).
+   - **Azure Active Directory logs** – The global administrator or security administrator for your Azure Active Directory (AAD) tenant can enable AAD logs so that you can route the audit, sign-in, and provisioning logs to Dynatrace. The details are listed in [Azure AD activity logs in Azure Monitor](../../active-directory/reports-monitoring/concept-activity-logs-azure-monitor.md).
 
 1. To send subscription level logs to Dynatrace, select **Send subscription activity logs**. If this option is left unchecked, none of the subscription level logs are sent to Dynatrace.
 
-1. To send Azure resource logs to Dynatrace, select **Send Azure resource logs for all defined resources**. The types of Azure resource logs are listed in [Azure Monitor Resource Log categories](../../azure-monitor/essentials/resource-logs-categories.md).
+1. To send Azure resource logs to Dynatrace, select **Send Azure resource logs for all defined resources**. The types of Azure resource logs are listed in [Azure Monitor Resource Log categories](/azure/azure-monitor/essentials/resource-logs-categories).
 
    When the checkbox for Azure resource logs is selected, by default, logs are forwarded for all resources. To filter the set of Azure resources sending logs to Dynatrace, use inclusion and exclusion rules and set the Azure resource tags: