Merge pull request #208770 from inward-eye/main

restructured naming

Author: ttorble

articles/purview/how-to-enable-data-use-management.md

@@ -1,5 +1,5 @@
 ---
-title: Enabling Data Use Management on your Microsoft Purview sources
+title: Enabling Data use management on your Microsoft Purview sources
 description: Step-by-step guide on how to enable data use access for your registered sources.
 author: inward-eye
 ms.author: vlrodrig
@@ -10,11 +10,11 @@ ms.date: 8/10/2022
 ms.custom:
 ---
 
-# Enable Data Use Management on your Microsoft Purview sources
+# Enable Data use management on your Microsoft Purview sources
 
 [!INCLUDE [feature-in-preview](includes/feature-in-preview.md)]
 
-*Data Use Management* (DUM) is an option within the data source registration in Microsoft Purview. This option lets Microsoft Purview manage data access for your resources. The high level concept is that the data owner allows its data resource to be available for access policies by enabling *DUM*. 
+*Data use management* (DUM) is an option within the data source registration in Microsoft Purview. This option lets Microsoft Purview manage data access for your resources. The high level concept is that the data owner allows its data resource to be available for access policies by enabling *DUM*. 
 
 Currently, a data owner can enable DUM on a data resource for these types of access policies:
 
@@ -24,68 +24,68 @@ Currently, a data owner can enable DUM on a data resource for these types of acc
 To be able to create any data policy on a resource, DUM must first be enabled on that resource. This article will explain how to enable DUM on your resources in Microsoft Purview.
 
 >[!IMPORTANT]
->Because Data Use Management directly affects access to your data, it directly affects your data security. Review [**additional considerations**](#additional-considerations-related-to-data-use-management) and [**best practices**](#data-use-management-best-practices) below before enabling DUM in your environment.
+>Because Data use management directly affects access to your data, it directly affects your data security. Review [**additional considerations**](#additional-considerations-related-to-data-use-management) and [**best practices**](#data-use-management-best-practices) below before enabling DUM in your environment.
 
 ## Prerequisites
 [!INCLUDE [Access policies generic configuration](./includes/access-policies-configuration-generic.md)]
 
-## Enable Data Use Management
+## Enable Data use management
 
-To enable *Data Use Management* for a resource, the resource will first need to be registered in Microsoft Purview.
+To enable *Data use management* for a resource, the resource will first need to be registered in Microsoft Purview.
 To register a resource, follow the **Prerequisites** and **Register** sections of the [source pages](azure-purview-connector-overview.md) for your resources.
 
-Once you have your resource registered, follow the rest of the steps to enable an individual resource for *Data Use Management*.
+Once you have your resource registered, follow the rest of the steps to enable an individual resource for *Data use management*.
 
 1. Go to the [Microsoft Purview governance portal](https://web.purview.azure.com/resource/).
 
 1. Select the **Data map** tab in the left menu.
 
 1. Select the **Sources** tab in the left menu.
 
-1. Select the source where you want to enable *Data Use Management*.
+1. Select the source where you want to enable *Data use management*.
 
 1. At the top of the source page, select **Edit source**.
 
-1. Set the *Data Use Management* toggle to **Enabled**, as shown in the image below.
+1. Set the *Data use management* toggle to **Enabled**, as shown in the image below.
 
-:::image type="content" source="./media/tutorial-data-owner-policies-storage/register-data-source-for-policy-storage.png" alt-text="Set Data Use Management toggle to **Enabled** at the bottom of the menu.":::
+:::image type="content" source="./media/tutorial-data-owner-policies-storage/register-data-source-for-policy-storage.png" alt-text="Set Data use management toggle to **Enabled** at the bottom of the menu.":::
 
-## Disable Data Use Management
+## Disable Data use management
 
-To disable Data Use Management for a source, resource group, or subscription, a user needs to either be a resource IAM **Owner** or a Microsoft Purview **Data source admin**. Once you have those permissions follow these steps:
+To disable Data use management for a source, resource group, or subscription, a user needs to either be a resource IAM **Owner** or a Microsoft Purview **Data source admin**. Once you have those permissions follow these steps:
 
 1. Go to the [Microsoft Purview governance portal](https://web.purview.azure.com/resource/).
 
 1. Select the **Data map** tab in the left menu.
 
 1. Select the **Sources** tab in the left menu.
 
-1. Select the source you want to disable Data Use Management for.
+1. Select the source you want to disable Data use management for.
 
 1. At the top of the source page, select **Edit source**.
 
-1. Set the **Data Use Management** toggle to **Disabled**.
+1. Set the **Data use management** toggle to **Disabled**.
 
-## Additional considerations related to Data Use Management
+## Additional considerations related to Data use management
 - Make sure you write down the **Name** you use when registering in Microsoft Purview. You will need it when you publish a policy. The recommended practice is to make the registered name exactly the same as the endpoint name.
-- To disable a source for *Data Use Management*, remove it first from being bound (i.e. published) in any policy.
-- While user needs to have both data source *Owner* and Microsoft Purview *Data source admin* to enable a source for *Data Use Management*, either of those roles can independently disable it.
-- Disabling *Data Use Management* for a subscription will disable it also for all assets registered in that subscription.
+- To disable a source for *Data use management*, remove it first from being bound (i.e. published) in any policy.
+- While user needs to have both data source *Owner* and Microsoft Purview *Data source admin* to enable a source for *Data use management*, either of those roles can independently disable it.
+- Disabling *Data use management* for a subscription will disable it also for all assets registered in that subscription.
 
 > [!WARNING]
 > **Known issues** related to source registration
 > - Moving data sources to a different resource group or subscription is not supported. If want to do that, de-register the data source in Microsoft Purview before moving it and then register it again after that happens. Note that policies are bound to the data source ARM path. Changing the data source subscription or resource group makes policies ineffective.
-> - Once a subscription gets disabled for *Data Use Management* any underlying assets that are enabled for *Data Use Management* will be disabled, which is the right behavior. However, policy statements based on those assets will still be allowed after that.
+> - Once a subscription gets disabled for *Data use management* any underlying assets that are enabled for *Data use management* will be disabled, which is the right behavior. However, policy statements based on those assets will still be allowed after that.
 
-## Data Use Management best practices
-- We highly encourage registering data sources for *Data Use Management* and managing all associated access policies in a single Microsoft Purview account.
-- Should you have multiple Microsoft Purview accounts, be aware that **all** data sources belonging to a subscription must be registered for *Data Use Management* in a single Microsoft Purview account. That Microsoft Purview account can be in any subscription in the tenant. The *Data Use Management* toggle will become greyed out when there are invalid configurations. Some examples of valid and invalid configurations follow in the diagram below:
+## Data use management best practices
+- We highly encourage registering data sources for *Data use management* and managing all associated access policies in a single Microsoft Purview account.
+- Should you have multiple Microsoft Purview accounts, be aware that **all** data sources belonging to a subscription must be registered for *Data use management* in a single Microsoft Purview account. That Microsoft Purview account can be in any subscription in the tenant. The *Data use management* toggle will become greyed out when there are invalid configurations. Some examples of valid and invalid configurations follow in the diagram below:
     - **Case 1** shows a valid configuration where a Storage account is registered in a Microsoft Purview account in the same subscription.
     - **Case 2** shows a valid configuration where a Storage account is registered in a Microsoft Purview account in a different subscription. 
-    - **Case 3** shows an invalid configuration arising because Storage accounts S3SA1 and S3SA2 both belong to Subscription 3, but are registered to different Microsoft Purview accounts. In that case, the *Data Use Management* toggle will only enable in the Microsoft Purview account that wins and registers a data source in that subscription first. The toggle will then be greyed out for the other data source.
-- If the *Data Use Management* toggle is greyed out and cannot be enabled, hover over it to know the name of the Microsoft Purview account that has registered the data resource first.
+    - **Case 3** shows an invalid configuration arising because Storage accounts S3SA1 and S3SA2 both belong to Subscription 3, but are registered to different Microsoft Purview accounts. In that case, the *Data use management* toggle will only enable in the Microsoft Purview account that wins and registers a data source in that subscription first. The toggle will then be greyed out for the other data source.
+- If the *Data use management* toggle is greyed out and cannot be enabled, hover over it to know the name of the Microsoft Purview account that has registered the data resource first.
 
-![Diagram shows valid and invalid configurations when using multiple Microsoft Purview accounts to manage policies.](./media/access-policies-common/valid-and-invalid-configurations.png)
+![Diagram shows valid and invalid configurations when using multiple Microsoft Purview accounts to manage policies.](./media/how-to-policies-data-owner-authoring-generic/valid-and-invalid-configurations.png)
 
 ## Next steps
 

articles/purview/how-to-policies-data-owner-authoring-generic.md

@@ -7,7 +7,7 @@ ms.service: purview
 ms.subservice: purview-data-policies
 ms.custom: event-tier1-build-2022
 ms.topic: how-to
-ms.date: 05/27/2022
+ms.date: 08/22/2022
 ---
 
 # Authoring and publishing data owner access policies (Preview)
@@ -28,26 +28,26 @@ Before authoring data policies in the Microsoft Purview governance portal, you'l
 
 1. Follow any policy-specific prerequisites for your source. Check the [Microsoft Purview supported data sources table](microsoft-purview-connector-overview.md) and select the link in the **Access Policy** column for sources where access policies are available. Follow any steps listed in the Access policy or Prerequisites sections.
 1. Register the data source in Microsoft Purview. Follow the **Prerequisites** and **Register** sections of the [source pages](microsoft-purview-connector-overview.md) for your resources.
-1. [Enable the Data Use Management toggle on the data source](how-to-enable-data-use-management.md#enable-data-use-management). Additional permissions for this step are described in the linked document.
+1. [Enable the Data use management toggle on the data source](how-to-enable-data-use-management.md#enable-data-use-management). Additional permissions for this step are described in the linked document.
 
 ## Create a new policy
 
 This section describes the steps to create a new policy in Microsoft Purview.
-Ensure you have the *Policy Author* permission as described [here](#permissions-for-policy-authoring-and-publishing)
+Ensure you have the *Policy Author* permission as described [here](#permissions-for-policy-authoring-and-publishing).
 
 1. Sign in to the [Microsoft Purview governance portal](https://web.purview.azure.com/resource/).
 
 1. Navigate to the **Data policy** feature using the left side panel. Then select **Data policies**.
 
 1. Select the **New Policy** button in the policy page.
 
-    :::image type="content" source="./media/access-policies-common/policy-onboard-guide-1.png" alt-text="Data owner can access the Policy functionality in Microsoft Purview when it wants to create policies.":::
+    :::image type="content" source="./media/how-to-policies-data-owner-authoring-generic/policy-onboard-guide-1.png" alt-text="Screenshot showing data owner can access the Policy functionality in Microsoft Purview when it wants to create policies.":::
 
 1. The new policy page will appear. Enter the policy **Name** and **Description**.
 
 1. To add policy statements to the new policy, select the **New policy statement** button. This will bring up the policy statement builder.
 
-    :::image type="content" source="./media/access-policies-common/create-new-policy.png" alt-text="Data owner can create a new policy statement.":::
+    :::image type="content" source="./media/how-to-policies-data-owner-authoring-generic/create-new-policy.png" alt-text="Screenshot showing data owner can create a new policy statement.":::
 
 1. Select the **Effect** button and choose *Allow* from the drop-down list.
 
@@ -59,15 +59,15 @@ Ensure you have the *Policy Author* permission as described [here](#permissions-
     - To create a broad policy statement that covers an entire data source, resource group, or subscription that was previously registered, use the **Data sources** box and select its **Type**.
     - To create a fine-grained policy, use the **Assets** box instead. Enter the **Data Source Type** and the **Name** of a previously registered and scanned data source. See example in the image.
 
-    :::image type="content" source="./media/access-policies-common/select-data-source-type.png" alt-text="Data owner can select a Data Resource when editing a policy statement.":::
+    :::image type="content" source="./media/how-to-policies-data-owner-authoring-generic/select-data-source-type.png" alt-text="Screenshot showing data owner can select a Data Resource when editing a policy statement.":::
 
 1. Select the **Continue** button and transverse the hierarchy to select and underlying data-object (for example: folder, file, etc.).  Select **Recursive** to apply the policy from that point in the hierarchy down to any child data-objects. Then select the **Add** button. This will take you back to the policy editor.
 
-    :::image type="content" source="./media/access-policies-common/select-asset.png" alt-text="Data owner can select the asset when creating or editing a policy statement.":::
+    :::image type="content" source="./media/how-to-policies-data-owner-authoring-generic/select-asset.png" alt-text="Screenshot showing data owner can select the asset when creating or editing a policy statement.":::
 
 1. Select the **Subjects** button and enter the subject identity as a principal, group, or MSI. Then select the **OK** button. This will take you back to the policy editor
 
-    :::image type="content" source="./media/access-policies-common/select-subject.png" alt-text="Data owner can select the subject when creating or editing a policy statement.":::
+    :::image type="content" source="./media/how-to-policies-data-owner-authoring-generic/select-subject.png" alt-text="Screenshot showing data owner can select the subject when creating or editing a policy statement.":::
 
 1. Repeat the steps #5 to #11 to enter any more policy statements.
 
@@ -86,15 +86,15 @@ The steps to publish a policy are as follows:
 
 1. Navigate to the **Data policy** feature using the left side panel. Then select **Data policies**.
 
-    :::image type="content" source="./media/access-policies-common/policy-onboard-guide-2.png" alt-text="Data owner can access the Policy functionality in Microsoft Purview when it wants to update a policy by selecting 'Data policies'.":::
+    :::image type="content" source="./media/how-to-policies-data-owner-authoring-generic/policy-onboard-guide-2.png" alt-text="Screenshot showing data owner can access the Policy functionality in Microsoft Purview when it wants to update a policy by selecting Data policies.":::
 
 1. The Policy portal will present the list of existing policies in Microsoft Purview. Locate the policy that needs to be published. Select the **Publish** button on the right top corner of the page.
 
-    :::image type="content" source="./media/access-policies-common/publish-policy.png" alt-text="Data owner can publish a policy.":::
+    :::image type="content" source="./media/how-to-policies-data-owner-authoring-generic/publish-policy.png" alt-text="Screenshot showing data owner can publish a policy.":::
 
 1. A list of data sources is displayed. You can enter a name to filter the list. Then, select each data source where this policy is to be published and then select the **Publish** button.
 
-    :::image type="content" source="./media/access-policies-common/select-data-sources-publish-policy.png" alt-text="Data owner can select the data source where the policy will be published.":::
+    :::image type="content" source="./media/how-to-policies-data-owner-authoring-generic/select-data-sources-publish-policy.png" alt-text="Screenshot showing data owner can select the data source where the policy will be published.":::
 
 >[!Note]
 > After making changes to a policy, there is no need to publish it again for it to take effect if the data source(s) continues to be the same.
@@ -108,13 +108,13 @@ Ensure you have the *Policy Author* permission as described [here](#permissions-
 
 1. Navigate to the **Data policy** feature using the left side panel. Then select **Data policies**.
 
-    :::image type="content" source="./media/access-policies-common/policy-onboard-guide-2.png" alt-text="Data owner can access the Policy functionality in Microsoft Purview when it wants to update a policy.":::
+    :::image type="content" source="./media/how-to-policies-data-owner-authoring-generic/policy-onboard-guide-2.png" alt-text="Screenshot showing data owner can access the Policy functionality in Microsoft Purview when it wants to update a policy.":::
 
 1. The Policy portal will present the list of existing policies in Microsoft Purview. Select the policy that needs to be updated.
 
 1. The policy details page will appear, including Edit and Delete options. Select the **Edit** button, which brings up the policy statement builder. Now, any parts of the statements in this policy can be updated. To delete the policy, use the **Delete** button.
 
-    :::image type="content" source="./media/access-policies-common/edit-policy.png" alt-text="Data owner can edit or delete a policy statement.":::
+    :::image type="content" source="./media/how-to-policies-data-owner-authoring-generic/edit-policy.png" alt-text="Screenshot showing data owner can edit or delete a policy statement.":::
 
 ## Next steps