update

Author: msmbaldwin

articles/key-vault/certificates/quick-create-cli.md

@@ -26,7 +26,7 @@ In this quickstart, you create a key vault in Azure Key Vault with Azure CLI. Az
 
 ## Create a key vault
 
-[!INCLUDE [Create a key vault](../includes/key-vault-cli-kv-creation.md)]
+[!INCLUDE [Create a key vault](../includes/key-vault-creation-cli.md)]
 
 ## Add a certificate to Key Vault
 

articles/key-vault/certificates/quick-create-powershell.md

@@ -32,7 +32,7 @@ Connect-AzAccount
 
 ## Create a key vault
 
-[!INCLUDE [Create a key vault](../includes/key-vault-powershell-kv-creation.md)]
+[!INCLUDE [Create a key vault](../includes/key-vault-creation-powershell.md)]
 
 ### Grant access to your key vault
 

articles/key-vault/general/quick-create-cli.md

@@ -28,7 +28,7 @@ Azure Key Vault is a cloud service that provides a secure store for [keys](../ke
 
 ## Create a key vault
 
-[!INCLUDE [Create a key vault](../includes/key-vault-cli-kv-creation.md)]
+[!INCLUDE [Create a key vault](../includes/key-vault-creation-cli.md)]
 
 ## Clean up resources
 

articles/key-vault/general/quick-create-powershell.md

@@ -31,7 +31,7 @@ Connect-AzAccount
 
 ## Create a key vault
 
-[!INCLUDE [Create a key vault](../includes/key-vault-powershell-kv-creation.md)]
+[!INCLUDE [Create a key vault](../includes/key-vault-creation-powershell.md)]
 
 ## Clean up resources
 

articles/key-vault/includes/key-vault-access-policy-limits.md

@@ -9,4 +9,4 @@ ms.author: msmbaldwin
 
 ---
 
-Key vault supports up to 1024 access policy entries, with each entry granting a distinct set of permissions to a particular security principal. Because of this limitation, we recommend assigning access policies to groups of users, where possible, rather than individual users. Using groups makes it much easier to manage permissions for multiple people in your organization. For more information, see [Manage app and resource access using Microsoft Entra groups](../articles/active-directory/fundamentals/active-directory-manage-groups.md)
+Key vault supports up to 1024 access policy entries, with each entry granting a distinct set of permissions to a particular security principal. Because of this limitation, we recommend assigning access policies to groups of users, where possible, rather than individual users. Using groups makes it much easier to manage permissions for multiple people in your organization. For more information, see [Manage app and resource access using Microsoft Entra groups](/entra/fundamentals/how-to-manage-groups).

articles/key-vault/includes/key-vault-quickstart-rbac-powershell.md

@@ -0,0 +1,17 @@
+---
+author: msmbaldwin
+ms.service: key-vault
+ms.custom: devx-track-azurepowershell
+ms.topic: include
+ms.date: 04/04/2024
+ms.author: msmbaldwin
+# Used by articles that show how to assign a Key Vault access policy
+---
+
+To grant your application permissions to your key vault through Role-Based Access Control (RBAC), assign a role using the Azure PowerShell cmdlet [New-AzRoleAssignment](/powershell/module/az.resources/new-azroleassignment).
+
+```azurepowershell
+New-AzRoleAssignment -RoleDefinitionName "Key Vault Secrets User" -SignInName "<your-email-address>" -Scope "/subscriptions/<subscription-id>/resourceGroups/<resource-group-name>/providers/Microsoft.KeyVault/vaults/<your-unique-keyvault-name>"
+```
+
+Replace \<your-email-address\>, \<subscription-id\>, \<resource-group-name\> and \<your-unique-keyvault-name\> with your actual values. \<your-email-address\> is your sign-in name; you can instead use the `-ObjectId` parameter and a Microsoft Entra Object ID.

articles/key-vault/includes/key-vault-rg-kv-creation.md

@@ -11,7 +11,7 @@ ms.devlang: azurecli
 
 ---
 
-This quickstart uses a precreated Azure key vault. You can create a key vault by following the steps in the [Azure CLI quickstart](../articles/key-vault/general/quick-create-cli.md), [Azure PowerShell quickstart](../articles/key-vault/general/quick-create-powershell.md), or [Azure portal quickstart](../articles/key-vault/general/quick-create-portal.md). 
+This quickstart uses a precreated Azure key vault. You can create a key vault by following the steps in the [Azure CLI quickstart](/azure/key-vault/general/quick-create-cli), [Azure PowerShell quickstart](/azure/key-vault/general/quick-create-powershell), or [Azure portal quickstart](/azure/key-vault/general/quick-create-portal). 
 
 Alternatively, you can run these Azure CLI or Azure PowerShell commands.
 

articles/key-vault/keys/quick-create-cli.md

@@ -26,7 +26,7 @@ In this quickstart, you create a key vault in Azure Key Vault with Azure CLI. Az
 
 ## Create a key vault
 
-[!INCLUDE [Create a key vault](../includes/key-vault-cli-kv-creation.md)]
+[!INCLUDE [Create a key vault](../includes/key-vault-creation-cli.md)]
 
 ## Add a key to Key Vault
 

articles/key-vault/keys/quick-create-powershell.md

@@ -31,7 +31,7 @@ Connect-AzAccount
 
 ## Create a key vault
 
-[!INCLUDE [Create a key vault](../includes/key-vault-powershell-kv-creation.md)]
+[!INCLUDE [Create a key vault](../includes/key-vault-creation-powershell.md)]
 
 ## Add a key to Key Vault
 

articles/key-vault/secrets/quick-create-cli.md

@@ -26,7 +26,7 @@ This quickstart requires version 2.0.4 or later of the Azure CLI. If using Azure
 
 ## Create a key vault
 
-[!INCLUDE [Create a key vault](../includes/key-vault-cli-kv-creation.md)]
+[!INCLUDE [Create a key vault](../includes/key-vault-creation-cli.md)]
 
 ## Give your user account permissions to manage secrets in Key Vault