Merge pull request #102969 from MGoedtel/Task1671261

Rewriting SPN article

Author: ttorble

articles/azure-arc/servers/overview.md

@@ -7,7 +7,7 @@ ms.subservice: azure-arc-servers
 author: mgoedtel
 ms.author: magoedte
 keywords: azure automation, DSC, powershell, desired state configuration, update management, change tracking, inventory, runbooks, python, graphical, hybrid
-ms.date: 01/29/2020
+ms.date: 02/03/2020
 ms.custom: mvc
 ms.topic: overview
 ---
@@ -50,6 +50,12 @@ The following versions of the Windows and Linux operating system are officially
 >This preview release of the Connected Machine agent for Windows only supports Windows Server configured to use the English language.
 >
 
+### Required permissions
+
+- To onboard machines, you are a member of the **Azure Connected Machine Onboarding** role.
+
+- To read, modify, re-onboard, and delete a machine, you are a member of the **Azure Connected Machine Resource Administrator** role. 
+
 ### Azure subscription and service limits
 
 Before configuring your machines with Azure Arc for servers (preview), you should review the Azure Resource Manager [subscription limits](../../azure-resource-manager/management/azure-subscription-service-limits.md#subscription-limits---azure-resource-manager) and [resource group limits](../../azure-resource-manager/management/azure-subscription-service-limits.md#resource-group-limits) to plan for the number of machines to be connected.

articles/azure-arc/servers/quickstart-onboard-portal.md

@@ -6,7 +6,7 @@ ms.service: azure-arc
 ms.subservice: azure-arc-servers
 author: mgoedtel
 ms.author: magoedte
-ms.date: 01/29/2020
+ms.date: 02/09/2020
 ms.custom: mvc
 ms.topic: quickstart
 ---
@@ -183,5 +183,6 @@ To disconnect a machine from Azure Arc for servers (preview), do the following:
 
 ## Next steps
 
-> [!div class="nextstepaction"]
-> [Assign a policy to connected machines](../../governance/policy/assign-policy-portal.md)
+- Learn how to manage your machine using [Azure Policy](../../governance/policy/overview.md), for such things as VM [guest configuration](../../governance/policy/concepts/guest-configuration.md), verifying the machine is reporting to the expected Log Analytics workspace, enable monitoring with [Azure Monitor with VMs](../../azure-monitor/insights/vminsights-enable-at-scale-policy.md), and much more.
+
+- Learn more about the [Log Analytics agent](../../azure-monitor/platform/log-analytics-agent.md). The Log Analytics agent for Windows and Linux is required when you want to proactively monitor the OS and workloads running on the machine, manage it using Automation runbooks or solutions like Update Management, or use other Azure services like [Azure Security Center](../../security-center/security-center-intro.md).