Merge pull request #225812 from rolyon/rolyon-aadroles-custom-roles-app-permissions-descriptions

[Azure AD roles] Update custom role permission descriptions

Author: prmerger-automator[bot]

articles/active-directory/roles/custom-consent-permissions.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.workload: identity
 ms.subservice: roles
 ms.topic: overview
-ms.date: 11/04/2020
+ms.date: 01/31/2023
 ms.author: rolyon
 ms.reviewer: psignoret
 ms.custom: it-pro
@@ -65,10 +65,10 @@ To delegate the creation, update and deletion of [app consent policies](../manag
 > | ---------- | ----------- |
 > | microsoft.directory/servicePrincipals/managePermissionGrantsForSelf.{id} | Grants the ability to consent to apps on behalf of self (user consent), subject to app consent policy `{id}`. |
 > | microsoft.directory/servicePrincipals/managePermissionGrantsForAll.{id} | Grants the permission to consent to apps on behalf of all (tenant-wide admin consent), subject to app consent policy `{id}`. |
-> | microsoft.directory/permissionGrantPolicies/standard/read | Grants the ability to read app consent policies. |
-> | microsoft.directory/permissionGrantPolicies/basic/update | Grants the ability to update basic properties on existing app consent policies. |
-> | microsoft.directory/permissionGrantPolicies/create | Grants the ability to create app consent policies. |
-> | microsoft.directory/permissionGrantPolicies/delete | Grants the ability to delete app consent policies. |
+> | microsoft.directory/permissionGrantPolicies/standard/read | Read standard properties of permission grant policies |
+> | microsoft.directory/permissionGrantPolicies/basic/update | Update basic properties of permission grant policies |
+> | microsoft.directory/permissionGrantPolicies/create | Create permission grant policies |
+> | microsoft.directory/permissionGrantPolicies/delete | Delete permission grant policies |
 
 ## Next steps
 

articles/active-directory/roles/custom-device-permissions.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.workload: identity
 ms.subservice: roles
 ms.topic: reference
-ms.date: 11/30/2022
+ms.date: 01/31/2023
 ms.author: rolyon
 ms.reviewer: 
 ms.custom: it-pro
@@ -77,12 +77,12 @@ The following permission is available to update tenant-wide device registration
 > [!div class="mx-tableFixed"]
 > | Permission | Description |
 > | ---------- | ----------- |
-> | microsoft.directory/devices/createdFrom/read | Read createdfrom properties of devices |
+> | microsoft.directory/devices/createdFrom/read | Read created from Internet of Things (IoT) device template links |
 > | microsoft.directory/devices/registeredOwners/read | Read registered owners of devices |
 > | microsoft.directory/devices/registeredUsers/read | Read registered users of devices |
 > | microsoft.directory/devices/standard/read | Read basic properties on devices |
 > | microsoft.directory/bitlockerKeys/key/read | Read bitlocker metadata and key on devices |
-> | microsoft.directory/bitlockerKeys/metadata/read | Read bitlocker metadata on devices |
+> | microsoft.directory/bitlockerKeys/metadata/read | Read bitlocker key metadata on devices |
 > | microsoft.directory/deviceRegistrationPolicy/standard/read | Read standard properties on device registration policies |
 
 #### Update

articles/active-directory/roles/custom-enterprise-app-permissions.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.workload: identity
 ms.subservice: roles
 ms.topic: overview
-ms.date: 08/06/2021
+ms.date: 01/31/2023
 ms.author: rolyon
 ms.reviewer: vincesm
 ms.custom: it-pro
@@ -177,7 +177,7 @@ To delegate create, read, update, and delete (CRUD) permissions for updating the
 > | microsoft.directory/applicationPolicies/owners/update | Update the owner property of application policies |
 > | microsoft.directory/applicationPolicies/policyAppliedTo/read | Read application policies applied to objects list |
 > | microsoft.directory/applicationPolicies/standard/read | Read standard properties of application policies |
-> | microsoft.directory/servicePrincipals/allProperties/allTasks | Create and delete servicePrincipals, and read and update all properties in Azure Active Directory |
+> | microsoft.directory/servicePrincipals/allProperties/allTasks | Create and delete service principals, and read and update all properties |
 > | microsoft.directory/servicePrincipals/allProperties/read | Read all properties (including privileged properties) on servicePrincipals |
 > | microsoft.directory/servicePrincipals/allProperties/update | Update all properties (including privileged properties) on servicePrincipals |
 > | microsoft.directory/servicePrincipals/appRoleAssignedTo/read | Read service principal role assignments |
@@ -218,9 +218,9 @@ To delegate create, read, update, and delete (CRUD) permissions for updating the
 > | microsoft.directory/connectorGroups/allProperties/update | Update all properties of application proxy connector groups |
 > | microsoft.directory/connectors/create | Create application proxy connectors |
 > | microsoft.directory/connectors/allProperties/read | Read all properties of application proxy connectors |
-> | microsoft.directory/servicePrincipals/synchronizationJobs/manage | Start, restart, and pause application provisioning syncronization jobs |
-> | microsoft.directory/servicePrincipals/synchronization/standard/read | Read provisioning settings associated with the application object |
-> | microsoft.directory/servicePrincipals/synchronizationSchema/manage | Create and manage application provisioning syncronization jobs and schema |
+> | microsoft.directory/servicePrincipals/synchronizationJobs/manage | Start, restart, and pause application provisioning synchronization jobs |
+> | microsoft.directory/servicePrincipals/synchronization/standard/read | Read provisioning settings associated with your service principal |
+> | microsoft.directory/servicePrincipals/synchronizationSchema/manage | Create and manage application provisioning synchronization jobs and schema |
 > | microsoft.directory/provisioningLogs/allProperties/read | Read all properties of provisioning logs |
 
 ## Next steps