Merge pull request #272716 from dominicbetts/aio-sites

AIO: Add sites and site management functionality

Author: PMEds28

articles/iot-operations/deploy-iot-ops/howto-prepare-cluster.md

@@ -180,6 +180,10 @@ To verify that your cluster is ready for Azure IoT Operations deployment, you ca
 az iot ops verify-host
 ```
 
+## Create sites
+
+To manage which clusters your OT users have access to, you can group your clusters into sites. To learn more, see [What is Azure Arc site manager (preview)?](https://aka.ms/sitedocs).
+
 ## Next steps
 
 Now that you have an Azure Arc-enabled Kubernetes cluster, you can [deploy Azure IoT Operations](../deploy-iot-ops/howto-deploy-iot-operations.md).

articles/iot-operations/get-started/media/quickstart-add-assets/cluster-list.png

@@ -35,7 +35,7 @@ There are two core elements in the Azure IoT Operations Preview architecture:
   * **Azure IoT Data Processor Preview** - a configurable data processing service that can manage the complexities and diversity of industrial data. Use Data Processor to make data from disparate sources more understandable, usable, and valuable.
   * **Azure IoT MQ Preview** - an edge-native MQTT broker that powers event-driven architectures.
   * **Azure IoT OPC UA Broker Preview** - an OPC UA broker that handles the complexities of OPC UA communication with OPC UA servers and other leaf devices.
-* **Azure IoT Operations (preview) portal**. This web UI provides a unified experience for operational technologists to manage assets and Data Processor pipelines in an Azure IoT Operations deployment.
+* **Azure IoT Operations (preview) portal**. This web UI provides a unified experience for operational technologists to manage assets and Data Processor pipelines in an Azure IoT Operations deployment. An IT administrator can use Azure Arc sites to control the resources that an operational technologist can access in the portal.
 
 ## Deploy
 

articles/iot-operations/get-started/media/quickstart-add-assets/site-list.png

@@ -40,14 +40,20 @@ To create asset endpoints, assets and subscribe to OPC UA tags and events, use t
 > [!IMPORTANT]
 > You must use a work or school account to sign in to the Azure IoT Operations (preview) portal. To learn more, see [Known Issues > Create Entra account](../troubleshoot/known-issues.md#azure-iot-operations-preview-portal).
 
-## Select your cluster
+## Select your site
 
-When you sign in, select **Get started**. The portal displays the list of Kubernetes clusters that you have access to. Select the cluster that you deployed Azure IoT Operations to in the previous quickstart:
+After you sign in, the portal displays a list of sites that you have access to. Each site is a collection of Azure IoT Operations instances where you can configure your assets. Your [IT administrator is responsible for organizing instances in to sites](https://aka.ms/sitedocs) and granting access to OT users in your organization. Because you're working with a new deployment, there are no sites yet. You can find the cluster you created in the previous quickstart by selecting **Unassigned instances**. In the portal, an instance represents a cluster where you deployed Azure IoT Operations.
 
-:::image type="content" source="media/quickstart-add-assets/cluster-list.png" alt-text="Screenshot of Azure IoT Operations cluster list.":::
+:::image type="content" source="media/quickstart-add-assets/site-list.png" alt-text="Screenshot that shows the unassigned instances node in the Azure IoT Operations (preview) portal.":::
+
+## Select your instance
+
+Select the instance that you deployed Azure IoT Operations to in the previous quickstart:
+
+:::image type="content" source="media/quickstart-add-assets/cluster-list.png" alt-text="Screenshot of Azure IoT Operations instance list.":::
 
 > [!TIP]
-> If you don't see any clusters, you might not be in the right Azure Active Directory tenant. You can change the tenant from the top right menu in the portal. If you still don't see any clusters, that means you are not added to any yet. Reach out to your IT administrator to give you access to the Azure resource group the Kubernetes cluster belongs to from Azure portal. You must be in the _contributor_ role.
+> If you don't see any instances, you might not be in the right Azure Active Directory tenant. You can change the tenant from the top right menu in the portal.
 
 ## Add an asset endpoint
 
@@ -122,7 +128,7 @@ When the OPC PLC simulator is running, data flows from the simulator, to the con
 
 ## Manage your assets
 
-After you select your cluster in Azure IoT Operations (preview) portal, you see the available list of assets on the **Assets** page. If there are no assets yet, this list is empty:
+After you select your instance in Azure IoT Operations (preview) portal, you see the available list of assets on the **Assets** page. If there are no assets yet, this list is empty:
 
 :::image type="content" source="media/quickstart-add-assets/create-asset-empty.png" alt-text="Screenshot of Azure IoT Operations empty asset list.":::
 
@@ -298,4 +304,4 @@ If you won't use this deployment further, delete the Kubernetes cluster that you
 
 ## Next step
 
-[Quickstart: Use Azure IoT Data Processor Preview pipelines to process data from your OPC UA assets](quickstart-process-telemetry.md)
+[Quickstart: Use Azure IoT Data Processor Preview pipelines to process data from your OPC UA assets](quickstart-process-telemetry.md).

articles/iot-operations/get-started/overview-iot-operations.md

@@ -18,10 +18,14 @@ ms.custom:
 
 An _asset_ in Azure IoT Operations Preview is a logical entity that you create to represent a real asset. An Azure IoT Operations asset can have properties, tags, and events that describe its behavior and characteristics.
 
-_OPC UA servers_ are software applications that communicate with assets. OPC UA servers expose _OPC UA tags_ that represent data points. OPC UA tags provide real-time or historical data about the status, performance, quality, or condition of assets. 
+_OPC UA servers_ are software applications that communicate with assets. OPC UA servers expose _OPC UA tags_ that represent data points. OPC UA tags provide real-time or historical data about the status, performance, quality, or condition of assets.
 
 An _asset endpoint_ is a custom resource in your Kubernetes cluster that connects OPC UA servers to OPC UA connector modules. This connection enables an OPC UA connector to access an asset's data points. Without an asset endpoint, data can't flow from an OPC UA server to the Azure IoT OPC UA Broker Preview instance and Azure IoT MQ Preview instance. After you configure the custom resources in your cluster, a connection is established to the downstream OPC UA server and the server forwards telemetry to the OPC UA Broker instance.
 
+A _site_ is a collection of Azure IoT Operations instances. Sites help you organize your instances and manage access control. Your IT administrator creates sites, assigns instances to them, and grants access to OT users in your organization.
+
+In the Azure IoT Operations (preview) portal, an _instance_ represents an Azure IoT Operations cluster. An instance can have one or more asset endpoints.
+
 This article describes how to use the Azure IoT Operations (preview) portal and the Azure CLI to:
 
 - Define asset endpoints
@@ -39,17 +43,25 @@ To configure an assets endpoint, you need a running instance of Azure IoT Operat
 
 To sign in to the Azure IoT Operations (preview) portal, navigate to the [Azure IoT Operations (preview)](https://iotoperations.azure.com) portal in your browser and sign in by using your Microsoft Entra ID credentials.
 
-## Select your cluster
+## Select your site
+
+After you sign in, the portal displays a list of sites that you have access to. Each site is a collection of Azure IoT Operations instances where you can configure your assets. Your [IT administrator is responsible for organizing instances in to sites](https://aka.ms/sitedocs) and granting access to OT users in your organization. Instances that aren't part of a site appear in the **Unassigned instances** node. Select the site that you want to use:
 
-When you sign in, the portal displays a list of the Azure Arc-enabled Kubernetes clusters running Azure IoT Operations that you have access to. Select the cluster that you want to use.
+:::image type="content" source="media/howto-manage-assets-remotely/site-list.png" alt-text="Screenshot that shows a list of sites in the Azure IoT Operations (preview) portal.":::
 
 > [!TIP]
-> If you don't see any clusters, you might not be in the right Azure Active Directory tenant. You can change the tenant from the top right menu in the portal. If you still don't see any clusters, that means you are not added to any yet. Reach out to your IT administrator to give you access to the Azure resource group the Kubernetes cluster belongs to from Azure portal. You must be in the _contributor_ role.
+> You can use the filter box to search for sites.
+
+If you don't see any sites, you might not be in the right Azure Active Directory tenant. You can change the tenant from the top right menu in the portal. If you still don't see any sites that means you aren't added to any yet. Reach out to your IT administrator to request access.
+
+## Select your instance
+
+After you select a site, the portal displays a list of the Azure IoT Operations instances that are part of the site. Select the instance that you want to use:
 
-:::image type="content" source="media/howto-manage-assets-remotely/cluster-list.png" alt-text="Screenshot that shows the list of clusters in the Azure IoT Operations (preview) portal.":::
+:::image type="content" source="media/howto-manage-assets-remotely/cluster-list.png" alt-text="Screenshot that shows the list of instances in the Azure IoT Operations (preview) portal.":::
 
 > [!TIP]
-> You can use the filter box to search for clusters.
+> You can use the filter box to search for instances.
 
 # [Azure CLI](#tab/cli)