Merge pull request #290780 from sreekzz/patch-941526

Modify Global Admin role

Author: v-ccolin

articles/hdinsight/domain-joined/apache-domain-joined-architecture.md

@@ -4,7 +4,7 @@ description: Learn how to plan Azure HDInsight security with Enterprise Security
 ms.service: azure-hdinsight
 ms.topic: conceptual
 ms.custom: hdinsightactive, has-azure-ad-ps-ref
-ms.date: 09/06/2024
+ms.date: 11/20/2024
 ---
 
 # Use Enterprise Security Package in HDInsight
@@ -67,7 +67,7 @@ If you use federation and password hashes are synced correctly, but you're getti
    Install-Module AzureAD
    ```
 
-2. Connect using administrator (tenant administrator) credentials.
+2. Connect using [Hybrid Identity Administrator](/entra/identity/role-based-access-control/permissions-reference#hybrid-identity-administrator)credentials.
 
    ```powershell
    Connect-AzureAD

articles/hdinsight/domain-joined/apache-domain-joined-create-configure-enterprise-security-cluster.md

@@ -171,8 +171,6 @@ Create an Active Directory tenant administrator.
    1. Select **User**.
    1. Select **Administrator**, and then **Select**.
 
-      :::image type="content" source="./media/apache-domain-joined-create-configure-enterprise-security-cluster/azure-ad-add-role-member.png" alt-text="The Microsoft Entra role dialog box." border="true":::
-
 1. Select **Create**.
 
 1. Then have the new user sign in to the Azure portal where it will be prompted to change the password. You'll need to do this before configuring Microsoft Entra Connect.

articles/hdinsight/domain-joined/domain-joined-authentication-issues.md

@@ -3,7 +3,7 @@ title: Authentication issues in Azure HDInsight
 description: Authentication issues in Azure HDInsight
 ms.service: azure-hdinsight
 ms.topic: troubleshooting
-ms.date: 09/06/2024
+ms.date: 11/20/2024
 ---
 
 # Authentication issues in Azure HDInsight
@@ -30,7 +30,7 @@ Microsoft Entra error code 50126 means the `AllowCloudPasswordValidation` policy
 
 ### Resolution
 
-The Administrator of the Microsoft Entra tenant should enable Microsoft Entra ID to use password hashes for ADFS backed users.  Apply the `AllowCloudPasswordValidationPolicy` as shown in the article [Use Enterprise Security Package in HDInsight](../domain-joined/apache-domain-joined-architecture.md).
+Use [Hybrid Identity Administrator](/entra/identity/role-based-access-control/permissions-reference#hybrid-identity-administrator)credentials to use password hashes for ADFS backed users.  Apply the `AllowCloudPasswordValidationPolicy` as shown in the article [Use Enterprise Security Package in HDInsight](../domain-joined/apache-domain-joined-architecture.md).
 
 ---