Minor updates

Author: unknown

articles/azure-app-configuration/pull-key-value-devops-pipeline.md

@@ -31,13 +31,14 @@ Assign the proper App Configuration role assignments to the credentials being us
 
 1. Go to your target App Configuration store. 
 1. In the left menu, select **Access control (IAM)**.
-1. In the right pane, select **Add role assignments**.
+1. In the right pane, select **Add role assignment**.
 
       :::image type="content"  border="true" source="./media/azure-app-configuration-role-assignment/add-role-assignment-button.png" alt-text="Screenshot shows the Add role assignments button.":::
 1. For **Role**, select **App Configuration Data Reader**. This role allows the task to read from the App Configuration store. 
 1. Select the service principal associated with the service connection that you created in the previous section.
 
       :::image type="content"  border="true" source="./media/azure-app-configuration-role-assignment/add-role-assignment-data-reader.png" alt-text="Screenshot shows the Add role assignment dialog.":::
+1. Select **Review + assign**.
 1. If the store contains Key Vault references, go to relevant Key Vault and assign **Key Vault Secret User** role to the service principal created in the previous step. From the Key Vault menu, select **Access policies** and ensure [Azure role-based access control](../key-vault/general/rbac-guide.md) is selected as the permission model.
 
 ## Use in builds

articles/azure-app-configuration/push-kv-devops-pipeline.md

@@ -31,13 +31,14 @@ Assign the proper App Configuration role assignments to the credentials being us
 
 1. Go to your target App Configuration store. 
 1. In the left menu, select **Access control (IAM)**.
-1. In the right pane, select **Add role assignments**.
+1. In the right pane, select **Add role assignment**.
 
     :::image type="content"  border="true" source="./media/azure-app-configuration-role-assignment/add-role-assignment-button.png" alt-text="Screenshot shows the Add role assignments button.":::
 1. For **Role**, select **App Configuration Data Owner**. This role allows the task to read from and write to the App Configuration store.
 1. Select the service principal associated with the service connection that you created in the previous section.
 
     :::image type="content"  border="true" source="./media/azure-app-configuration-role-assignment/add-role-assignment-data-owner.png" alt-text="Screenshot shows the Add role assignment dialog.":::
+1. Select **Review + assign**.
 
 ## Use in builds