Merge pull request #103737 from AngoMangoOSS/patch-1

Spelling Updates for Enterprise App Permissions docs

Author: Court72

articles/active-directory/roles/custom-enterprise-app-permissions.md

@@ -167,60 +167,60 @@ To delegate create, read, update, and delete (CRUD) permissions for updating the
 > [!div class="mx-tableFixed"]
 > | Permission | Description |
 > | ---------- | ----------- |
-> | microsoft.directory/applicationPolicies/allProperties/read | Read all properties on application policies |
-> | microsoft.directory/applicationPolicies/allProperties/update | Update all properties on application policies |
+> | microsoft.directory/applicationPolicies/allProperties/read | Read all properties (including privileged properties) on application policies |
+> | microsoft.directory/applicationPolicies/allProperties/update | Update all properties (including privileged properties) on application policies |
 > | microsoft.directory/applicationPolicies/basic/update | Update standard properties of application policies |
 > | microsoft.directory/applicationPolicies/create | Create application policies |
-> | microsoft.directory/applicationPolicies/createAsOwner | Create application policies. Creator is added as the first owner |
+> | microsoft.directory/applicationPolicies/createAsOwner | Create application policies, and creator is added as the first owner |
 > | microsoft.directory/applicationPolicies/delete | Delete application policies |
 > | microsoft.directory/applicationPolicies/owners/read | Read owners on application policies |
 > | microsoft.directory/applicationPolicies/owners/update | Update the owner property of application policies |
 > | microsoft.directory/applicationPolicies/policyAppliedTo/read | Read application policies applied to objects list |
 > | microsoft.directory/applicationPolicies/standard/read | Read standard properties of application policies |
 > | microsoft.directory/servicePrincipals/allProperties/allTasks | Create and delete servicePrincipals, and read and update all properties in Azure Active Directory |
-> | microsoft.directory/servicePrincipals/allProperties/read | Read all properties on servicePrincipals |
-> | microsoft.directory/servicePrincipals/allProperties/update | Update all properties on servicePrincipals |
+> | microsoft.directory/servicePrincipals/allProperties/read | Read all properties (including privileged properties) on servicePrincipals |
+> | microsoft.directory/servicePrincipals/allProperties/update | Update all properties (including privileged properties) on servicePrincipals |
 > | microsoft.directory/servicePrincipals/appRoleAssignedTo/read | Read service principal role assignments |
 > | microsoft.directory/servicePrincipals/appRoleAssignedTo/update | Update service principal role assignments |
 > | microsoft.directory/servicePrincipals/appRoleAssignments/read | Read role assignments assigned to service principals |
 > | microsoft.directory/servicePrincipals/audience/update | Update audience properties on service principals |
 > | microsoft.directory/servicePrincipals/authentication/update | Update authentication properties on service principals |
 > | microsoft.directory/servicePrincipals/basic/update | Update basic properties on service principals |
 > | microsoft.directory/servicePrincipals/create | Create service principals |
-> | microsoft.directory/servicePrincipals/createAsOwner | Create service principals. Creator is added as the first owner |
-> | microsoft.directory/servicePrincipals/credentials/update | Update credentials properties on service principals |
+> | microsoft.directory/servicePrincipals/createAsOwner | Create service principals, with creator as the first owner |
+> | microsoft.directory/servicePrincipals/credentials/update | Update credentials of service principals |
 > | microsoft.directory/servicePrincipals/delete | Delete service principals |
 > | microsoft.directory/servicePrincipals/disable | Disable service principals |
 > | microsoft.directory/servicePrincipals/enable | Enable service principals |
 > | microsoft.directory/servicePrincipals/getPasswordSingleSignOnCredentials | Read password single sign-on credentials on service principals |
 > | microsoft.directory/servicePrincipals/managePasswordSingleSignOnCredentials | Manage password single sign-on credentials on service principals |
 > | microsoft.directory/servicePrincipals/oAuth2PermissionGrants/read | Read delegated permission grants on service principals |
-> | microsoft.directory/servicePrincipals/owners/read | Read owners on service principals |
-> | microsoft.directory/servicePrincipals/owners/update | Update owners on service principals |
+> | microsoft.directory/servicePrincipals/owners/read | Read owners of service principals |
+> | microsoft.directory/servicePrincipals/owners/update | Update owners of service principals |
 > | microsoft.directory/servicePrincipals/permissions/update | Update permissions of service principals |
-> | microsoft.directory/servicePrincipals/policies/read | Read policies on service principals |
-> | microsoft.directory/servicePrincipals/policies/update | Update policies on service principals |
-> | microsoft.directory/servicePrincipals/standard/read | Read standard properties of service principals |
+> | microsoft.directory/servicePrincipals/policies/read | Read policies of service principals |
+> | microsoft.directory/servicePrincipals/policies/update | Update policies of service principals |
+> | microsoft.directory/servicePrincipals/standard/read | Read basic properties of service principals |
 > | microsoft.directory/servicePrincipals/synchronization/standard/read | Read provisioning settings associated with your service principal |
-> | microsoft.directory/servicePrincipals/tag/update | Update tags property on service principals |
+> | microsoft.directory/servicePrincipals/tag/update | Update the tag property for service principals |
 > | microsoft.directory/applicationTemplates/instantiate | Instantiate gallery applications from application templates |
-> | microsoft.directory/auditLogs/allProperties/read | Read audit logs |
-> | microsoft.directory/signInReports/allProperties/read | Read sign-in reports |
-> | microsoft.directory/applications/applicationProxy/read | Read all application proxy properties of all types of applications |
-> | microsoft.directory/applications/applicationProxy/update | Update all application proxy properties of all types of applications |
-> | microsoft.directory/applications/applicationProxyAuthentication/update | Update application proxy authentication properties of all types of applications |
-> | microsoft.directory/applications/applicationProxyUrlSettings/update | Update application proxy internal and external URLs of all types of applications |
-> | microsoft.directory/applications/applicationProxySslCertificate/update | Update application proxy custom domains of all types of applications |
+> | microsoft.directory/auditLogs/allProperties/read | Read all properties on audit logs, including privileged properties |
+> | microsoft.directory/signInReports/allProperties/read | Read all properties on sign-in reports, including privileged properties |
+> | microsoft.directory/applications/applicationProxy/read | Read all application proxy properties |
+> | microsoft.directory/applications/applicationProxy/update | Update all application proxy properties |
+> | microsoft.directory/applications/applicationProxyAuthentication/update | Update authentication on all types of applications |
+> | microsoft.directory/applications/applicationProxyUrlSettings/update | Update URL settings for application proxy |
+> | microsoft.directory/applications/applicationProxySslCertificate/update | Update SSL certificate settings for application proxy |
 > | microsoft.directory/applications/synchronization/standard/read | Read provisioning settings associated with the application object |
 > | microsoft.directory/connectorGroups/create | Create application proxy connector groups |
 > | microsoft.directory/connectorGroups/delete | Delete application proxy connector groups |
 > | microsoft.directory/connectorGroups/allProperties/read | Read all properties of application proxy connector groups |
 > | microsoft.directory/connectorGroups/allProperties/update | Update all properties of application proxy connector groups |
 > | microsoft.directory/connectors/create | Create application proxy connectors |
 > | microsoft.directory/connectors/allProperties/read | Read all properties of application proxy connectors |
-> | microsoft.directory/servicePrincipals/synchronizationJobs/manage | Manage all aspects of job synchronization for service principal resources |
-> | microsoft.directory/servicePrincipals/synchronization/standard/read | Read provisioning settings associated with service principals |
-> | microsoft.directory/servicePrincipals/synchronizationSchema/manage | Manage all aspects of schema synchronization for service principal resources |
+> | microsoft.directory/servicePrincipals/synchronizationJobs/manage | Start, restart, and pause application provisioning syncronization jobs |
+> | microsoft.directory/servicePrincipals/synchronization/standard/read | Read provisioning settings associated with the application object |
+> | microsoft.directory/servicePrincipals/synchronizationSchema/manage | Create and manage application provisioning syncronization jobs and schema |
 > | microsoft.directory/provisioningLogs/allProperties/read | Read all properties of provisioning logs |
 
 ## Next steps