Merge pull request #212534 from Blackmist/v2-ga-identity

fixing links

Author: prmerger-automator[bot]

articles/machine-learning/how-to-administrate-data-authentication.md

@@ -31,7 +31,7 @@ In general, data access from studio involves the following checks:
 
 * Who is accessing?
     - There are multiple different types of authentication depending on the storage type. For example, account key, token, service principal, managed identity, and user identity.
-    - If authentication is made using a user identity, then it's important to know *which* user is trying to access storage. Learn more about [identity-based data access](how-to-identity-based-data-access.md).
+    - If authentication is made using a user identity, then it's important to know *which* user is trying to access storage. For more information on authenticating a _user_, see [authentication for Azure Machine Learning](how-to-setup-authentication.md). For more information on service-level authentication, see [authentication between AzureML and other services](how-to-identity-based-service-authentication.md).
 * Do they have permission?
     - Are the credentials correct? If so, does the service principal, managed identity, etc., have the necessary permissions on the storage? Permissions are granted using Azure role-based access controls (Azure RBAC).
     - [Reader](../role-based-access-control/built-in-roles.md#reader) of the storage account reads metadata of the storage.

articles/machine-learning/how-to-identity-based-service-authentication.md

@@ -29,7 +29,7 @@ Azure Machine Learning is composed of multiple Azure services. There are multipl
 * The Azure ML compute cluster uses a __managed identity__ to retrieve connection information for datastores from Azure Key Vault and to pull Docker images from ACR. You can also configure identity-based access to datastores, which will instead use the managed identity of the compute cluster.
 * Data access can happen along multiple paths depending on the data storage service and your configuration. For example, authentication to the datastore may use an account key, token, security principal, managed identity, or user identity.
 
-    For information on how data access is authenticated, see the [Data administration](how-to-administrate-data-authentication.md) article.
+    For more information on how data access is authenticated, see the [Data administration](how-to-administrate-data-authentication.md) article.
 
 * Managed online endpoints can use a managed identity to access Azure resources when performing inference. For more information, see [Access Azure resources from an online endpoint](how-to-access-resources-from-endpoints-managed-identities.md).