Merge pull request #101945 from MicrosoftDocs/master

1/22 AM Publish

Author: huypub

articles/active-directory/governance/entitlement-management-organization.md

@@ -12,7 +12,7 @@ ms.tgt_pltfrm: na
 ms.devlang: na
 ms.topic: conceptual
 ms.subservice: compliance
-ms.date: 10/24/2019
+ms.date: 01/22/2020
 ms.author: ajburnle
 ms.reviewer: mwahl
 ms.collection: M365-identity-device-management
@@ -30,9 +30,12 @@ Azure AD entitlement management enables you to collaborate with people outside y
 
 A connected organization is an external Azure AD directory or domain that you have a relationship with.
 
-For example, suppose you work at Woodgrove Bank and you want to collaborate with two external organizations: Graphic Design Institute and Contoso. You've been told by your contact at Graphic Design Institute that they use Azure AD, and that Graphic Design Institute's users have a user principal name that ends with `graphicdesigninstitute.com`. And you've been told by your contact at Contoso that they do not yet use Azure AD, but that Contoso's users have a user principal name that ends with `contoso.com`.
+For example, suppose you work at Woodgrove Bank and you want to collaborate with two external organizations. These two organizations have different configurations:
 
-You can configure two connected organizations -- one for Graphic Design Institute with the domain `graphicdesigninstitute.com`, and one for Contoso with the domain `contoso.com`. If you then add those two connected organizations to a policy, users from each organization that have a user principal name that matches the policy can request access packages. Furthermore, because Graphic Design Institute has been identified as using Azure AD, then if Graphic Design Institute subsequently has subdomains, such as `graphicdesigninstitute.example`, then users with that user principal name will also be able to request access packages using the same policy.
+- Graphic Design Institute uses Azure AD and their users have a user principal name that ends with `graphicdesigninstitute.com`
+- Contoso does not yet use Azure AD. Contoso users have a user principal name that ends with `contoso.com`.
+
+In this case, you can configure two connected organizations. You would create one connected organization for Graphic Design Institute and one for Contoso. If you then add those two connected organizations to a policy, users from each organization with a user principal name matching the policy can request access packages. Users with a user principal name that has a domain of graphicdesigninstitute.com would match the Graphic Design Institute connected organization and be allowed to submit requests, while users with a user principal name that has a domain of contoso.com would match the Contoso connected organization and would also be allowed to request packages. Furthermore, because Graphic Design Institute uses Azure AD, any users with a principal name matching a [verified domain](../fundamentals/add-custom-domain.md#verify-your-custom-domain-name) added to their tenant, such as graphicdesigninstitute.example will also be able to request access packages using the same policy.
 
 ![Connected organization example](./media/entitlement-management-organization/connected-organization-example.png)
 

articles/active-directory/manage-apps/toc.yml

@@ -141,7 +141,7 @@
         items:
         - name: Configure user consent
           href: configure-user-consent.md
-          name: Manage and evaluate consent requests
+        - name: Manage and evaluate consent requests
           href: manage-consent-requests.md
         - name: Grant tenant-wide admin consent
           href: grant-admin-consent.md

articles/active-directory/privileged-identity-management/azure-pim-resource-rbac.md

@@ -107,6 +107,9 @@ My audit enables you to view your personal role activity.
 1. Filter the history using a predefined date or custom range.
 
     ![Audit list for the current user](media/azure-pim-resource-rbac/my-audit-time.png)
+    
+> [!NOTE]
+> Access to audit history requires either a Global Administrator or Privileged Role Administrator role.
 
 ## Next steps
 

articles/avere-vfxt/avere-vfxt-deploy-plan.md

@@ -4,7 +4,7 @@ description: Explains planning to do before deploying Avere vFXT for Azure
 author: ekpgh
 ms.service: avere-vfxt
 ms.topic: conceptual
-ms.date: 01/13/2020
+ms.date: 01/21/2020
 ms.author: rohogue
 ---
 
@@ -170,6 +170,6 @@ Two built-in Azure roles are used for the Avere vFXT virtual machines:
 
 If you need to customize access roles for Avere vFXT components, you must define your own role and then assign it to the VMs at the time they are created. You cannot use the deployment template in the Azure Marketplace. Consult Microsoft Customer Service and Support by opening a ticket in the Azure portal as described in [Get help with your system](avere-vfxt-open-ticket.md).
 
-## Next step: Understand the deployment process
+## Next steps
 
 [Deployment overview](avere-vfxt-deploy-overview.md) gives the big-picture view of the steps needed to create an Avere vFXT for Azure system and get it ready to serve data.

articles/avere-vfxt/avere-vfxt-deploy.md

@@ -10,7 +10,7 @@ ms.author: rohogue
 
 # Deploy the vFXT cluster
 
-This procedure walks you through using the deployment wizard available from the Azure Marketplace. The wizard automatically deploys the cluster by using an Azure Resource Manager template. After you enter the parameters in the form and click **Create**, Azure automatically completes these steps:
+This procedure walks you through using the deployment wizard available from the Azure Marketplace. The wizard automatically deploys the cluster by using an Azure Resource Manager template. After you enter the parameters in the form and click **Create**, Azure automatically completes these tasks:
 
 * Creates the cluster controller, which is a basic VM that contains the software needed to deploy and manage the cluster.
 * Sets up resource group and virtual network infrastructure, including creating new elements.
@@ -23,10 +23,10 @@ After following the instructions in this document, you will have a virtual netwo
 
 Before using the creation template, make sure you have addressed these prerequisites:  
 
-1. [New subscription](avere-vfxt-prereqs.md#create-a-new-subscription)
-1. [Subscription owner permissions](avere-vfxt-prereqs.md#configure-subscription-owner-permissions)
-1. [Quota for the vFXT cluster](avere-vfxt-prereqs.md#quota-for-the-vfxt-cluster)
-1. [Storage service endpoint (if needed)](avere-vfxt-prereqs.md#create-a-storage-service-endpoint-in-your-virtual-network-if-needed) - Required for deployments that use an existing virtual network and create blob storage
+* [New subscription](avere-vfxt-prereqs.md#create-a-new-subscription)
+* [Subscription owner permissions](avere-vfxt-prereqs.md#configure-subscription-owner-permissions)
+* [Quota for the vFXT cluster](avere-vfxt-prereqs.md#quota-for-the-vfxt-cluster)
+* [Storage service endpoint (if needed)](avere-vfxt-prereqs.md#create-a-storage-service-endpoint-in-your-virtual-network-if-needed) - Required for deployments that use an existing virtual network and create blob storage
 
 For more information about cluster deployment steps and planning, read [Plan your Avere vFXT system](avere-vfxt-deploy-plan.md) and [Deployment overview](avere-vfxt-deploy-overview.md).
 

articles/avere-vfxt/avere-vfxt-prereqs.md

@@ -4,7 +4,7 @@ description: Prerequisites for Avere vFXT for Azure
 author: ekpgh
 ms.service: avere-vfxt
 ms.topic: conceptual
-ms.date: 01/13/2020
+ms.date: 01/21/2020
 ms.author: rohogue
 ---
 
@@ -18,10 +18,10 @@ Start by creating a new Azure subscription. Use a separate subscription for each
 
 To create a new Azure subscription in the Azure portal:
 
-* Navigate to the [Subscriptions blade](https://ms.portal.azure.com/#blade/Microsoft_Azure_Billing/SubscriptionsBlade)
-* Click the **+ Add** button at the top
-* Sign in if prompted
-* Select an offer and walk through the steps to create a new subscription
+1. Navigate to the [Subscriptions blade](https://ms.portal.azure.com/#blade/Microsoft_Azure_Billing/SubscriptionsBlade)
+1. Click the **+ Add** button at the top
+1. Sign in if prompted
+1. Select an offer and walk through the steps to create a new subscription
 
 ## Configure subscription owner permissions
 
@@ -99,6 +99,6 @@ Create the storage service endpoint from the Azure portal.
 
    ![Azure portal screenshot with annotations for the steps of creating the service endpoint](media/avere-vfxt-service-endpoint.png)
 
-## Next step: Create the vFXT cluster
+## Next steps
 
 After completing these prerequisites, you can create the cluster. Read [Deploy the vFXT cluster](avere-vfxt-deploy.md) for instructions.

articles/azure-functions/durable/durable-functions-event-publishing.md

@@ -272,7 +272,7 @@ The following list explains the lifecycle events schema:
 
 ## How to test locally
 
-To test locally, use [ngrok](../functions-bindings-event-grid.md#local-testing-with-ngrok).
+To test locally, read [Azure Function Event Grid Trigger Local Debugging](../functions-debug-event-grid-trigger-local.md).
 
 ## Next steps