Merge pull request #250814 from MicrosoftGuyJFlo/GlobalSecureAccessBrandingUpdates

[Microsoft Entra] Global Secure Access branding updates

Author: Jill Grant

articles/global-secure-access/concept-global-secure-access-logs-monitoring.md

@@ -44,4 +44,4 @@ For more information, see [Enriched Office 365 logs](how-to-view-enriched-logs.m
 
 ## Next steps
 
-- [Learn how to access, store, and analyze Azure AD activity logs](/azure/active-directory/reports-monitoring/howto-access-activity-logs)
+- [Learn how to access, store, and analyze activity logs](/azure/active-directory/reports-monitoring/howto-access-activity-logs)

articles/global-secure-access/concept-traffic-dashboard.md

@@ -27,8 +27,8 @@ Viewing the Global Secure Access dashboard requires a Reports Reader role in Mic
 
 To access the dashboard:
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/#home).
-1. Go to **Global Secure Access (preview)** > **Dashboard**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference#global-secure-access-administrator).
+1. Browse to **Global Secure Access (preview)** > **Dashboard**.
 
     :::image type="content" source="media/concept-traffic-dashboard/traffic-dashboard.png" alt-text="Screenshot of the Private access profile, with the view applications link highlighted." lightbox="media/concept-traffic-dashboard/traffic-dashboard-expanded.png":::
 

articles/global-secure-access/how-to-access-audit-logs.md

@@ -32,15 +32,15 @@ There are several ways to view the audit logs. For more information on the optio
 
 ### Access audit logs from the Microsoft Entra admin center
 
-You can access the audit logs from **Global Secure Access** and from **Microsoft Entra ID Monitoring and health**.
+You can access the audit logs from **Global Secure Access** and from **Microsoft Entra ID Monitoring & health**.
 
 **From Global Secure Access:**
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/#home) using one of the required roles.
-1. Go to **Global Secure Access** > **Audit logs**. The filters are pre-populated with the categories and activities related to Global Secure Access.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/) using one of the required roles.
+1. Browse to **Global Secure Access (preview)** > **Audit logs**. The filters are pre-populated with the categories and activities related to Global Secure Access.
 
-**From Microsoft Entra ID Monitoring and health:**
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/#home) using one of the required roles.
-1. Go to **Identity** > **Monitoring and health** > **Audit logs**.
+**From Microsoft Entra ID Monitoring & health:**
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/) using one of the required roles.
+1. Browse to **Identity** > **Monitoring & health** > **Audit logs**.
 1. Select the **Date** range you want to query.
 1. Open the **Service** filter, select **Global Secure Access**, and select the **Apply** button.
 1. Open the **Category** filter, select at least one of the available options, and select the **Apply** button.

articles/global-secure-access/how-to-assign-traffic-profile-to-remote-network.md

@@ -33,8 +33,8 @@ To assign a remote network to a traffic forwarding profile to, you must have:
 
 ## Assign the Microsoft 365 traffic profile to a remote network
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference).
-1. Go to **Global Secure Access (preview)** > **Devices** > **Remote network**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference#global-secure-access-administrator).
+1. Browse to **Global Secure Access (preview)** > **Devices** > **Remote network**.
 1. Select a remote network. 
 1. Select **Traffic profiles**. 
 1. Select (or unselect) the checkbox for **Microsoft 365 traffic forwarding profile**. 
@@ -44,7 +44,7 @@ To assign a remote network to a traffic forwarding profile to, you must have:
 
 ## Assign a remote network to the Microsoft 365 traffic forwarding profile
 
-1. Go to **Global Secure Access** > **Connect** > **Traffic forwarding**.
+1. Browse to **Global Secure Access (preview)** > **Connect** > **Traffic forwarding**.
 1. Select the **Add/edit assignments** button for **Microsoft 365 traffic profile**. 
 
 ![Screenshot of the add/edit assignment button on the Microsoft 365 traffic profile.](media/how-to-assign-traffic-profile-to-remote-network/microsoft-365-traffic-profile-remote-network-button.png)

articles/global-secure-access/how-to-compliant-network.md

@@ -42,7 +42,8 @@ The compliant network is different than [IPv4, IPv6, or geographic locations](/a
 
 To enable the required setting to allow the compliant network check, an administrator must take the following steps.
 
-1. Sign in to the **Microsoft Entra admin center** as a Global Secure Access Administrator.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference#global-secure-access-administrator).
+1. Browse to **Global Secure Access (Preview)** > **Global settings** > **Session management** **Adaptive access**.
 1. Select the toggle to **Enable Global Secure Access signaling in Conditional Access**.
 1. Browse to **Microsoft Entra ID Conditional Access** > **Named locations**.
    1. Confirm you have a location called **All Compliant Network locations** with location type **Network Access**. Organizations can optionally mark this location as trusted.
@@ -56,8 +57,8 @@ To enable the required setting to allow the compliant network check, an administ
 
 The following example shows a Conditional Access policy that requires Exchange Online and SharePoint Online to be accessed from behind a compliant network as part of the preview.
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)** as a Conditional Access Administrator or Security Administrator.
-1. Browse to **Microsoft Entra ID** > **Protection** > **Conditional Access**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Conditional Access Administrator](/azure/active-directory/roles/permissions-reference#conditional-access-administrator).
+1. Browse to **Protection** > **Conditional Access**.
 1. Select **Create new policy**.
 1. Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies.
 1. Under **Assignments**, select **Users or workload identities**.

articles/global-secure-access/how-to-configure-connectors.md

@@ -79,10 +79,10 @@ To use Private Access, install a connector on each Windows server you're using f
 
 **To install the connector**:
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)** as a Global Administrator of the directory that uses Application Proxy.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a Global Administrator of the directory that uses Application Proxy.
     -  For example, if the tenant domain is contoso.com, the admin should be [email protected] or any other admin alias on that domain.
 1. Select your username in the upper-right corner. Verify you're signed in to a directory that uses Application Proxy. If you need to change directories, select **Switch directory** and choose a directory that uses Application Proxy.
-1. Go to **Global Secure Access (Preview)** > **Connect** > **Connectors**.
+1. Browse to **Global Secure Access (preview)** > **Connect** > **Connectors**.
 1. Select **Download connector service**.
 
     ![Screenshot of the Download connector service button in the App proxy page.](media/how-to-configure-connectors/app-proxy-download-connector-service.png)
@@ -107,8 +107,8 @@ You can use the Global Secure Access portal or your Windows server to confirm th
 
 To confirm the connector installed and registered correctly:
 
-1. Sign in to your tenant directory in the Microsoft Entra admin center.
-1. Go to **Global Secure Access (Preview)** > **Connect** > **Connectors**
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a Global Administrator of the directory that uses Application Proxy.
+1. Browse to **Global Secure Access (preview)** > **Connect** > **Connectors**
     - All of your connectors and connector groups appear on this page.
 1. View a connector to verify its details. 
     - Expand the connector to view the details if it's not already expanded.
@@ -135,7 +135,7 @@ To confirm the connector installed and registered correctly:
 
 To create as many connector groups as you want:
 
-1. Go to **Global Secure Access (Preview)** > **Connect** > **Connectors**.
+1. Browse to **Global Secure Access (preview)** > **Connect** > **Connectors**.
 1. Select **New connector group**. 
 1. Give your new connector group a name, then use the dropdown menu to select which connectors belong in this group.
 1. Select **Save**.

articles/global-secure-access/how-to-configure-per-app-access.md

@@ -26,7 +26,7 @@ To configure a Global Secure Access app, you must have:
 To manage App Proxy connector groups, which is required for Global Secure Access apps, you must have:
 
 - An **Application Administrator** role in Microsoft Entra ID
-- An Azure AD Premium P1/P2 license
+- Microsoft Entra P1 or P2 licenses
 
 ### Known limitations
 
@@ -66,8 +66,8 @@ To create a new app, you provide a name, select a connector group, and then add
 
 ### Choose name and connector group
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)** with the appropriate roles. 
-1. Go to **Global Secure Access (preview)** > **Applications** > **Enterprise applications**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) with the appropriate roles. 
+1. Browse to **Global Secure Access (preview)** > **Applications** > **Enterprise applications**.
 1. Select **New application**.
 
     ![Screenshot of the Enterprise apps and Add new application button.](media/how-to-configure-per-app-access/new-enterprise-app.png)
@@ -83,8 +83,8 @@ The **Add application segment** process is where you define the FQDNs and IP add
 
 You can add fully qualified domain names (FQDN), IP addresses, and IP address ranges.
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)**.
-1. Go to **Global Secure Access** > **Applications** > **Enterprise applications**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Browse to **Global Secure Access (preview)** > **Applications** > **Enterprise applications**.
 1. Select **New application**.
 1. Select **Add application segment**.
 
@@ -115,8 +115,8 @@ You can add fully qualified domain names (FQDN), IP addresses, and IP address ra
 
 You need to grant access to the app you created by assigning users and/or groups to the app. For more information, see [Assign users and groups to an application.](/azure/active-directory/manage-apps/assign-user-or-group-access-portal)
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)**.
-1. Go to **Global Secure Access** > **Applications** > **Enterprise applications**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Browse to **Global Secure Access (preview)** > **Applications** > **Enterprise applications**.
 1. Search for and select your application.
 1. Select **Users and groups** from the side menu.
 1. Add users and groups as needed.
@@ -128,8 +128,8 @@ You need to grant access to the app you created by assigning users and/or groups
 
 You can add or update the FQDNs and IP addresses included in your app at any time.
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)**.
-1. Go to **Global Secure Access** > **Applications** > **Enterprise applications**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Browse to **Global Secure Access (preview)** > **Applications** > **Enterprise applications**.
 1. Search for and select your application.
 1. Select **Network access properties** from the side menu.
     - To add a new FQDN or IP address, select **Add  application segment**.
@@ -146,16 +146,16 @@ You can enable or disable access to the Global Secure Access app using the Globa
 Conditional Access policies for Per-app Access are configured at the application level for each app. Conditional Access policies can be created and applied to the application from two places:
 
 - Go to **Global Secure Access (preview)** > **Applications** > **Enterprise applications**. Select an application and then select **Conditional Access** from the side menu.
-- Go to **Microsoft Entra ID** > **Protection** > **Conditional Access** > **Policies**. Select **+ Create new policy**.
+- Go to **Protection** > **Conditional Access** > **Policies**. Select **+ Create new policy**.
 
 For more information, see [Apply Conditional Access policies to Private Access apps](how-to-target-resource-private-access-apps.md).
 
 ## Enable Microsoft Entra Private Access
 
 Once you have your app configured, your private resources added, users assigned to the app, you can enable the Private access traffic forwarding profile. You can enable the profile before configuring a Global Secure Access app, but without the app and profile configured, there's no traffic to forward.
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)**.
-1. Go to **Global Secure Access** > **Connect** > **Traffic forwarding**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Browse to **Global Secure Access (preview)** > **Connect** > **Traffic forwarding**.
 1. Select the checkbox for **Private access profile**.
 
 ![Screenshot of the traffic forwarding page with the Private access profile enabled.](media/how-to-configure-per-app-access/private-access-traffic-profile.png)

articles/global-secure-access/how-to-configure-quick-access.md

@@ -25,7 +25,7 @@ To configure Quick Access, you must have:
 To manage App Proxy connector groups, which is required for Quick Access, you must have:
 
 - An **Application Administrator** role in Microsoft Entra ID
-- An Azure AD Premium P1/P2 license
+- Microsoft Entra P1 or P2 licenses
 
 ### Known limitations
 
@@ -67,8 +67,8 @@ On the Quick Access page, you provide a name for the Quick Access app, select a
 
 ### Name and connector group
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)** with the appropriate roles. 
-1. Go to **Global Secure Access (preview)** > **Applications** > **Quick access**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) with the appropriate roles. 
+1. Browse to **Global Secure Access (preview)** > **Applications** > **Quick access**.
 1. Enter a name. *We recommend using the name Quick Access*. 
 1. Select a Connector group from the dropdown menu.
 
@@ -83,8 +83,8 @@ The **Add Quick Access application segment** portion of this process is where yo
 
 You can add fully qualified domain names (FQDN), IP addresses, and IP address ranges.
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)**.
-1. Go to **Global Secure Access** > **Applications** > **Quick Access**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Browse to **Global Secure Access (preview)** > **Applications** > **Quick Access**.
 1. Select **Add Quick Access application segment**.
 
     ![Screenshot of the Add Quick Access application segment button.](media/how-to-configure-quick-access/add-quick-access-application-segment.png)
@@ -134,8 +134,8 @@ You can view the properties from **Quick Access** or navigate to **Enterprise ap
 
 You can add or update the FQDNs and IP addresses included in your Quick Access app at any time.
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)**.
-1. Go to **Global Secure Access** > **Applications** > **Quick Access**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Browse to **Global Secure Access (preview)** > **Applications** > **Quick Access**.
     - To add an FQDN or IP address, select **Add Quick Access application segment**.
     - To edit an FQDN or IP address, select it from the **Destination type** column.
 
@@ -149,8 +149,8 @@ Creating a Conditional Access policy is covered in detail in [How to create a Co
 
 Once you have your Quick Access app configured, your private resources added, users assigned to the app, you can enable the Private access profile from the **Traffic forwarding** area of Global Secure Access. You can enable the profile before configuring Quick Access, but without the app and profile configured, there's no traffic to forward.
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)**.
-1. Go to **Global Secure Access** > **Connect** > **Traffic forwarding**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Browse to **Global Secure Access (preview)** > **Connect** > **Traffic forwarding**.
 1. Select the checkbox for **Private access profile**.
 
 ![Screenshot of the traffic forwarding page with the Private access profile enabled.](media/how-to-configure-quick-access/private-access-traffic-profile.png)

articles/global-secure-access/how-to-create-remote-networks.md

@@ -41,8 +41,8 @@ To configure remote networks, you must have:
 
 Before you can set up remote networks, you need to onboard your tenant information with Microsoft. This one-time process enables your tenant to use remote network connectivity.
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)** as a Global Secure Access Administrator. 
-1. Go to **Global Secure Access (preview)** > **Devices** > **Remote network**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference#global-secure-access-administrator).
+1. Browse to **Global Secure Access (preview)** > **Devices** > **Remote network**.
 1. Select the link to the **Onboarding form** in the message at the top of the page.
 
     ![Screenshot of the onboarding form link.](media/how-to-create-remote-networks/create-remote-network-onboarding-form-link.png)
@@ -71,8 +71,8 @@ Remote networks are configured on three tabs. You must complete each tab in orde
 ### Basics
 The first step is to provide the name and location of your remote network. Completing this tab is required.
 
-1. Sign in to the **[Microsoft Entra admin center](https://entra.microsoft.com)** as a Global Secure Access Administrator. 
-1. Go to **Global Secure Access (preview)** > **Devices** > **Remote network**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference#global-secure-access-administrator).
+1. Browse to **Global Secure Access (preview)** > **Devices** > **Remote network**.
 1. Select the **Create remote network** button and provide the following details:
     - **Name**
     - **Region**

articles/global-secure-access/how-to-install-windows-client.md

@@ -45,7 +45,7 @@ There are several other limitations based on the traffic forwarding profile in u
 
 The most current version of the Global Secure Access Client can be downloaded from the Microsoft Entra admin center.
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference#global-secure-access-administrator).
 1. Browse to **Global Secure Access (Preview)** > **Devices** > **Clients**.
 1. Select **Download**.