Making first two step updates

Author: barclayn

articles/active-directory/enterprise-users/domains-admin-takeover.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: enterprise-users
 ms.topic: how-to
 ms.workload: identity
-ms.date: 09/06/2023
+ms.date: 09/08/2023
 ms.author: barclayn
 ms.reviewer: sumitp
 ms.custom: it-pro, seo-update-azuread-jan, has-azure-ad-ps-ref
@@ -18,7 +18,7 @@ ms.collection: M365-identity-device-management
 ---
 # Take over an unmanaged directory as administrator in Azure Active Directory
 
-This article describes two ways to take over a DNS domain name in an unmanaged directory in Microsoft Entra ID (Azure AD). When a self-service user signs up for a cloud service that uses Microsoft Entra ID, they're added to an unmanaged Entra ID directory based on their email domain. For more about self-service or "viral" sign-up for a service, see [What is self-service sign-up for Microsoft Entra ID?](directory-self-service-signup.md)
+This article describes two ways to take over a DNS domain name in an unmanaged directory in Microsoft Entra ID formerly known as Azure AD. When a self-service user signs up for a cloud service that uses Microsoft Entra ID, they're added to an unmanaged Entra ID directory based on their email domain. For more about self-service or "viral" sign-up for a service, see [What is self-service sign-up for Microsoft Entra ID?](directory-self-service-signup.md)
 
 
 > [!VIDEO https://www.youtube.com/embed/GOSpjHtrRsg]
@@ -106,7 +106,6 @@ External admin takeover isn't supported for any service that has service plans t
 > [!NOTE]
 > External admin takeover is not supported cross cloud boundaries (ex. Azure Commercial to Azure Government).  In these scenarios it is recommended to perform External admin takeover into another Azure Commercial tenant, and then delete the domain from this tenant so you may verify successfully into the destination Azure Government tenant.
 
-You can optionally use the [**ForceTakeover** option](#azure-ad-powershell-cmdlets-for-the-forcetakeover-option) for removing the domain name from the unmanaged organization and verifying it on the desired organization. 
 
 #### More information about RMS for individuals
 

articles/active-directory/enterprise-users/domains-manage.md

@@ -28,8 +28,8 @@ A domain name is an important part of the identifier for resources in many Azure
 
 When your organization is created, the initial domain name, such as ‘contoso.onmicrosoft.com,’ is also the primary domain name. The primary domain is the default domain name for a new user when you create a new user. Setting a primary domain name streamlines the process for an administrator to create new users in the portal. To change the primary domain name:
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with an account that's a Global Administrator for the organization.
-2. Select **Azure Active Directory**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).
 3. Select **Custom domain names**.
 
    ![Opening the user management page](./media/domains-manage/add-custom-domain.png)

articles/active-directory/enterprise-users/groups-assign-sensitivity-labels.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: enterprise-users
 ms.workload: identity
 ms.topic: how-to
-ms.date: 06/28/2023
+ms.date: 09/08/2023
 ms.author: barclayn
 ms.reviewer: krbain
 ms.custom: it-pro, has-azure-ad-ps-ref
@@ -81,10 +81,9 @@ You will also need to synchronize your sensitivity labels to Azure AD. For instr
 
 ## Assign a label to a new group in Azure portal
 
-[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
-
-1. Sign in to the [Azure portal](https://portal.azure.com).
-1. Browse to **Azure Active Directory** > **Groups**, and then select **New group**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).
+1. Choose **Groups** > **All groups** > **New group**.
 1. On the **New Group** page, select **Office 365**, and then fill out the required information for the new group and select a sensitivity label from the list.
 
    ![Assign a sensitivity label in the New groups page](./media/groups-assign-sensitivity-labels/new-group-page.png)
@@ -95,8 +94,9 @@ Your group is created and the site and group settings associated with the select
 
 ## Assign a label to an existing group in Azure portal
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with a Groups admin account, or as a group owner.
-1. Browse to **Azure Active Directory** > **Groups**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).
+1. Select **Groups**.
 1. From the **All groups** page, select the group that you want to label.
 1. On the selected group's page, select **Properties** and select a sensitivity label from the list.
 
@@ -106,8 +106,9 @@ Your group is created and the site and group settings associated with the select
 
 ## Remove a label from an existing group in Azure portal
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with a Global Administrator or Groups admin account, or as a group owner.
-1. Browse to **Azure Active Directory** > **Groups**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).
+1. Select **Groups** > **All groups**.
 1. From the **All groups** page, select the group that you want to remove the label from.
 1. On the **Group** page, select **Properties**.
 1. Select **Remove**.
@@ -146,9 +147,10 @@ If the label you are looking for is not in the list, this could be the case for
 
 Labels can be swapped at any time using the same steps as assigning a label to an existing group, as follows:
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with a Global or Group administrator account or as group owner.
-1. Browse to **Azure Active Directory** > **Groups**.
-1. From the **All groups** page, select the group that you want to label.
+1. 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).
+1. Select **Groups**.
+1. Choose **All groups**, select the group that you want to label.
 1. On the selected group's page, select **Properties** and select a new sensitivity label from the list.
 1. Select **Save**.
 

articles/active-directory/enterprise-users/groups-bulk-download.md

@@ -27,8 +27,9 @@ You can download a list of all the groups in your organization to a comma-separa
 >[!NOTE]
 > The columns downloaded are pre-defined
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with an account in your organization.
-1. In Azure AD, select **Groups** > **Download groups**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).
+1. Select **Groups** > **Download groups**.
 1. On the **Groups download** page, select **Start** to receive a CSV file listing your groups.
 
    ![The download groups command is on the All groups page](./media/groups-bulk-download/bulk-download.png)

articles/active-directory/enterprise-users/groups-bulk-remove-members.md

@@ -5,7 +5,7 @@ services: active-directory
 author: barclayn
 ms.author: barclayn
 manager: amycolannino
-ms.date: 09/22/2021
+ms.date: 09/08/2023
 ms.topic: how-to
 ms.service: active-directory
 ms.subservice: enterprise-users
@@ -44,8 +44,9 @@ The rows in a downloaded CSV template are as follows:
 
 [!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with a User administrator account in the organization. Group owners can also bulk remove members of groups they own.
-1. In Azure AD, select **Groups** > **All groups**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).
+1. Select **Groups** > **All groups**.
 1. Open the group from which you're removing members and then select **Members**.
 1. On the **Members** page, select **Remove members**.
 1. On the **Bulk remove group members** page, select **Download** to get the CSV file template with required group member properties.

articles/active-directory/enterprise-users/groups-change-type.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: enterprise-users
 ms.workload: identity
 ms.topic: how-to
-ms.date: 06/23/2022
+ms.date: 09/06/2023
 ms.author: barclayn
 ms.reviewer: krbain
 ms.custom: it-pro, has-azure-ad-ps-ref
@@ -27,13 +27,14 @@ You can change a group's membership from static to dynamic (or vice-versa) In Az
 
 ## Change the membership type for a group
 
-[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+The following steps can be performed using an account that has either the Global administrator, user administrator or groups administrator roles assigned. 
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with an account that is a Global Administrator, User Administrator, or Groups Administrator in your Azure AD organization.
-2. Browse to **Azure Active Directory** > **Groups**.
-3. From the **All groups** list, open the group that you want to change.
-4. Select **Properties**.
-5. On the **Properties** page for the group, select a **Membership type** of either Assigned (static), Dynamic User, or Dynamic Device, depending on your desired membership type. For dynamic membership, you can use the rule builder to select options for a simple rule or write a membership rule yourself. 
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Groups Administrator](../roles/permissions-reference.md#groups-administrator).
+1. Select Microsoft Entra ID (Azure AD).
+1.  **Groups**.
+1. From the **All groups** list, open the group that you want to change.
+1. Select **Properties**.
+1. On the **Properties** page for the group, select a **Membership type** of either Assigned (static), Dynamic User, or Dynamic Device, depending on your desired membership type. For dynamic membership, you can use the rule builder to select options for a simple rule or write a membership rule yourself. 
 
 The following steps are an example of changing a group from static to dynamic membership for a group of users.
 

articles/active-directory/enterprise-users/groups-create-rule.md

@@ -10,7 +10,7 @@ ms.service: active-directory
 ms.subservice: enterprise-users
 ms.workload: identity
 ms.topic: how-to
-ms.date: 11/14/2022
+ms.date: 09/08/2023
 ms.author: barclayn
 ms.reviewer: krbain
 ms.custom: it-pro
@@ -43,8 +43,8 @@ For examples of syntax, supported properties, operators, and values for a member
 
 [!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with an account that is in the Global Administrator, Intune Administrator, or User Administrator role in the Azure AD organization.
-1. Browse to **Azure Active Directory** > **Groups**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).> **Groups**.
 1. Select **All groups**, and select **New group**.
 
    ![Screenshot showing how to select the "add new group" action](./media/groups-create-rule/create-new-group.png)
@@ -63,8 +63,9 @@ If the rule you entered isn't valid, an explanation of why the rule couldn't be
 
 ## To update an existing rule
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with an account that is in the Global Administrator, Group Administrator, Intune Administrator, or User Administrator role in the Azure AD organization.
-1. Browse to **Azure Active Directory** > **Groups** > **All groups**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).
+1. Select **Groups** > **All groups**.
 1. Select a group to open its profile.
 1. On the profile page for the group, select **Dynamic membership rules**. The rule builder supports up to five expressions. To add more than five expressions, you must use the text box.
 

articles/active-directory/enterprise-users/groups-dynamic-tutorial.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: enterprise-users
 ms.workload: identity
 ms.topic: tutorial
-ms.date: 06/24/2022
+ms.date: 09/08/2023
 ms.author: barclayn
 ms.reviewer: krbain
 ms.custom: "it-pro;seo-update-azuread-jan"
@@ -41,8 +41,9 @@ You're not required to assign licenses to the users for them to be members in dy
 
 First, you'll create a group for your guest users who all are from a single partner company. They need special licensing, so it's often more efficient to create a group for this purpose.
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with an account that is the global administrator for your organization.
-2. Select **Azure Active Directory** > **Groups** > **New group**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).
+2. Select **Groups** > **All groups** > **New group**.
    ![select command to start a new group](./media/groups-dynamic-tutorial/new-group.png)
 3. On the **Group** blade:
 
@@ -84,12 +85,14 @@ Perhaps your ultimate administrative plan is to assign all of your guest users t
 
 ## Clean up resources
 
-**To remove the guest users group**
+### To remove the guest users group
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with an account that is the Global Administrator for your organization.
-2. Select **Azure Active Directory** > **Groups**. Select the **Guest users Contoso** group, select the ellipsis (...), and then select **Delete**. When you delete the group, any assigned licenses are removed.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).
+2. Select **Groups**. Select the **Guest users Contoso** group, select the ellipsis (...), and then select **Delete**. When you delete the group, any assigned licenses are removed.
+
+### To restore the All Users group
 
-**To restore the All Users group**
 1. Select **Azure Active Directory** > **Groups**. Select the name of the **All users** group to open the group.
 1. Select **Dynamic membership rules**, clear all the text in the rule, and select **Save**.
 

articles/active-directory/enterprise-users/groups-lifecycle.md

@@ -11,7 +11,7 @@ ms.service: active-directory
 ms.subservice: enterprise-users
 ms.workload: identity
 ms.topic: how-to
-ms.date: 06/24/2022
+ms.date: 09/08/2023
 ms.author: barclayn                   
 ms.reviewer: jodah
 ms.custom: it-pro, has-azure-ad-ps-ref
@@ -71,11 +71,9 @@ For more information on permissions to restore a deleted group, see [Restore a d
 
 ## Set group expiration
 
-[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
-
-1. Sign in to the [Azure portal](https://portal.azure.com) with an account that is a Global Administrator in your Azure AD organization.
-
-2. Browse to **Azure Active Directory** > **Groups**, then select **Expiration** to open the expiration settings.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Select Microsoft Entra ID (Azure AD).
+1. Select **Groups**, **All groups** then select **Expiration** to open the expiration settings.
 
    ![Expiration settings for groups](./media/groups-lifecycle/expiration-settings.png)
 

articles/active-directory/enterprise-users/groups-naming-policy.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: enterprise-users
 ms.workload: identity
 ms.topic: how-to
-ms.date: 06/24/2022
+ms.date: 09/08/2023
 ms.author: barclayn                   
 ms.reviewer: krbain
 ms.custom: it-pro, seo-update-azuread-jan, has-azure-ad-ps-ref
@@ -77,10 +77,10 @@ Some administrator roles are exempted from these policies, across all group work
 
 ## Configure naming policy in Azure portal
 
-[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Groups Administrator](../roles/permissions-reference.md#groups-administrator).
+1. Select Microsoft Entra ID (Azure AD).
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with a Group Administrator account.
-1. Browse to **Azure Active Directory** > **Groups**, then select **Naming policy** to open the Naming policy page.
+1. Select **All groups** > **Groups**, then select **Naming policy** to open the Naming policy page.
 
     ![open the Naming policy page in the admin center](./media/groups-naming-policy/policy.png)