Merge pull request #157793 from zeinab-mk/zeinam-purview

Zeinam purview

Author: v-ccolin

articles/purview/manage-credentials.md

@@ -6,7 +6,7 @@ ms.author: viseshag
 ms.service: purview
 ms.subservice: purview-data-catalog
 ms.topic: how-to
-ms.date: 02/11/2021
+ms.date: 05/08/2021
 ---
 
 # Credentials for source authentication in Azure Purview
@@ -52,6 +52,19 @@ Before you can create a Credential, first associate one or more of your existing
 
 ## Grant the Purview managed identity access to your Azure Key Vault
 
+Currently Azure Key Vault supports two permission models:
+
+- Option 1 - Access Policies 
+- Option 2 - Role-based Access Control 
+
+Before assigning access to Purview managed identity, first identify your Azure Key Vault permission model from Key Vault resource **Access Policies** in the menu. Follow steps below based on relevant the permission model.  
+
+:::image type="content" source="media/manage-credentials/akv-permission-model.png" alt-text="Azure Key Vault Permission Model"::: 
+
+### Option 1 - Assign access using using Key Vault Access Policy  
+
+Follow these steps only if permission model in your Azure Key Vault resource is set to **Vault Access Policy**:
+
 1. Navigate to your Azure Key Vault.
 
 2. Select the **Access policies** page.
@@ -72,6 +85,21 @@ Before you can create a Credential, first associate one or more of your existing
 
    :::image type="content" source="media/manage-credentials/save-access-policy.png" alt-text="Save access policy":::
 
+### Option 2 - Assign access using Key Vault Azure role-based access control 
+
+Follow these steps only if permission model in your Azure Key Vault resource is set to **Azure role-based access control**:
+
+1. Navigate to your Azure Key Vault.
+
+2. Select **Access Control (IAM)** from the left navigation menu.
+
+3. Select **+ Add**.
+
+4. Set the **Role** to **Key Vault Secrets User** and enter your enter your Azure Purview account name under **Select** input box. Then, select Save to give this role assignment to your Purview account.
+
+   :::image type="content" source="media/manage-credentials/akv-add-rbac.png" alt-text="Azure Key Vault RBAC":::
+
+
 ## Create a new credential
 
 These credential types are supported in Purview:

articles/purview/manage-data-sources.md

@@ -25,11 +25,11 @@ Use the following steps to register a new source.
 
    :::image type="content" source="media/manage-data-sources/select-source-type.png" alt-text="Select a data source type in the Register sources page":::
 
-1. Fill out the form on the **Register sources** page. Select a name for your source and enter the relevant information. If you chose **From Azure subscription** as your account selection method, the sources in your subscription appear in a dropdown list. Alternatively, you can enter your source information manually.
+2. Fill out the form on the **Register sources** page. Select a name for your source and enter the relevant information. If you chose **From Azure subscription** as your account selection method, the sources in your subscription appear in a dropdown list. 
 
    :::image type="content" source="media/manage-data-sources/register-sources-form.png" alt-text="Form for data source information":::
 
-1. Select **Finish**.
+3. Select **Register**.
 
 ## View sources