Merge pull request #196954 from rolyon/rolyon-abac-attributes-allowed-values-update-v2

[Azure ABAC] Characters for attribute values

Author: PRMerger7

articles/active-directory/fundamentals/custom-security-attributes-overview.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: fundamentals
 ms.workload: identity
 ms.topic: conceptual
-ms.date: 03/28/2022
+ms.date: 05/09/2022
 ms.collection: M365-identity-device-management
 ---
 
@@ -149,8 +149,9 @@ Here are some of the limits and constraints for custom security attributes.
 > | Predefined values per attribute definition | 100 |  |
 > | Attribute value length | 64 | Unicode characters |
 > | Attribute values assigned per object | 50 | Values can be distributed across single and multi-valued attributes.<br/>Example: 5 attributes with 10 values each or 50 attributes with 1 value each |
-> | Characters not allowed for:<br/>Attribute set name<br/>Attribute name | ``<space> ` ~ ! @ # $ % ^ & * ( ) _ - + = { [ } ] \| \ : ; " ' < , > . ? /`` | Attribute set name and attribute name cannot start with a number |
-> | Characters not allowed for:<br/>Attribute values | `# % & * + \ : " / < > ?` |  |
+> | Special characters **not** allowed for:<br/>Attribute set name<br/>Attribute name | ``<space> ` ~ ! @ # $ % ^ & * ( ) _ - + = { [ } ] \| \ : ; " ' < , > . ? /`` | Attribute set name and attribute name cannot start with a number |
+> | Special characters allowed for attribute values | All special characters |  |
+> | Special characters allowed for attribute values when used with blob index tags | `<space> + - . : = _ /` | If you plan to use [attribute values with blob index tags](../../role-based-access-control/conditions-custom-security-attributes.md), these are the only special characters allowed for blob index tags. For more information, see [Setting blob index tags](../../storage/blobs/storage-manage-find-blobs.md#setting-blob-index-tags). |
 
 ## Custom security attribute roles
 

articles/role-based-access-control/conditions-custom-security-attributes.md

@@ -7,7 +7,7 @@ ms.service: role-based-access-control
 ms.subservice: conditions
 ms.topic: how-to
 ms.workload: identity
-ms.date: 11/16/2021
+ms.date: 05/09/2022
 ms.author: rolyon
 
 #Customer intent: As a dev, devops, or it admin, I want to 
@@ -94,7 +94,10 @@ For more information about conditions, see [What is Azure attribute-based access
     | --- | --- | --- |
     | Baker text file | Project | Baker |
     | Cascade text file | Project | Cascade |
- 
+
+    > [!TIP]
+    > For information about the characters that are allowed for blob index tags, see [Setting blob index tags](../storage/blobs/storage-manage-find-blobs.md#setting-blob-index-tags).
+
 ## Step 4: Assign Storage Blob Data Reader role with a condition
 
 1. Open a new tab and sign in to the [Azure portal](https://portal.azure.com).