Merge branch 'master' of https://github.com/Microsoft/azure-docs-pr into asc-faq

Author: TerryLanfear

articles/aks/networking-overview.md

@@ -7,7 +7,7 @@ manager: jeconnoc
 
 ms.service: container-service
 ms.topic: article
-ms.date: 05/07/2018
+ms.date: 06/04/2018
 ms.author: marsma
 ---
 
@@ -51,7 +51,7 @@ Advanced networking provides the following benefits:
 * Do not create more than one AKS cluster in the same subnet.
 * Advanced networking for AKS does not support VNets that use Azure Private DNS Zones.
 * AKS clusters may not use `169.254.0.0/16`, `172.30.0.0/16`, or `172.31.0.0/16` for the Kubernetes service address range.
-* The service principal used for the AKS cluster must have `Owner` permissions to the resource group containing the existing VNet.
+* The service principal used for the AKS cluster must have `Contributor` permissions to the resource group containing the existing VNet.
 
 ## Plan IP addressing for your cluster
 

articles/automation/automation-webhooks.md

@@ -8,7 +8,7 @@ manager: Kaiqb
 ms.service: cognitive-services
 ms.component: language-understanding
 ms.topic: article
-ms.date: 03/16/2018
+ms.date: 06/04/2018
 ms.author: v-geberr
 ---
 
@@ -32,8 +32,21 @@ If your authoring key is compromised, reset the key. The key is reset on all you
 ## Delete account
 See [Data storage and removal](luis-concept-data-storage.md#accounts) for information about what data is deleted when you delete your account. 
 
+## Azure Active Directory tenant user
+LUIS uses standard Azure Active Directory (Azure AD) consent flow. 
+
+The tenant admin should work directly with the user who needs access granted to use LUIS in the Azure AD. 
+
+First, the user signs into LUIS, and sees the pop-up dialog needing admin approval. The user contacts the tenant admin before continuing. 
+
+Second, the tenant admin signs into LUIS, and sees a consent flow pop-up dialog. This is the dialog the admin needs to give permission for the user. Once the admin accepts the permission, the user is able to continue with LUIS.
+
+If the tenant admin will not sign in to LUIS, the admin can access [consent](https://account.activedirectory.windowsazure.com/Consent.aspx?ClientID=65920ba3-ab61-4a9b-9b10-505e5ce61b58) for LUIS. 
+
+If the tenant admin only wants certain users to use LUIS, refer to this [identity blog](https://blogs.technet.microsoft.com/tfg/2017/10/15/english-tips-to-manage-azure-ad-users-consent-to-applications-using-azure-ad-graph-api/).
+
 ## Next steps
 
 Learn more about your [authoring key](luis-concept-keys.md#authoring-key). 
 
-[LUIS]: luis-reference-regions.md
+[LUIS]: luis-reference-regions.md