Merge pull request #163056 from amsliu/adddiagram

jborsecnik · web-flow · commit 79fa091076bf · 2021-06-20T14:56:21.000-07:00
Add diagram showing trust relationship in Azure AD
diff --git a/articles/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory.md b/articles/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory.md
@@ -28,6 +28,8 @@ When a user signs up for a Microsoft cloud service, a new Azure AD tenant is
 
 All of your users have a single *home* directory for authentication. Your users can also be guests in other directories. You can see both the home and guest directories for each user in Azure AD.
 
+:::image type="content" source="media/active-directory-how-subscriptions-associated-directory/trust-relationship-azure-ad.png" alt-text="Screenshot that shows the trust relationship between Azure subscriptions and Azure active directories.":::
+
 > [!Important]
 > When you associate a subscription with a different directory, users that have roles assigned using [Azure role-based access control](../../role-based-access-control/role-assignments-portal.md) lose their access. Classic subscription administrators, including Service Administrator and Co-Administrators, also lose access.
 >

Original file line number	Diff line number	Diff line change
`@@ -28,6 +28,8 @@ When a user signs up for a Microsoft cloud service, a new Azure AD tenant is`
`28`	`28`
`29`	`29`	`All of your users have a single home directory for authentication. Your users can also be guests in other directories. You can see both the home and guest directories for each user in Azure AD.`
`30`	`30`
	`31`	`+:::image type="content" source="media/active-directory-how-subscriptions-associated-directory/trust-relationship-azure-ad.png" alt-text="Screenshot that shows the trust relationship between Azure subscriptions and Azure active directories.":::`
	`32`	`+`
`31`	`33`	`> [!Important]`
`32`	`34`	`> When you associate a subscription with a different directory, users that have roles assigned using [Azure role-based access control](../../role-based-access-control/role-assignments-portal.md) lose their access. Classic subscription administrators, including Service Administrator and Co-Administrators, also lose access.`
`33`	`35`	`>`