link-image-fix

Author: shlipsey3

articles/active-directory/includes/how-to-access-workbooks.md

@@ -6,12 +6,12 @@ manager: amycolannino
 ms.service: active-directory
 ms.workload: identity
 ms.topic: include
-ms.date: 10/03/2023
+ms.date: 10/04/2023
 ms.author: sarahlipsey
 ms.custom: include file
 ---
 
-There are several prerequisites for accessing Microsoft Entra workbooks. You must have the appropriate Microsoft Entra *and* Azure Monitor roles. You must also have a Log Analytics workspace *and* access to that workspace. For more information, see [How to use Microsoft Entra workbooks](./howto-use-workbooks.md#prerequisites).
+There are several prerequisites for accessing Microsoft Entra workbooks. You must have the appropriate Microsoft Entra *and* Azure Monitor roles. You must also have a Log Analytics workspace *and* access to that workspace. For more information, see [How to use Microsoft Entra workbooks](../reports-monitoring/howto-use-workbooks.md#prerequisites).
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) using the appropriate combination of roles.
 1. Browse to **Identity** > **Monitoring & health** > **Workbooks**.

articles/active-directory/reports-monitoring/howto-use-workbooks.md

@@ -1,16 +1,18 @@
 ---
-title: Azure Monitor workbooks for Microsoft Entra ID
-description: Learn how to use Azure Monitor workbooks for analyzing identity logs in Microsoft Entra ID reports.
+title: How to use Microsoft Entra workbooks
+description: Learn how to use Azure Monitor workbooks for Microsoft Entra ID, for analyzing identity related activity, trends, and gaps.
 services: active-directory
 author: shlipsey3
 manager: amycolannino
 ms.service: active-directory
 ms.topic: how-to
 ms.workload: identity
 ms.subservice: report-monitor
-ms.date: 10/03/2023
+ms.date: 10/04/2023
 ms.author: sarahlipsey
 ms.reviewer: sarbar
+
+# Customer intent: As an IT admin, I want to visualize different types of identity data so I can view trends in activity, identity security gaps, and improve the health of my tenant.
 ---
 
 # How to use Microsoft Entra Workbooks
@@ -50,7 +52,7 @@ Azure Monitor provides [two built-in roles](../../azure-monitor/roles-permission
 
 For more information on the Azure Monitor built-in roles, see [Roles, permissions, and security in Azure Monitor](../../azure-monitor/roles-permissions-security.md#monitoring-reader).
 
-For more information on the Log Analytics RBAC roles, see [Azure built-in roles](../../role-based-access-control/built-in-roles.md#log-analytics-contributor)
+For more information on the Log Analytics RBAC roles, see [Azure built-in roles](../../role-based-access-control/built-in-roles.md#log-analytics-contributor).
 
 <a name='azure-ad-roles'></a>
 

articles/active-directory/reports-monitoring/media/workbook-mfa-gaps/advanced-editor-button.png

@@ -59,8 +59,10 @@ Public workbook templates are built, updated, and deprecated to reflect the need
 - [Authentication prompts analysis](workbook-authentication-prompts-analysis.md)
 - [Conditional Access gap analyzer](workbook-conditional-access-gap-analyzer.md)
 - [Cross-tenant access activity](workbook-cross-tenant-access-activity.md)
+- [Multifactor authentication gaps](workbook-mfa-gaps.md)
 - [Risk analysis](workbook-risk-analysis.md)
 - [Sensitive Operations Report](workbook-sensitive-operations-report.md)
+- [Sign-ins using legacy authentication](workbook-legacy-authentication.md)
 
 ## Next steps
 

articles/active-directory/reports-monitoring/overview-workbooks.md

@@ -92,14 +92,14 @@ items:
       href: workbook-conditional-access-gap-analyzer.md
     - name: Cross-tenant access activity 
       href: workbook-cross-tenant-access-activity.md
-    - name: Sign-ins using legacy authentication  
-      href: workbook-legacy authentication.md
+    - name: Multifactor authentication gaps 
+      href: workbook-mfa-gaps.md 
     - name: Risk analysis
       href: workbook-risk-analysis.md
     - name: Sensitive Operations Report 
       href: workbook-sensitive-operations-report.md
-    - name: Multifactor authentication gaps 
-      href: workbook-mfa-gaps.md   
+    - name: Sign-ins using legacy authentication  
+      href: workbook-legacy authentication.md
 
 - name: Identity monitoring
   expanded: true

articles/active-directory/reports-monitoring/toc.yml

@@ -32,6 +32,7 @@ The **MFA gaps** workbook is currently not available as a template, but you can
 [!INCLUDE [how to access workbooks](~/articles/active-directory/includes/how-to-access-workbooks.md)]
 1. Select **+ New**.
 1. Select the **Advanced Editor** button from the top of the page. A JSON editor opens.
+
     ![Screenshot of the Advanced Editor button on the new workbook page.](./media/workbook-mfa-gaps/advanced-editor-button.png)
 
 1. Navigate to the Microsoft Entra workbooks GitHub repository