Add screenshots and permissions details.

Author: dominicbetts

articles/iot-central/core/howto-faq.yml

@@ -174,4 +174,8 @@ sections:
           What are the differences between monitoring an IoT Central application in the Azure portal and using the audit logs within in IoT Central application.
         answer: |
           Monitoring in the Azure portal is useful for operations monitoring. The audit log in an IoT Central application lets you see who made changes to entities within the the application.
+      - question: |
+          Can I extend the audit log to store more than 30 days of data?
+        answer: |
+          Currently, you can't store more tha 30 days of data in the audit log. Entries older than 30 days are deleted automatically.
   

articles/iot-central/core/howto-manage-users-roles.md

@@ -3,7 +3,7 @@ title: Manage users and roles in Azure IoT Central application | Microsoft Docs
 description: As an administrator, how to manage users and roles in your Azure IoT Central application
 author: dominicbetts
 ms.author: dobett
-ms.date: 06/22/2022
+ms.date: 08/01/2022
 ms.topic: how-to
 ms.service: iot-central
 services: iot-central
@@ -218,6 +218,16 @@ When you define a custom role, you choose the set of permissions that a user is
 | Manage | None     |
 | Full Control | Manage |
 
+**Audit log permissions**
+
+| Name | Dependencies |
+| ---- | -------- |
+| View | None     |
+| Full Control | View |
+
+> [!CAUTION]
+> Any user granted permission to view the audit log can see all log entries even if they don't have permission to view or modify the entities listed in the log. Therefore, any user who can view the log can view the identity of and changes made to any modified entity.
+
 #### Managing users and roles
 
 **Custom roles permissions**

articles/iot-central/core/howto-use-audit-logs.md

@@ -36,42 +36,42 @@ The log records changes to the following IoT Central entities:
 
 The log records changes made by the following types of user:
 
-- IoT Central user - the log shows the users email.
+- IoT Central user - the log shows the user's email.
 - API token - the log shows the token name.
-- Azure Active Directory user - the log shows the user email or Id.
+- Azure Active Directory user - the log shows the user email or ID.
 - Service principal - the log shows the service principal name.
 
 The log stores data for 30 days, after which it's no longer available.
 
 The following screenshot shows the audit log view with the location of the sorting and filtering controls highlighted:
 
-<!-- TODO: Add a screenshot -->
+:::image type="content" source="media/howto-use-audit-logs/audit-log.png" alt-text="Screenshot that shows the audit log. The location of the sort and filter controls is highlighted.":::
+
+## Customize the log
+
+Select **Column options** to customize the audit log view. You can add and remove columns, reorder the columns, and change the column widths:
+
+:::image type="content" source="media/howto-use-audit-logs/audit-logs-column-options.png" alt-text="Screenshot that shows the audit log column options.":::
 
 ## Sort the log
 
 You can sort the log into ascending or descending timestamp order. To sort, select **Timestamp**:
 
-<!-- TODO: Add a screenshot -->
+:::image type="content" source="media/howto-use-audit-logs/audit-logs-sorting.png" alt-text="Screenshot that shows how to sort the log into descending timestamp order.":::
 
 ## Filter the log
 
 To focus on a specific time, filter the log by time range. Select **Edit time range** and specify the range you're interested in:
 
-<!-- TODO: Add a screenshot -->
+:::image type="content" source="media/howto-use-audit-logs/audit-logs-time.png" alt-text="Screenshot that shows how filter the log to show the last hour of entries.":::
 
 To focus on specific entries, filter by entity type or action. Select **Filter** and use the multi-select drop-downs to specify your filter conditions:
 
-<!-- TODO: Add a screenshot -->
-
-## Customize the log
-
-Select **Column options** to customize the audit log view. You can add and remove columns, reorder the columns, and change the column widths:
-
-<!-- TODO: Add a screenshot -->
+:::image type="content" source="media/howto-use-audit-logs/audit-logs-filter.png" alt-text="Screenshot that shows how filter the log to show only updates to user entities.":::
 
 ## Manage access
 
-The built-in **App Administrator** role has access to the audit logs by default. The administrator can grant access to other roles, To learn more, see [Manage users and roles in your IoT Central application](howto-manage-users-roles.md).
+The built-in **App Administrator** role has access to the audit logs by default. The administrator can grant access to other roles. An administrator can assign either **Full control** or **View** audit log permissions to other roles. To learn more, see [Manage users and roles in your IoT Central application](howto-manage-users-roles.md).
 
 > [!IMPORTANT]
 > Any user granted permission to view the audit log can see all log entries even if they don't have permission to view or modify the entities listed in the log. Therefore, any user who can view the log can view the identity of and changes made to any modified entity.

articles/iot-central/core/media/howto-use-audit-logs/audit-log.png

@@ -86,13 +86,13 @@ An administrator can:
 
 To learn more, see [Create and use a custom application template](howto-create-iot-central-application.md#create-and-use-a-custom-application-template).
 
-## Integrate with DevOps pipelines
+## Integrate with Azure Pipelines
 
-Continuous integration and continuous delivery (CI/CD) refers to the process of developing and delivering software in short, frequent cycles using automation pipelines. You can use Azure DevOps pipelines to automate the build, test, and deployment of IoT Central application configurations.
+Continuous integration and continuous delivery (CI/CD) refers to the process of developing and delivering software in short, frequent cycles using automation pipelines. You can use Azure Pipelines to automate the build, test, and deployment of IoT Central application configurations.
 
 Just as IoT Central is a part of your larger IoT solution, make IoT Central a part of your CI/CD pipeline.
 
-To learn more, see [Integrate IoT Central into your Azure DevOps CI/CD pipeline](howto-integrate-with-devops.md).
+To learn more, see [Integrate IoT Central into your Azure CI/CD pipeline](howto-integrate-with-devops.md).
 
 ## Monitor application health