RBAC test

Author: HeidiSteen

articles/search/search-get-started-rest.md

@@ -49,6 +49,8 @@ You're pasting this endpoint into the `.rest` or `.http` file in a later step.
 
 Requests to the search endpoint must be authenticated and authorized. You can use API keys or roles for this task. Keys are easier to start with, but roles are more secure.
 
+For a role-based connection, the following instructions have you connecting to Azure AI Search under your identity, not the identity of a client app.
+
 ### Option 1: Use keys
 
 Select **Settings** > **Keys** and then copy an admin key. Admin keys are used to add, modify, and delete objects. There are two interchangeable admin keys. Copy either one. For more information, see [Connect to Azure AI Search using key authentication](search-security-api-keys.md).
@@ -71,11 +73,10 @@ In this section, obtain your personal identity token using either the Azure CLI,
     az login
     ```
 
-1. Get your personal identity.
+1. Get your personal identity token.
 
     ```azurecli
-    az ad signed-in-user show \
-        --query id -o tsv
+    az account get-access-token --scope https://search.azure.com/.default
     ```
 
 #### [Azure PowerShell](#tab/azure-powershell)
@@ -86,10 +87,10 @@ In this section, obtain your personal identity token using either the Azure CLI,
     Connect-AzAccount
     ```
 
-1. Get your personal identity.
+1. Get your personal identity token.
 
     ```azurepowershell
-    (Get-AzContext).Account.ExtendedProperties.HomeAccountId.Split('.')[0]
+    Get-AzAccessToken -ResourceUrl https://search.azure.com
     ```
 
 #### [Azure portal](#tab/portal)