replaced image and added missing feature

Author: ElazarK

articles/defender-for-cloud/media/tutorial-enable-cspm-plan/cspm-configuration.png

@@ -1,6 +1,6 @@
 ---
 title: Protect your resources with Defender CSPM plan on your subscription
-description: Learn how to enable Defender CSPM on your Azure subscription for Microsoft Defender for Cloud.
+description: Learn how to enable Defender CSPM on your Azure subscription for Microsoft Defender for Cloud and enhance your security posture.
 ms.topic: install-set-up-deploy
 ms.date: 09/05/2023
 ---
@@ -58,10 +58,12 @@ Once the Defender CSPM plan is enabled on your subscription, you have the abilit
 
 - **Agentless discovery for Kubernetes**: API-based discovery of information about Kubernetes cluster architecture, workload objects, and setup. Required for Kubernetes inventory, identity and network exposure detection, risk hunting as part of the cloud security explorer. This extension is required for attack path analysis (Defender CSPM only).
 
-- **Container registries vulnerability assessments**: Provides vulnerability management for images stored in your container registries.
+- **Agentless container vulnerability assessments**: Provides vulnerability management for images stored in your container registries.
 
 - **Sensitive data discovery**: Sensitive data discovery automatically discovers managed cloud data resources containing sensitive data at scale. This feature accesses your data, it is agentless, uses smart sampling scanning, and integrates with Microsoft Purview sensitive information types and labels.
 
+- **Permissions Management (Preview)** - Insights into Cloud Infrastructure Entitlement Management (CIEM). CIEM ensures appropriate and secure identities and access rights in cloud environments. It helps understand access permissions to cloud resources and associated risks. Setup and data collection may take up to 24 hours.
+
 **To enable the components of the Defender CSPM plan**:
 
 1. On the Defender plans page, select **Settings**.