misc edits

Author: HeidiSteen

articles/search/TOC.yml

@@ -422,14 +422,14 @@
     items:
     - name: Configure network access
       href: service-configure-firewall.md
-    - name: Authenticate with keys
-      href: search-security-api-keys.md
     - name: Enable role-based access
       href: search-security-enable-roles.md
     - name: Assign roles (users)
       href: search-security-rbac.md
     - name: Assign roles (apps)
       href: keyless-connections.md
+    - name: Authenticate with keys
+      href: search-security-api-keys.md
     - name: Outbound connections
       items:
       - name: Configure a managed identity

articles/search/search-security-api-keys.md

@@ -13,11 +13,13 @@ ms.topic: how-to
 ms.date: 06/28/2024
 ---
 
-# Connect to Azure AI Search using key authentication
+# Connect to Azure AI Search using keys
 
-Azure AI Search offers key-based authentication that you can use on connections to your search service. An API key is a unique string composed of 52 randomly generated numbers and letters. A request made to a search service endpoint is accepted if both the request and the API key are valid.
+Azure AI Search offers key-based authentication for connections to your search service. An API key is a unique string composed of 52 randomly generated numbers and letters. In your source code, you can specify it as an [environment variable](azure/ai-services/cognitive-services-environment-variables) or in an app settings file, and then include the variable on the request. A request made to a search service endpoint is accepted if both the request and the API key are valid.
 
-Key-based authentication is the default. You can replace it with [role-based access](search-security-enable-roles.md), which eliminates the need for hardcoded keys in your code.
+Key-based authentication is the default. 
+
+You can replace it with [role-based access](search-security-enable-roles.md), which eliminates the need for hardcoded keys in your codebase.
 
 ## Types of API keys
 

articles/search/search-security-enable-roles.md

@@ -14,7 +14,7 @@ ms.date: 06/18/2024
 
 # Enable or disable role-based access control in Azure AI Search
 
-If you want to use roles for authorized access to Azure AI Search, this article explains how to enable role-based access control for your search service.
+Before you can assign roles for authorized access to Azure AI Search, enable role-based access control on your search service.
 
 Role-based access for data plane operations is optional, but recommended as the more secure option. The alternative is [key-based authentication](search-security-api-keys.md), which is the default. 
 

articles/search/search-security-rbac.md

@@ -12,7 +12,7 @@ ms.date: 06/03/2024
 ms.custom: subject-rbac-steps, references_regions, devx-track-azurepowershell
 ---
 
-# Connect to Azure AI Search using role-based access controls
+# Connect to Azure AI Search using roles
 
 Azure provides a global authentication and [role-based authorization system](../role-based-access-control/role-assignments-portal.yml) for all services running on the platform. In Azure AI Search, you can assign Azure roles for: