Merge branch 'master' into release-arc-resource-bridge

Author: v-alje

articles/active-directory/fundamentals/active-directory-compare-azure-ad-to-ad.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.topic: conceptual
 ms.workload: identity
 ms.subservice: fundamentals
-ms.date: 02/26/2020
+ms.date: 12/23/2021
 ms.author: martinco
 ---
 
@@ -24,7 +24,7 @@ Most IT administrators are familiar with Active Directory Domain Services concep
 |Concept|Active Directory (AD)|Azure Active Directory |
 |:-|:-|:-|
 |**Users**|||
-|Provisioning: users | Organizations create internal users manually or use an in-house or automated provisioning system, such as the Microsoft Identity Manager, to integrate with an HR system.|Existing AD organizations use [Azure AD Connect](../hybrid/how-to-connect-sync-whatis.md) to sync identities to the cloud.</br> Azure AD adds support to automatically create users from [cloud HR systems](../saas-apps/workday-tutorial.md). </br>Azure AD can provision identities in [SCIM enabled](../app-provisioning/use-scim-to-provision-users-and-groups.md) SaaS apps to automatically provide apps with the necessary details to allow access for users. |
+|Provisioning: users | Organizations create internal users manually or use an in-house or automated provisioning system, such as the Microsoft Identity Manager, to integrate with an HR system.|Existing AD organizations use [Azure AD Connect](../hybrid/how-to-connect-sync-whatis.md) to sync identities to the cloud.</br> Azure AD adds support to automatically create users from [cloud HR systems](../app-provisioning/what-is-hr-driven-provisioning.md). </br>Azure AD can provision identities in [SCIM enabled](../app-provisioning/use-scim-to-provision-users-and-groups.md) SaaS apps to automatically provide apps with the necessary details to allow access for users. |
 |Provisioning: external identities| Organizations create external users manually as regular users in a dedicated external AD forest, resulting in administration overhead to manage the lifecycle of external identities (guest users)| Azure AD provides a special class of identity to support external identities. [Azure AD B2B](/azure/active-directory/b2b/) will manage the link to the external user identity to make sure they are valid. |
 | Entitlement management and groups| Administrators make users members of groups. App and resource owners then give groups access to apps or resources.| [Groups](./active-directory-groups-create-azure-portal.md) are also available in Azure AD and administrators can also use groups to grant permissions to resources. In Azure AD, administrators can assign membership to groups manually or use a query to dynamically include users to a group. </br> Administrators can use [Entitlement management](../governance/entitlement-management-overview.md) in Azure AD to give users access to a collection of apps and resources using workflows and, if necessary, time-based criteria. |
 | Admin management|Organizations will use a combination of domains, organizational units, and groups in AD to delegate administrative rights to manage the directory and resources it controls.| Azure AD provides [built-in roles](./active-directory-users-assign-role-azure-portal.md) with its Azure AD role-based access control (Azure AD RBAC) system, with limited support for [creating custom roles](../roles/custom-overview.md) to delegate privileged access to the identity system, the apps, and resources it controls.</br>Managing  roles can be enhanced with [Privileged Identity Management (PIM)](../privileged-identity-management/pim-configure.md) to provide just-in-time, time-restricted, or workflow-based access to privileged roles. |
@@ -46,4 +46,4 @@ Most IT administrators are familiar with Active Directory Domain Services concep
 - [What is Azure Active Directory?](./active-directory-whatis.md)
 - [Compare self-managed Active Directory Domain Services, Azure Active Directory, and managed Azure Active Directory Domain Services](../../active-directory-domain-services/compare-identity-solutions.md)
 - [Frequently asked questions about Azure Active Directory](./active-directory-faq.yml)
-- [What's new in Azure Active Directory?](./whats-new.md)
+- [What's new in Azure Active Directory?](./whats-new.md)

articles/active-directory/governance/entitlement-management-request-access.md

@@ -12,7 +12,7 @@ ms.tgt_pltfrm: na
 ms.devlang: na
 ms.topic: how-to
 ms.subservice: compliance
-ms.date: 08/31/2021
+ms.date: 12/23/2021
 ms.author: ajburnle
 ms.reviewer: mamkumar
 ms.collection: M365-identity-device-management
@@ -49,15 +49,13 @@ Once you have found the access package in the My Access portal, you can submit a
 
 **Prerequisite role:** Requestor
 
-1. Find the access package in the list.  If necessary, you can search by typing a search string and then selecting the **Name**, **Catalog**, or **Resources** filter.
-
-    ![My Access portal - Resource search](./media/entitlement-management-request-access/my-access-resource-search.png)
-
-1. Click the checkmark to select the access package.
+1. Find the access package in the list.  If necessary, you can search by typing a search string and then selecting the **Name** or **Resources** filter.
+ 
+1. To request access you can either:
 
-1. Click **Request access** to open the Request access pane.
+    1. Click the row to see Access package details, and then select Request access.
 
-    ![My Access portal - Access packages](./media/entitlement-management-request-access/my-access-request-access-button.png)
+    1. Or click **Request access** directly.
 
 1. If the **Business justification** box is displayed, type a justification for needing access.
 

articles/active-directory/governance/index.yml

@@ -6,7 +6,7 @@ summary: Azure Active Directory (Azure AD) Identity Governance helps you to prot
 metadata: 
   author: ajburnle
   description: "Learn how to protect, monitor, and audit access to critical assets while ensuring employee productivity."
-  manager: daveba
+  manager: karenhoran
   ms.author: ajburnle
   ms.collection: na
   ms.date: 09/14/2019

articles/active-directory/governance/what-is-identity-lifecycle-management.md

@@ -3,7 +3,7 @@ title: 'What is identity lifecycle management with Azure Active Directory? | Mic
 description: Describes overview of identity lifecycle management.
 services: active-directory
 author: billmath
-manager: daveba
+manager: karenhoran
 ms.service: active-directory
 ms.workload: identity
 ms.topic: overview

articles/active-directory/governance/what-is-provisioning.md

@@ -3,7 +3,7 @@ title: 'What is provisioning with Azure Active Directory? | Microsoft Docs'
 description: Describes overview of identity provisioning and the ILM scenarios.
 services: active-directory
 author: billmath
-manager: daveba
+manager: karenhoran
 ms.service: active-directory
 ms.workload: identity
 ms.topic: overview

articles/azure-maps/media/quick-demo-map-app/create-account.png

@@ -1,9 +1,10 @@
 ---
 title: 'Quickstart: Interactive map search with Azure Maps'
+titeSuffix: Microsoft Azure Maps
 description: 'Quickstart: Learn how to create interactive, searchable maps. See how to create an Azure Maps account, get a primary key, and use the Web SDK to set up map applications'
 author: stevemunk
 ms.author: v-munksteve
-ms.date: 09/30/2021
+ms.date: 12/23/2021
 ms.topic: quickstart
 ms.service: azure-maps
 services: azure-maps
@@ -32,30 +33,29 @@ This quickstart uses the Azure Maps Web SDK, however the Azure Maps service can
 
 Create a new Azure Maps account with the following steps:
 
-1. In the upper left-hand corner of the [Azure portal](https://portal.azure.com), click **Create a resource**.
-2. In the *Search the Marketplace* box, type **Azure Maps**.
-3. From the *Results*, select **Azure Maps**. Click **Create** button that appears below the map.
-4. On the **Create Maps Account** page, enter the following values:
+1. Select **Create a resource** in the upper left-hand corner of the [Azure portal](https://portal.azure.com).
+2. Type **Azure Maps** in the *Search services and Marketplace* box.
+3. Select **Azure Maps** in the drop down list that appears, then select the **Create** button.
+4. On the **Create an Azure Maps Account resource** page, enter the following values then select the **Create** button:
     * The *Subscription* that you want to use for this account.
-    * The *Resource group* name for this account. You may choose to *Create new* or *Use existing* resource group.
-    * The *Name* of your new account.
-    * The *Pricing tier* for this account.
-    * Read the *License* and *Privacy Statement*, and check the checkbox to accept the terms.
-    * Click the **Create** button.
+    * The *Resource group* name for this account. You may choose to *Create new* or *Select existing* resource group.
+    * The *Name* of your new Azure Maps account.
+    * The *Pricing tier* for this account. Select **Gen2**.
+    * Read the *License* and *Privacy Statement*, then select the checkbox to accept the terms.
 
-    :::image type="content" source="./media/quick-demo-map-app/create-account.png" alt-text="Create Maps account in portal" lightbox="./media/quick-demo-map-app/create-account.png":::
+    :::image type="content" source="./media/quick-demo-map-app/create-account.png" alt-text="A screen shot showing the Create an Azure Maps Account resource page in the Azure portal." lightbox="./media/quick-demo-map-app/create-account.png":::
 
 <a id="getkey"></a>
 
 ## Get the primary key for your account
 
-Once your Maps account is successfully created, retrieve the primary key that enables you to query the Maps APIs.
+Once your Azure Maps account is successfully created, retrieve the primary key that enables you to query the Maps APIs.
 
 1. Open your Maps account in the portal.
 2. In the settings section, select **Authentication**.
-3. Copy the **Primary Key** to your clipboard. Save it locally to use later in this tutorial.
+3. Copy the **Primary Key** and save it locally to use later in this tutorial.
 
-:::image type="content" source="./media/quick-demo-map-app/get-key.png" alt-text="Get Primary Key Azure Maps key in Azure portal" lightbox="./media/quick-demo-map-app/get-key.png":::
+:::image type="content" source="./media/quick-demo-map-app/get-key.png" alt-text="Screen shot showing your Azure Maps Primary Key in the Azure portal" lightbox="./media/quick-demo-map-app/get-key.png":::
 
 >[!NOTE]
 > This quickstart uses the [Shared Key](azure-maps-authentication.md#shared-key-authentication) authentication approach for demonstration purposes, but the preferred approach for any production environment is to use [Azure Active Directory](azure-maps-authentication.md#azure-ad-authentication) authentication.
@@ -77,7 +77,7 @@ Once your Maps account is successfully created, retrieve the primary key that en
 4. Try out the interactive search experience. In the search box on the upper-left corner of the demo web application, search for **restaurants**.
 5. Move your mouse over the list of addresses and locations that appear below the search box. Notice how the corresponding pin on the map pops out information about that location. For privacy of private businesses, fictitious names and addresses are shown.
 
-    :::image type="content" source="./media/quick-demo-map-app/interactive-search.png" alt-text="Interactive map search web application" lightbox="./media/quick-demo-map-app/interactive-search.png":::
+    :::image type="content" source="./media/quick-demo-map-app/interactive-search.png" alt-text="A screen shot showing the interactive map search web application." lightbox="./media/quick-demo-map-app/interactive-search.png":::
 
 ## Clean up resources
 
@@ -87,17 +87,17 @@ Once your Maps account is successfully created, retrieve the primary key that en
 If you don't plan to continue to the tutorials, take these steps to clean up the resources:
 
 1. Close the browser that runs the **AzureMapDemo.html** web application.
-2. Navigate to the Azure portal page. Select **All resources** from the main portal page. Or, click on the menu icon in the upper left-hand corner. Select **All resources**.
-3. Click on your Azure Maps account. At the top of the page, click **Delete**.
+2. Navigate to the Azure portal. Select **All resources** from the main portal page, or select the menu icon in the upper left-hand corner then **All resources**.
+3. Select your Azure Maps account, then select **Delete** at the top of the page.
 
-For more code examples and an interactive coding experience, see these guides:
+For more code examples and an interactive coding experience, see these articles:
 
 * [Find an address with Azure Maps search service](how-to-search-for-address.md)
 * [Use the Azure Maps Map Control](how-to-use-map-control.md)
 
 ## Next steps
 
-In this quickstart, you created your Azure Maps account and created a demo application. Take a look at the following tutorials to learn more about Azure Maps:
+In this quickstart, you created an Azure Maps account and a demo application. Take a look at the following tutorials to learn more about Azure Maps:
 
 > [!div class="nextstepaction"]
 > [Search nearby points of interest with Azure Maps](tutorial-search-location.md)

articles/azure-maps/quick-demo-map-app.md

@@ -2,7 +2,7 @@
 title: Create custom security policies in Microsoft Defender for Cloud | Microsoft Docs
 description: Azure custom policy definitions monitored by Microsoft Defender for Cloud.
 ms.topic: how-to
-ms.date: 11/09/2021
+ms.date: 12/23/2021
 zone_pivot_groups: manage-asc-initiatives
 ---
 
@@ -23,34 +23,32 @@ As discussed in [the Azure Policy documentation](../governance/policy/concepts/d
 
 ## To add a custom initiative to your subscription 
 
-1. From Defender for Cloud's menu, select **Security policy**.
+1. From Defender for Cloud's menu, open **Environment settings**.
 
-1. Select a subscription or Management Group to which you would like to add a custom initiative.
-
-    [![Selecting a subscription for which you'll create your custom policy.](media/custom-security-policies/custom-policy-selecting-a-subscription.png)](media/custom-security-policies/custom-policy-selecting-a-subscription.png#lightbox)
+1. Select the relevant subscription or management group to which you would like to add a custom initiative.
 
     > [!NOTE]
     > For your custom initiatives to be evaluated and displayed in Defender for Cloud, you must add them at the subscription level (or higher). We recommend that you select the widest scope available.
 
-1. In the Security policy page, under Your custom initiatives, click **Add a custom initiative**.
+1. Open the **Security policy** page, and in the **Your custom initiatives** area, select **Add a custom initiative**.
 
-    [![Click Add a custom initiative.](media/custom-security-policies/custom-policy-add-initiative.png)](media/custom-security-policies/custom-policy-add-initiative.png#lightbox)
+    :::image type="content" source="media/custom-security-policies/accessing-security-policy-page.png" alt-text="Screenshot of accessing the security policy page in Microsoft Defender for Cloud." lightbox="media/custom-security-policies/accessing-security-policy-page.png":::
 
-    The following page appears:
+1. In the Add custom initiatives page, review the list of custom policies already created in your organization.
 
-    ![Create or add a policy.](media/custom-security-policies/create-or-add-custom-policy.png)
+    - If you see one you want to assign to your subscription, select **Add**. 
+    - If there isn't an initiative in the list that meets your needs, create a new custom initiative:
 
-1. In the Add custom initiatives page, review the list of custom policies already created in your organization. If you see one you want to assign to your subscription, click **Add**. If there isn't an initiative in the list that meets your needs, skip this step.
+        1. Select **Create new**.
+        1. Enter the definition's location and name.
+        1. Select the policies to include and select **Add**.
+        1. Enter any desired parameters.
+        1. Select **Save**.
+        1. In the Add custom initiatives page, click refresh. Your new initiative will be available.
+        1. Select **Add** and assign it to your subscription.
 
-1. To create a new custom initiative:
+    ![Create or add a policy.](media/custom-security-policies/create-or-add-custom-policy.png)
 
-    1. Click **Create new**.
-    1. Enter the definition's location and name.
-    1. Select the policies to include and click **Add**.
-    1. Enter any desired parameters.
-    1. Click **Save**.
-    1. In the Add custom initiatives page, click refresh. Your new initiative will be shown as available.
-    1. Click **Add** and assign it to your subscription.
 
     > [!NOTE]
     > Creating new initiatives requires subscription owner credentials. For more information about Azure roles, see [Permissions in Microsoft Defender for Cloud](permissions.md).

articles/defender-for-cloud/custom-security-policies.md

@@ -33,7 +33,7 @@ Also ensure your Log Analytics agent is [properly configured to send data to Def
 To learn more about the specific Defender for Cloud features available on Windows and Linux, see [Feature coverage for machines](supported-machines-endpoint-solutions-clouds.md).
 
 > [!NOTE]
-> Even though **Microsoft Defender for servers** is designed to protect servers, most of its are supported for Windows 10 machines. One feature that isn't currently supported is [Defender for Cloud's integrated EDR solution: Microsoft Defender for Endpoint](integration-defender-for-endpoint.md).
+> Even though **Microsoft Defender for servers** is designed to protect servers, most of its features are supported for Windows 10 machines. One feature that isn't currently supported is [Defender for Cloud's integrated EDR solution: Microsoft Defender for Endpoint](integration-defender-for-endpoint.md).
 
 ## Managed virtual machine services <a name="virtual-machine"></a>