Merge pull request #223970 from HeidiSteen/heidist-rbac

[azure search] Tested AAD steps for apps and local testing

Author: prmerger-automator[bot]

articles/search/search-howto-aad.md

@@ -1,13 +1,13 @@
 ---
-title: Authorize search app requests using Azure AD
+title: Configure search apps for Azure AD
 titleSuffix: Azure Cognitive Search
-description: Acquire a token from Azure AD to authorize search requests to an app built on Azure Cognitive Search.
+description: Acquire a token from Azure Active Directory to authorize search requests to an app built on Azure Cognitive Search.
 
 author: gmndrg
 ms.author: gimondra
 ms.service: cognitive-search
 ms.topic: how-to
-ms.date: 1/05/2022
+ms.date: 01/13/2023
 ms.custom: subject-rbac-steps
 ---
 
@@ -89,7 +89,7 @@ It's a best practice to grant minimum permissions. If your application only need
 
 1. Select **+ Add** > **Add role assignment**.
 
-   ![Access control (IAM) page with Add role assignment menu open.](../../includes/role-based-access-control/media/add-role-assignment-menu-generic.png)
+   :::image type="content" source="../../includes/role-based-access-control/media/add-role-assignment-menu-generic.png" alt-text="Screenshot of Access control (IAM) page with Add role assignment menu open." border="true":::
 
 1. Select an applicable role:
 
@@ -143,10 +143,18 @@ The following instructions reference an existing C# sample to demonstrate the co
    SearchClient srchclient = new SearchClient(serviceEndpoint, indexName, new DefaultAzureCredential());
    ```
 
-> [!NOTE]
-> User-assigned managed identities work only in Azure environments. If you run this code locally, `DefaultAzureCredential` will fall back to authenticating with your credentials. Make sure you've also given yourself the required access to the search service if you plan to run the code locally. 
+### Local testing
+
+User-assigned managed identities work only in Azure environments. If you run this code locally, `DefaultAzureCredential` will fall back to authenticating with your credentials. Make sure you've also given yourself the required access to the search service if you plan to run the code locally. 
+
+1. Verify your account has role assignments to run all of the operations in the quickstart sample. To both create and query an index, you'll need "Search Index Data Reader" and "Search Index Data Contributor".
 
-The Azure.Identity documentation has more details about `DefaultAzureCredential` and using [Azure AD authentication with the Azure SDK for .NET](/dotnet/api/overview/azure/identity-readme). `DefaultAzureCredential` is intended to simplify getting started with the SDK by handling common scenarios with reasonable default behaviors. Developers who want more control or whose scenario isn't served by the default settings should use other credential types.
+1. Go to **Tools** > **Options** > **Azure Service Authentication** to choose your Azure sign-on account.
+
+You should now be able to run the project from Visual Studio on your local system, using role-based access control for authorization.
+
+> [!NOTE]
+> The Azure.Identity documentation has more details about `DefaultAzureCredential` and using [Azure AD authentication with the Azure SDK for .NET](/dotnet/api/overview/azure/identity-readme). `DefaultAzureCredential` is intended to simplify getting started with the SDK by handling common scenarios with reasonable default behaviors. Developers who want more control or whose scenario isn't served by the default settings should use other credential types.
 
 ### [**REST API**](#tab/aad-rest)
 

articles/search/search-security-rbac.md

@@ -1,5 +1,5 @@
 ---
-title: Use Azure role-based access control
+title: Connect using Azure roles
 titleSuffix: Azure Cognitive Search
 description: Use Azure role-based access control for granular permissions on service administration and content tasks.
 
@@ -12,7 +12,7 @@ ms.date: 01/12/2023
 ms.custom: subject-rbac-steps, references_regions
 ---
 
-# Use Azure role-based access controls (Azure RBAC) in Azure Cognitive Search
+# Connect to Azure Cognitive Search using Azure role-based access control (Azure RBAC)
 
 Azure provides a global [role-based access control authorization system](../role-based-access-control/role-assignments-portal.md) for all services running on the platform. In Cognitive Search, you can: