Merge pull request #258759 from dominicbetts/aio-msa-accounts

AIO: Expand MSA details

Author: prmerger-automator[bot]

articles/iot-operations/get-started/quickstart-add-assets.md

@@ -25,6 +25,8 @@ _OPC UA servers_ are software applications that communicate with assets. _OPC UA
 
 Complete [Quickstart: Deploy Azure IoT Operations to an Arc-enabled Kubernetes cluster](quickstart-deploy.md) before you begin this quickstart.
 
+To sign in to the Azure IoT Operations portal you need a work or school account in the tenant where you deployed Azure IoT Operations. If you're currently using a Microsoft account (MSA), you need to create a Microsoft Entra ID with at least contributor permissions for the resource group that contains your **Kubernetes - Azure Arc** instance. To learn more, see [Known Issues > Create Entra account](../troubleshoot/known-issues.md#azure-iot-operations-preview-portal).
+
 Install the [mqttui](https://github.com/EdJoPaTo/mqttui) tool on the Ubuntu machine where you're running Kubernetes:
 
 ```bash
@@ -47,7 +49,7 @@ The data that OPC UA servers expose can have a complex structure and can be diff
 To create asset endpoints, assets and subscribe to OPC UA tags and events, use the Azure IoT Operations (preview) portal. Navigate to the [Azure IoT Operations](https://aka.ms/iot-operations-portal) portal in your browser and sign with your Microsoft Entra ID credentials.
 
 > [!IMPORTANT]
-> You must use an Microsoft Entra account, you can't use a Microsoft account (MSA) to sign in. To learn more, see [Known Issues > Create Entra account](../troubleshoot/known-issues.md#azure-iot-operations-preview-portal).
+> You must use a work or school account to sign in to the Azure IoT Operations portal. To learn more, see [Known Issues > Create Entra account](../troubleshoot/known-issues.md#azure-iot-operations-preview-portal).
 
 ## Select your cluster
 

articles/iot-operations/troubleshoot/known-issues.md

@@ -130,8 +130,13 @@ kubectl delete pod aio-opc-opc.tcp-1-f95d76c54-w9v9c -n azure-iot-operations
 
 ## Azure IoT Operations (preview) portal
 
-- To sign in to the Azure IoT Operations portal, you need a Microsoft Entra ID. You can't sign in with a Microsoft account (MSA). To create an Entra ID in your Azure tenant:
+To sign in to the Azure IoT Operations portal, you need a Microsoft Entra ID with at least contributor permissions for the resource group that contains your **Kubernetes - Azure Arc** instance. You can't sign in with a Microsoft account (MSA). To create an Entra ID in your Azure tenant:
 
-    1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/) with the same tenant and user name that you used to deploy Azure IoT Operations.
-    1. Create a new identity using Entra Identity and grant it at least **Contributor** permissions to the resource group that contains your cluster and Azure IoT Operations deployment.
-    1. Return to the [Azure IoT Operations portal](https://iotoperations.azure.com) and use the new account to sign in.
+1. Sign in to the [Azure portal](https://portal.azure.com/) with the same tenant and user name that you used to deploy Azure IoT Operations.
+1. In the Azure portal, navigate to the **Microsoft Entra ID** section, select **Users > +New user > Create new user**. Create a new user and make a note of the password, you need it to sign in later.
+1. In the Azure portal, navigate to the resource group that contains your **Kubernetes - Azure Arc** instance. On the **Access control (IAM)** page, select **+Add > Add role assignment**.
+1. On the **Add role assignment page**, select **Privileged administrator roles**. Then select **Contributor** and then select **Next**.
+1. On the **Members** page, add your new user to the role.
+1. Select **Review and assign** to complete setting up the new user.
+
+You can now use the new user account to sign in to the [Azure IoT Operations portal](https://iotoperations.azure.com).