Merge pull request #240154 from rcdun/update_communications_gateway_permissions

Update permissions for Communications Gateway

Author: prmerger-automator[bot]

articles/communications-gateway/provision-user-roles.md

@@ -5,17 +5,16 @@ author: rcdun
 ms.author: rdunstan
 ms.service: communications-gateway
 ms.topic: how-to
-ms.date: 12/15/2022 
+ms.date: 06/02/2023
 ---
 
 # Set up user roles for Azure Communications Gateway
 
-This article will guide you through how to configure the permissions required for operators in your organization to:
+This article will guide you through how to configure the permissions required for staff in your organization to:
 
 - Deploy Azure Communications Gateway through the portal
 - Raise customer support requests (support tickets)
 - Monitor Azure Communications Gateway
-- Rotate secrets for Azure Communications Gateway
 - Use the API Bridge Number Management Portal for provisioning
 
 ## Prerequisites
@@ -26,15 +25,14 @@ A list of all available defined Azure roles is available in [Azure built-in role
 
 ## 1. Understand the user roles required for Azure Communications Gateway
 
-Your staff will need different user roles, depending on the tasks they need to carry out.
+Your staff might need different user roles, depending on the tasks they need to carry out.
 
 |Task  | Required user roles or access |
 |---------|---------|
 | Deploying Azure Communications Gateway |**Contributor** access to your subscription|
 | Raising support requests |**Owner**, **Contributor** or **Support Request Contributor** access to your subscription or a custom role with `Microsoft.Support/*` access at the subscription level|
 |Monitoring logs and metrics | **Reader** access to your subscription|
-|Rotating secrets |**Storage Account Key Operator**, **Contributor** or **Owner** access to your subscription|
-|Using the API Bridge Number Management Portal|**Reader** and **Writer** permissions for the Project Synergy enterprise application and permissions to the Azure portal for your subscription|
+|Using the API Bridge Number Management Portal|**NumberManagement.Read**, **NumberManagement.Write**, **PartnerSettings.Read**, and **PartnerSettings.Write** permissions for the Project Synergy enterprise application and **Reader** permissions to the Azure portal for your subscription|
 
 ## 2. Configure user roles
 
@@ -51,7 +49,7 @@ You need to use the Azure portal to configure user roles.
 ### 2.2 Assign a user role
 
 1. Follow the steps in [Assign a user role using the Azure portal](../role-based-access-control/role-assignments-portal.md) to assign the permissions you determined in [1. Understand the user roles required for Azure Communications Gateway](#1-understand-the-user-roles-required-for-azure-communications-gateway).
-1. If you're managing access to the API Bridge Number Management Portal, follow [Assign users and groups to an application](../active-directory/manage-apps/assign-user-or-group-access-portal.md) to assign **Reader** and **Writer** permissions for the Project Synergy application.
+1. If you're managing access to the API Bridge Number Management Portal, follow [Assign users and groups to an application](../active-directory/manage-apps/assign-user-or-group-access-portal.md) to assign **NumberManagement.Read**, **NumberManagement.Write**, **PartnerSettings.Read**, and **PartnerSettings.Write** permissions for each user in the Project Synergy application.
 
 ## Next steps