Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into rolyon-rbac-roles-read-permissions-text

Author: rolyon

articles/azure-netapp-files/application-volume-group-add-volume-secondary.md

@@ -118,6 +118,8 @@ This section shows an example of creating a single-host, secondary SAP HANA syst
 
 1. From your NetApp account, select **Application volume groups**, and select **+Add Group**. In Deployment Type, select **SAP HANA** then **Next**. 
 
+    :::image type="content" source="./media/application-volume-group-add-volume-secondary/extension-one-create.png" alt-text="Screenshot of application volume group creation menu." lightbox="./media/application-volume-group-add-volume-secondary/extension-one-create.png":::
+
 2. In the **SAP HANA** tab, provide HANA-specific information. 
 
     > [!IMPORTANT]
@@ -200,7 +202,7 @@ This section shows an example of creating a single-host, secondary SAP HANA syst
 
     Select **Volumes** to return to the Volumes overview page.  
 
-8. Select **Review + Create** to list all volumes that will be created. Select **Create Volume Group** to start the volume group creation. 
+8. Select **Review + Create** to list all volumes to be created. Select **Create Volume Group** to start the volume group creation. 
 
 
 ---

articles/azure-netapp-files/application-volume-group-considerations.md

@@ -5,7 +5,7 @@ services: azure-netapp-files
 author: b-hchen
 ms.service: azure-netapp-files
 ms.topic: conceptual
-ms.date: 08/13/2024
+ms.date: 01/29/2025
 ms.author: anfdocs
 ---
 # Requirements and considerations for application volume group for SAP HANA 
@@ -32,7 +32,7 @@ This article describes the requirements and considerations you need to be aware
     It is recommended that you lay out the VNet and delegated subnet at design time. 
 
     Application volume group for SAP HANA creates multiple IP addresses, up to six IP addresses for larger-sized estates. Ensure that the delegated subnet has sufficient free IP addresses. Consider using a delegated subnet with a minimum of 251 IP addresses with a subnet size of /24. See [Considerations about delegating a subnet to Azure NetApp Files](azure-netapp-files-delegate-subnet.md#considerations).
-* Application volume group for SAP HANA only supports platform-managed keys for Azure NetApp Files volume encryption at volume creation at this time. Contact your Azure NetApp Files specialist or CSA if you have any questions about transitioning volumes from platform-managed keys to customer-managed keys after volume creation. 
+* Application volume group for SAP HANA only supports platform-managed keys for Azure NetApp Files volume encryption at volume creation at this time. Contact your Azure NetApp Files specialist or CSA if you have any questions about transitioning volumes from platform-managed keys to customer-managed keys after volume creation. Alternately, you can use customer-managed keys with extension 1.  
 
 >[!IMPORTANT]
 >The use of application volume group for SAP HANA for applications other than SAP HANA is not supported. Reach out to your Azure NetApp Files specialist for guidance on using Azure NetApp Files multi-volume layouts with other database applications.
@@ -43,6 +43,7 @@ This article describes the requirements and considerations you need to be aware
 * Application volume group supports Basic network features. If you're registered for extension 1, application volume group also supports [Standard network features](azure-netapp-files-network-topologies.md).
 * Extension 1 supports [availability zone volume placement](use-availability-zones.md) as the new default method for placement. This upgrade mitigates the need for AVset pinning and eliminates the need for proximity placement groups. With support for availability zone volume placement, you only need to select the same availability zone as the database servers. Using availability zone volume placement aligns with the Microsoft recommendation on how to deploy SAP HANA infrastructures to achieve best performance with high-availability, maximum flexibility, and simplified deployment. 
     If regions do not support availability zones, you can select a regional deployment or choose proximity placement groups.
+* Extension one supports [customer-managed-keys](configure-customer-managed-keys.md).
 
 ## Best practices about proximity placement
 

articles/azure-netapp-files/application-volume-group-deploy-first-host.md

@@ -5,7 +5,7 @@ services: azure-netapp-files
 author: b-hchen
 ms.service: azure-netapp-files
 ms.topic: how-to
-ms.date: 06/18/2024
+ms.date: 01/29/2025
 ms.author: anfdocs
 ---
 # Deploy the first SAP HANA host using application volume group for SAP HANA
@@ -16,9 +16,10 @@ This article describes how to deploy the first SAP HANA host using Azure NetApp
 
 ## Before you begin
 
-You should understand the [requirements and considerations for application volume group for SAP HANA](application-volume-group-considerations.md). 
+- Understand the [requirements and considerations for application volume group for SAP HANA](application-volume-group-considerations.md). 
 
-Be sure to follow the **[pinning recommendations](https://aka.ms/HANAPINNING)** and have at least one HANA virtual machine (VM) in the availability set started. Alternately, you can use [Application volume group for SAP HANA extension 1](application-volume-group-introduction.md#extension-1-features). 
+- Application volume group for SAP HANA extension 1 enables you to select Standard network features and availability zone volume placement without using volume pinning. You must register for [extension 1](#register-for-extension-1) to use the function. 
+    Alternately, adhere to the **[pinning recommendations](https://aka.ms/HANAPINNING)**. Have at least one HANA virtual machine (VM) in the availability set started. Alternately, you can use [Application volume group for SAP HANA extension 1](application-volume-group-introduction.md#extension-1-features). 
 
 ### Register for extension 1 
 
@@ -80,7 +81,7 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
         Specifies that the data, log, and shared volumes are to be created close to the VMs.
     * **Capacity pool**:  
         All volumes are placed in a single manual QoS capacity pool. 
-        If you want to create the log-backup and data-backup volumes in a separate capacity pool, you can choose not to add those volumes to the volume group.
+        If you want to create the log-backup and data-backup volumes in a separate capacity pool, you can choose not to add those volumes to the volume group and create them separately. 
     * **Virtual network**:  
         Specify an existing VNet where the VMs are placed. 
     * **Subnet**:  
@@ -195,13 +196,15 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
 4. In the **Volume group** tab, provide information for creating the volume group:  
 
     * **Availability option**:
+
         Select either **Availability zone** or **Proximity placement group**. 
         When selecting **Availability zone**, you must select the appropriate availability zone in the next field. 
         * **Proximity placement group (PPG)**:  
             Specifies that the data, log, and shared volumes are to be created close to the VMs.
         * **Availability Zone**: 
             This option lets you deploy the volumes in the logical availability zone that you specify. Select an availability zone where Azure NetApp Files resources are present. For details, see [Manage availability zone volume placement](manage-availability-zone-volume-placement.md).
     * **Network features**: 
+
         Standard network features is the default, however you can still use Basic network features. 
         See [Configure network features for a volume](configure-network-features.md) and [Guidelines for Azure NetApp Files network planning](azure-netapp-files-network-topologies.md) for details.
     * **Capacity pool**:  
@@ -211,6 +214,9 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
         Specify an existing VNet where the VMs are placed. 
     * **Subnet**:  
         Specify the delegated subnet where the IP addresses for the NFS exports are created. Ensure that you have a delegated subnet with enough free IP addresses.
+    * **Encryption key source**:
+
+        Select [Customer Managed Key](configure-customer-managed-keys.md) or Microsoft Managed Key. If you choose Customer Managed Key, provide the key vault private endpoint.
     
     Select **Next: Tags**. 
     
@@ -228,12 +234,14 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
 
     [ ![Screenshot that shows the protocols tags.](./media/application-volume-group-deploy-first-host/application-protocols-tag.png) ](./media/application-volume-group-deploy-first-host/application-protocols-tag.png#lightbox)
 
-7. The **Volumes** tab summarizes the volumes that are being created with proposed volume name, quota, and throughput. 
+7. The **Volumes** tab summarizes the volumes being created, showing protocol, volume name, quota, and throughput. 
 
     The Volumes tab also shows that only the data, log, and shared volumes are created close to the HANA VMs. The other volumes (data-backup and log-backup) are created at a different location within the region.
 
     The creation for the data-backup and log-backup volumes is optional.
 
+    [ ![Screenshot that summarizes the volume creation](./media/application-volume-group-deploy-first-host/volume-validation-extension-one.png)(./media/application-volume-group-deploy-first-host/volume-validation-extension-one.png#lightbox)]
+
 8. In the **Volumes** tab, you can select each volume to view or change the volume details. For example, select "data-*volume-name*". 
 
     Not all settings can be changed because of SAP HANA certification restrictions.
@@ -246,6 +254,8 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
         The size of the volume.
     * **Throughput**:  
         You can reduce the throughput requirements for development or test systems accordingly to the value required for your use cases.
+    * **Encryption key source**:
+        Select [Customer Managed Key](configure-customer-managed-keys.md) or Microsoft Managed Key. If you choose Customer Managed Key, provide the key vault private endpoint.
 
     Select **Next: Protocols** to review the protocol settings. 
 
@@ -272,17 +282,11 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
 
     Select **Volumes** to return to the Volume overview page. Select **Next: Review + create**.
 
-11.	The **Review + Create** tab lists all the volumes and their creation method. Select **Create Volume Group** to start the volume group creation.
-
-12. The **Volume Groups** deployment workflow starts. You can monitor the progress. This process can take a few minutes to complete.
-
-    :::image type="content" source="./media/application-volume-group-deploy-first-host/volume-group-confirm-extension-one.png" alt-text="Screenshot of the confirmed operation." lightbox="./media/application-volume-group-deploy-first-host/volume-group-confirm-extension-one.png":::
+11.	The **Review + Create** tab lists all the volumes and their creation method. Select **Create Volume Group** to start the volume group creation. This process can take a few minutes to complete.
 
-    You can display the list of volume groups to see the new volume group. You can select the new volume group to see the details and status of each of the volumes being created.
+    A notification confirms when the operation completes successfully. When you see this message, you can select **Go to resource** to view the newly created volume group. 
 
-    Creating a volume group is an "all-or-none" operation. If one volume cannot be created, all remaining volumes are removed.
-
-    [ ![Screenshot that shows the new volume group.](./media/application-volume-group-deploy-first-host/application-new-volume-group.png) ](./media/application-volume-group-deploy-first-host/application-new-volume-group.png#lightbox)
+    :::image type="content" source="./media/application-volume-group-deploy-first-host/go-to-resource.png" alt-text="Screenshot of a successfully created resource." lightbox="./media/application-volume-group-deploy-first-host/go-to-resource.png":::
 
 ---
 

articles/azure-netapp-files/application-volume-group-introduction.md

@@ -1,11 +1,11 @@
 ---
-title: Understand Azure NetApp Files application volume group for SAP HANA | Microsoft Docs
+title: Understand Azure NetApp Files application volume group for SAP HANA 
 description: Describes the use cases and key features of Azure NetApp Files application volume group for SAP HANA.
 services: azure-netapp-files
 author: b-hchen
 ms.service: azure-netapp-files
 ms.topic: conceptual
-ms.date: 09/11/2024
+ms.date: 01/29/2025
 ms.author: anfdocs
 ---
 # Understand Azure NetApp Files application volume group for SAP HANA 

articles/azure-netapp-files/application-volume-group-oracle-considerations.md

@@ -12,7 +12,7 @@ ms.service: azure-netapp-files
 ms.workload: storage
 ms.tgt_pltfrm: na
 ms.topic: conceptual
-ms.date:  04/19/2024
+ms.date:  01/29/2025
 ms.author: anfdocs
 ---
 # Requirements and considerations for application volume group for Oracle 
@@ -32,8 +32,6 @@ This article describes the requirements and considerations you need to be aware
     * Determine the expected change rate for the database volumes (in case you're using snapshots for backup purposes).
 * Create a VNet and delegated subnet to map the Azure NetApp Files IP addresses. It is recommended that you lay out the VNet and delegated subnet at design time
 * Application volume group for Oracle volumes are deployed in a selectable availability zone for regions that offer availability zones. You need to ensure that the database server is provisioned in the same availability zone as the Azure NetApp Files volumes. You may need to check in which zones the required VM types are available as well as Azure NetApp Files resources. 
-* Application volume group for Oracle currently only supports platform-managed keys for Azure NetApp Files volume encryption at volume creation. 
-    Contact your Azure NetApp Files specialist or CSA if you have questions about transitioning volumes from platform-managed keys to customer-managed keys after volume creation.
 * Application volume group for Oracle creates multiple IP addresses--at a minimum four IP addresses for a single database. For larger Oracle estates distributed across zones, it can be 12 or more IP addresses. Ensure that the delegated subnet has sufficient free IP addresses. It's recommended that you use a delegated subnet with a minimum of 59 IP addresses with a subnet size of /26. For larger Oracle deployments, consider using a /24 network offering 251 IP addresses for the delegated subnet. See [Considerations about delegating a subnet to Azure NetApp Files](azure-netapp-files-delegate-subnet.md#considerations).
 
 > [!IMPORTANT]

articles/azure-netapp-files/application-volume-group-oracle-deploy-volumes.md

@@ -12,7 +12,7 @@ ms.service: azure-netapp-files
 ms.workload: storage
 ms.tgt_pltfrm: na
 ms.topic: how-to
-ms.date: 04/19/2024
+ms.date: 01/29/2025
 ms.author: anfdocs
 ---
 # Deploy application volume group for Oracle
@@ -45,7 +45,7 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
 
 ## Steps 
 
-1. From your NetApp account, select **Application volume groups**, and click **+Add Group**.
+1. From your NetApp account, select **Application volume groups** then **+Add Group**.
 
     [ ![Screenshot that shows how to add a group for Oracle.](./media/volume-hard-quota-guidelines/application-volume-group-oracle-add-group.png) ](./media/volume-hard-quota-guidelines/application-volume-group-oracle-add-group.png#lightbox)
 
@@ -66,7 +66,7 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
     * **Oracle database storage throughput (MiB/s)**:   
         Specify the total throughput required for your database. If you select more than one database volume, the throughput is distributed evenly among all volumes. You may change each individual volume once the proposals have been created. See Step in this article.
 
-    Click **Next: Volume Group**.
+    Select **Next: Volume Group**.
 
     [ ![Screenshot that shows the Oracle tag for creating a volume group.](./media/volume-hard-quota-guidelines/application-oracle-tag.png) ](./media/volume-hard-quota-guidelines/application-oracle-tag.png#lightbox)
 
@@ -84,6 +84,8 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
         Specify an existing VNet where the VMs are placed. 
     * **Subnet**:  
         Specify the delegated subnet where the IP addresses for the NFS exports will be created. Ensure that you have a delegated subnet with enough free IP addresses.
+    * **Encryption key source**:
+        Select [Customer Managed Key](configure-customer-managed-keys.md) or Microsoft Managed Key. If you choose Customer Managed Key, provide the key vault private endpoint.
 
     Select **Next: Tags**. Continue with Step 6. 
 
@@ -101,7 +103,7 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
 
     Select **Next: Tags**. 
 
-    [ ![Screenshot that shows the option for proximity placement group.](./media/volume-hard-quota-guidelines/proximity-placement-group-oracle.png) ](./media/volume-hard-quota-guidelines/proximity-placement-group-oracle.png#lightbox)
+    [ ![Screenshot that shows the option for proximity placement group.](./media/application-volume-group-add-volume-secondary/proximity-placement-group-oracle.png) ](./media/application-volume-group-add-volume-secondary/proximity-placement-group-oracle.png#lightbox)
 
 6. In the **Tags** section of the Volume Group tab, you can add tags as needed for the volumes.   
 
@@ -156,7 +158,11 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
 
     [ ![Screenshot that shows the Volume Details - Tags tab of Create a Volume Group page for Oracle.](./media/volume-hard-quota-guidelines/application-create-volume-details-tags-tab-oracle.png) ](./media/volume-hard-quota-guidelines/application-create-volume-details-tags-tab-oracle.png#lightbox)
 
-12. The **Volumes Tab** enables you to remove optional volumes.  
+12. The **Volumes Tab** enables you to remove optional volumes. 
+
+    <!-- check -->
+    Provide an **Encryption key source**. Select [Customer Managed Key](configure-customer-managed-keys.md) or Microsoft Managed Key. If you choose Customer Managed Key, provide the key vault private endpoint.
+
     On the Volumes tab, optional volumes are marked with an asterisk (`*`) in front of the name.   
     If you want to remove the optional volumes such as `ORA1-ora-data4` volume or `ORA1-ora-binary` volume from the volume group, select the volume then **Remove volume**. Confirm the removal in the dialog box that appears.
 
@@ -188,7 +194,7 @@ You can also use [Azure CLI commands](/cli/azure/feature) `az feature register`
     [ ![Screenshot that shows the new volume group for Oracle.](./media/volume-hard-quota-guidelines/application-new-volume-group-oracle.png) ](./media/volume-hard-quota-guidelines/application-new-volume-group-oracle.png#lightbox)
 
 
-15. Following complete, in **Volumes** you can display the list of volume groups to see the new volume group. You can select the new volume group to see the details and status of each of the volumes being created.
+15. Following completion, in **Volumes** you can display the list of volume groups to see the new volume group. You can select the new volume group to see the details and status of each of the volumes being created.
 
 ## Next steps
 

articles/azure-netapp-files/application-volume-group-oracle-introduction.md

@@ -12,7 +12,7 @@ ms.service: azure-netapp-files
 ms.workload: storage
 ms.tgt_pltfrm: na
 ms.topic: conceptual
-ms.date: 04/19/2024
+ms.date: 01/29/2025
 ms.author: anfdocs
 ---
 # Understand Azure NetApp Files application volume group for Oracle