update

Author: msmbaldwin

articles/key-vault/general/rbac-guide.md

@@ -236,6 +236,7 @@ For full details, see [Assign Azure roles using Azure PowerShell](../../role-bas
     ![Add role assignment page in Azure portal.](../../../includes/role-based-access-control/media/add-role-assignment-page.png)
 
 # [Azure CLI](#tab/azure-cli)
+
 ```azurecli
 az role assignment create --role "Key Vault Secrets Officer" --assignee {i.e [email protected]} --scope /subscriptions/{subscriptionid}/resourcegroups/{resource-group-name}/providers/Microsoft.KeyVault/vaults/{key-vault-name}/secrets/RBACSecret
 ```
@@ -294,11 +295,12 @@ For full details, see [Assign Azure roles using Azure PowerShell](../../role-bas
 
       ![Secret tab - error](../media/rbac/image-13.png)
 
-### Creating custom roles 
+### Creating custom roles
 
 [az role definition create command](/cli/azure/role/definition#az-role-definition-create)
 
 # [Azure CLI](#tab/azure-cli)
+
 ```azurecli
 az role definition create --role-definition '{ \
    "Name": "Backup Keys Operator", \
@@ -315,6 +317,7 @@ az role definition create --role-definition '{ \
     "AssignableScopes": ["/subscriptions/{subscriptionId}"] \
 }'
 ```
+
 # [Azure PowerShell](#tab/azurepowershell)
 
 ```azurepowershell
@@ -339,6 +342,11 @@ $roleDefinition | Out-File role.json
 
 New-AzRoleDefinition -InputFile role.json
 ```
+
+# [Azure portal](#tab/azure-portal)
+
+test
+
 ---
 
 For more Information about how to create custom roles, see:

includes/key-vault-quickstart-rbac-cli.md

@@ -15,4 +15,4 @@ To grant your user account permissions to your key vault through Role-Based Acce
 az role assignment create --role "Key Vault Secrets User" --assignee "<your-email-address>" --scope "/subscriptions/<subscription-id>/resourceGroups/<resource-group-name>/providers/Microsoft.KeyVault/vaults/<your-unique-keyvault-name>"
 ```
 
-Replace `<your-email-address>`, `<subscription-id>`, `<resource-group-name>`, and `<your-unique-keyvault-name>` with your actual values. `<your-email-address>` is your sign-in name.
+Replace \<your-email-address\>, \<subscription-id\>, \<resource-group-name\> and \<your-unique-keyvault-name\> with your actual values. \<your-email-address\> is your sign-in name.

includes/key-vault-quickstart-rbac-powershell.md

@@ -15,4 +15,4 @@ To grant your user account permissions to your key vault through Role-Based Acce
 New-AzRoleAssignment -RoleDefinitionName "Key Vault Secrets User" -SignInName "<your-email-address>" -Scope "/subscriptions/<subscription-id>/resourceGroups/<resource-group-name>/providers/Microsoft.KeyVault/vaults/<your-unique-keyvault-name>"
 ```
 
-Replace `<your-email-address>`, `<subscription-id>`, `<resource-group-name>`, and `<your-unique-keyvault-name>` with your actual values. `<your-email-address>` is your sign-in name; you can instead use the `-ObjectId` parameter and a Microsoft Entra Object ID.
+Replace \<your-email-address\>, \<subscription-id\>, \<resource-group-name\> and \<your-unique-keyvault-name\> with your actual values. \<your-email-address\> is your sign-in name; you can instead use the `-ObjectId` parameter and a Microsoft Entra Object ID.

includes/key-vault-quickstart-rbac.md

@@ -19,12 +19,12 @@ az role assignment create --role "Key Vault Secrets User" --assignee "<app-id>"
 
 ### [Azure PowerShell](#tab/azure-powershell)
 
-To grant your application permissions to your key vault through Role-Based Access Control (RBAC), assign a role using the Azure PowerShell cmdlet [New-AzRoleAssignment](//powershell/module/az.keyvault/new-azRoleAssignment).
+To grant your application permissions to your key vault through Role-Based Access Control (RBAC), assign a role using the Azure PowerShell cmdlet [New-AzRoleAssignment](/powershell/module/az.keyvault/new-azRoleAssignment).
 
 ```
 New-AzRoleAssignment -ObjectId "<app-id>" -RoleDefinitionName "Key Vault Secrets User" -Scope "/subscriptions/<subscription-id>/resourceGroups/<resource-group-name>/providers/Microsoft.KeyVault/vaults/<your-unique-keyvault-name>"
 ``` 
 
 ---
 
-Replace `<app-id>`, `<subscription-id>`, `<resource-group-name>`, and `<your-unique-keyvault-name>` with your actual values. `<app-id>` is the Application (client) ID of your registered application in Azure AD.
+Replace \<app-id\>, \<subscription-id\>, \<resource-group-name\> and \<your-unique-keyvault-name\> with your actual values. \<app-id\> is the Application (client) ID of your registered application in Azure AD.