Merge pull request #249716 from OWinfreyATL/owinfreyATL-GovernanceEntraUpdates

v-regandowner · web-flow · commit b3cbeff43e80 · 2023-08-30T10:14:06.000-04:00
Putting portal bubble back into gov docs
diff --git a/articles/active-directory/governance/complete-access-review.md b/articles/active-directory/governance/complete-access-review.md
@@ -34,6 +34,8 @@ For more information, see [License requirements](access-reviews-overview.md#lice
  
 ## View the status of an access review
  
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 You can track the progress of access reviews as they're completed.
  
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
diff --git a/articles/active-directory/governance/create-access-review-pim-for-groups.md b/articles/active-directory/governance/create-access-review-pim-for-groups.md
@@ -29,6 +29,8 @@ For more information, see [License requirements](access-reviews-overview.md#lice
 
 ## Create a PIM for Groups access review
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 ### Scope
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
diff --git a/articles/active-directory/governance/create-access-review.md b/articles/active-directory/governance/create-access-review.md
@@ -265,6 +265,8 @@ Use the following instructions to create an access review on a team with shared
 
 ## Allow group owners to create and manage access reviews of their groups
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 The prerequisite role is a Global or User administrator.
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
diff --git a/articles/active-directory/governance/create-lifecycle-workflow.md b/articles/active-directory/governance/create-lifecycle-workflow.md
@@ -28,7 +28,7 @@ You can create and customize workflows for common scenarios by using templates,
 
 ## Create a lifecycle workflow by using a template in the Microsoft Entra admin center
 
-
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
 If you're using the Microsoft Entra admin center to create a workflow, you can customize existing templates to meet your organization's needs. These templates include one for pre-hire common scenarios.
 
diff --git a/articles/active-directory/governance/entitlement-management-access-package-approval-policy.md b/articles/active-directory/governance/entitlement-management-access-package-approval-policy.md
@@ -48,13 +48,15 @@ For a demonstration of how to add a multi-stage approval to a request policy, wa
 
 ## Change approval settings of an existing access package assignment policy
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 Follow these steps to specify the approval settings for requests for the access package through a policy:
 
-**Prerequisite role:** Global administrator, Identity Governance administrator, User administrator, Catalog owner, or Access package manager
+**Prerequisite role:** Global administrator, Identity Governance Administrator, User Administrator, Catalog owner, or Access package manager
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
 
-1. Browse to **Identity governance** > **Entitlement management** > **Access package**.
+1. Browse to **Identity governance** > **Entitlement management** > **Access packages**.
 
 1. On the **Access packages** page open an access package.
 
diff --git a/articles/active-directory/governance/entitlement-management-access-package-assignments.md b/articles/active-directory/governance/entitlement-management-access-package-assignments.md
@@ -35,6 +35,8 @@ To use entitlement management and assign users to access packages, you must have
 
 ## View who has an assignment
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 **Prerequisite role:** Global administrator, Identity Governance administrator, User administrator, Catalog owner, Access package manager or Access package assignment manager
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
@@ -76,7 +78,7 @@ $assignments | ft Id,state,{$_.Target.id},{$_.Target.displayName}
 
 In some cases, you might want to directly assign specific users to an access package so that users don't have to go through the process of requesting the access package. To directly assign users, the access package must have a policy that allows administrator direct assignments.
 
-**Prerequisite role:** Global administrator, User administrator, Catalog owner, Access package manager or Access package assignment manager
+**Prerequisite role:** Global Administrator, User Administrator, Identity Governance Administrator, Catalog owner, Access package manager or Access package assignment manager
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
 
diff --git a/articles/active-directory/governance/entitlement-management-access-package-auto-assignment-policy.md b/articles/active-directory/governance/entitlement-management-access-package-auto-assignment-policy.md
@@ -38,6 +38,8 @@ You'll need to have attributes populated on the users who will be in scope for b
 
 ## Create an automatic assignment policy
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 To create a policy for an access package, you need to start from the access package's policy tab. Follow these steps to create a new automatic assignment policy for an access package.
 
 **Prerequisite role:** Global administrator or Identity Governance administrator
diff --git a/articles/active-directory/governance/entitlement-management-access-package-first.md b/articles/active-directory/governance/entitlement-management-access-package-first.md
@@ -62,7 +62,7 @@ A resource directory has one or more resources to share. In this step, you creat
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a Global administrator or User administrator.
 
-1. In the left navigation, select **Identity**.
+1. Browse to **Identity governance** > **Entitlement management** > **Access packages**.
 
 1. [Create two users](../fundamentals/add-users.md). Use the following names or different names.
 
@@ -213,9 +213,7 @@ In this step, you confirm that the **internal requestor** was assigned the acces
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as **Admin1**.
 
-1. Select **Identity Governance**.
-
-1. In the left menu, select **Access packages**.
+1. Browse to **Identity governance** > **Entitlement management** > **Access packages**.
 
 1. Find and select **Marketing Campaign** access package.
 
diff --git a/articles/active-directory/governance/entitlement-management-access-package-lifecycle-policy.md b/articles/active-directory/governance/entitlement-management-access-package-lifecycle-policy.md
@@ -31,6 +31,8 @@ To ensure users have the right access to an access package, custom questions can
 
 ## Open lifecycle settings
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 To change the lifecycle settings for an access package, you need to open the corresponding policy. Follow these steps to open the lifecycle settings for an access package.
 
 **Prerequisite role:** Global administrator, Identity Governance administrator, User administrator, Catalog owner, or Access package manager
diff --git a/articles/active-directory/governance/entitlement-management-access-package-manage-lifecycle.md b/articles/active-directory/governance/entitlement-management-access-package-manage-lifecycle.md
@@ -36,6 +36,8 @@ You can directly convert ungoverned users to be governed by using the **Mark Gue
 
 ## Manage guest user lifecycle in the Azure portal
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 To manage user lifecycle, you'd follow these steps:
 
 **Prerequisite role:** Global administrator, User administrator, Catalog owner, Access package manager or Access package assignment manager
diff --git a/articles/active-directory/governance/entitlement-management-access-package-request-policy.md b/articles/active-directory/governance/entitlement-management-access-package-request-policy.md
@@ -53,6 +53,8 @@ For information about the priority logic that is used when multiple policies app
 
 ## Open an existing access package and add a new policy with different request settings
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 If you have a set of users that should have different request and approval settings, you'll likely need to create a new policy. Follow these steps to start adding a new policy to an existing access package:
 
 **Prerequisite role:** Global administrator, Identity Governance administrator, User administrator, Catalog owner, or Access package manager
diff --git a/articles/active-directory/governance/entitlement-management-access-package-requests.md b/articles/active-directory/governance/entitlement-management-access-package-requests.md
@@ -26,6 +26,8 @@ In entitlement management, you can see who has requested access packages, the po
 
 ## View requests
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 **Prerequisite role:** Global administrator, Identity Governance administrator, User administrator, Catalog owner, Access package manager or Access package assignment manager
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
diff --git a/articles/active-directory/governance/entitlement-management-access-package-resources.md b/articles/active-directory/governance/entitlement-management-access-package-resources.md
@@ -30,6 +30,8 @@ This video provides an overview of how to change an access package.
 
 ## Check catalog for resources
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 If you need to add resources to an access package, you should check whether the resources you need are available in the access package's catalog. If you're an access package manager, you can't add resources to a catalog, even if you own them. You're restricted to using the resources available in the catalog.
 
 **Prerequisite role:** Global administrator, Identity Governance administrator, User administrator, Catalog owner, or Access package manager
diff --git a/articles/active-directory/governance/entitlement-management-access-package-settings.md b/articles/active-directory/governance/entitlement-management-access-package-settings.md
@@ -28,6 +28,8 @@ In order for the external user from another directory to use the My Access porta
 
 ## Share link to request an access package
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 **Prerequisite role:** Global administrator, Identity Governance administrator, User administrator, Catalog owner, or Access package manager
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
diff --git a/articles/active-directory/governance/entitlement-management-access-reviews-create.md b/articles/active-directory/governance/entitlement-management-access-reviews-create.md
@@ -35,6 +35,8 @@ For more information, see [License requirements](entitlement-management-overview
 
 ## Create an access review of an access package
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 You can enable access reviews when [creating a new access package](entitlement-management-access-package-create.md) or [editing an existing access package assignment policy](entitlement-management-access-package-lifecycle-policy.md) policy. If you have multiple policies, for different communities of users to request access, you can have independent access review schedules for each policy. Follow these steps to enable access reviews of an access package's assignments:
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
diff --git a/articles/active-directory/governance/entitlement-management-catalog-create.md b/articles/active-directory/governance/entitlement-management-catalog-create.md
@@ -214,7 +214,7 @@ To remove resources from a catalog:
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
 
-1. Browse to **Identity governance** > **Catalogs**.
+1. Browse to **Identity governance** > **Entitlement management** > **Catalogs**.
 
 1. On the **Catalogs** page open the catalog you want to remove resources from.
 
@@ -226,6 +226,8 @@ To remove resources from a catalog:
 
 ## Add more catalog owners
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 The user who created a catalog becomes the first catalog owner. To delegate management of a catalog, add users to the catalog owner role. Adding more catalog owners helps to share the catalog management responsibilities.
 
 **Prerequisite roles:** Global administrator, Identity Governance administrator, User administrator, or Catalog owner
diff --git a/articles/active-directory/governance/entitlement-management-custom-teams-extension.md b/articles/active-directory/governance/entitlement-management-custom-teams-extension.md
@@ -35,6 +35,8 @@ In this tutorial, you learn how to:
 
 ## Create a Logic App and custom extension in a catalog
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 Prerequisite roles: Global administrator, Identity Governance administrator, or Catalog owner and Resource Group Owner.
 
 To create a Logic App and custom extension in a catalog, you'd follow these steps:
diff --git a/articles/active-directory/governance/entitlement-management-delegate-catalog.md b/articles/active-directory/governance/entitlement-management-delegate-catalog.md
@@ -37,6 +37,8 @@ If you have existing catalogs to delegate, then continue at the [create and mana
 
 ## As an IT administrator, delegate to a catalog creator
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 Follow these steps to assign a user to the catalog creator role.
 
 **Prerequisite role:** Global administrator, Identity Governance administrator or User administrator
diff --git a/articles/active-directory/governance/entitlement-management-delegate-managers.md b/articles/active-directory/governance/entitlement-management-delegate-managers.md
@@ -40,6 +40,8 @@ In addition to the catalog owner and access package manager roles, you can also
 
 ## As a catalog owner, delegate to an access package manager
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 Follow these steps to assign a user to the access package manager role:
 
 **Prerequisite role:** Global administrator, Identity Governance administrator, User administrator, or Catalog owner
diff --git a/articles/active-directory/governance/entitlement-management-external-users.md b/articles/active-directory/governance/entitlement-management-external-users.md
@@ -135,6 +135,8 @@ To ensure people outside of your organization can request access packages and ge
 
 ## Manage the lifecycle of external users
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 You can select what happens when an external user, who was invited to your directory through making an access package request, no longer has any access package assignments. This can happen if the user relinquishes all their access package assignments, or their last access package assignment expires. By default, when an external user no longer has any access package assignments, they're blocked from signing in to your directory. After 30 days, their guest user account is removed from your directory.  You can also configure that an external user is not blocked from sign in or deleted, or that an external user is not blocked from sign in but is deleted (preview).
 
 **Prerequisite role:** Global administrator, Identity Governance administrator or User administrator
diff --git a/articles/active-directory/governance/entitlement-management-group-licenses.md b/articles/active-directory/governance/entitlement-management-group-licenses.md
@@ -18,6 +18,8 @@ ms.collection: M365-identity-device-management
 
 ---
 # Tutorial: Manage the lifecycle of your group-based licenses in Azure AD
+
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
  
 With Azure Active Directory (Azure AD), you can use groups to manage the [licenses for your applications](../enterprise-users/licensing-groups-assign.md). You can make the management of these groups even easier by using entitlement management: 
 
diff --git a/articles/active-directory/governance/entitlement-management-logic-apps-integration.md b/articles/active-directory/governance/entitlement-management-logic-apps-integration.md
@@ -50,6 +50,8 @@ These triggers to Logic Apps are controlled in a tab within access package polic
 
 ## Create and add a Logic App workflow to a catalog for use in entitlement management 
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 **Prerequisite roles:** Global administrator, Identity Governance administrator, Catalog owner or Resource Group Owner 
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
diff --git a/articles/active-directory/governance/entitlement-management-logs-and-reporting.md b/articles/active-directory/governance/entitlement-management-logs-and-reporting.md
@@ -36,9 +36,11 @@ Archiving Azure AD audit logs requires you to have Azure Monitor in an Azure sub
 
 **Prerequisite role**: Global Administrator
 
-1. Sign in to the [Microsoft Entra admin center](https://portal.azure.com) as a user who is a Global Administrator. Make sure you have access to the resource group containing the Azure Monitor workspace.
+1. Sign in to the [Microsoft Entra admin center](https://portal.azure.com) as a Global Administrator. Make sure you have access to the resource group containing the Azure Monitor workspace.
  
-1. Select **Identity**, then select **Diagnostic settings** under **Monitoring and health** in the left navigation menu. Check if there's already a setting to send the audit logs to that workspace.
+1. Browse to **Identity** > **Monitoring & health** > **Diagnostic settings**.
+
+1. Check if there's already a setting to send the audit logs to that workspace.
 
 1. If there isn't already a setting, select **Add diagnostic setting**. Use the instructions in [Integrate Azure AD logs with Azure Monitor logs](../reports-monitoring/howto-integrate-activity-logs-with-log-analytics.md) to send the Azure AD audit log to the Azure Monitor workspace.
 
@@ -52,7 +54,7 @@ Archiving Azure AD audit logs requires you to have Azure Monitor in an Azure sub
 
 1. Later, to see the range of dates held in your workspace, you can use the *Archived Log Date Range* workbook:  
     
-    1. Select **Identity** then select **Workbooks** under **Monitoring and health**. 
+    1. Browse to **Identity** > **Monitoring & health** > **Workbooks**.
     
     1. Expand the section **Azure Active Directory Troubleshooting**, and select on **Archived Log Date Range**. 
 
diff --git a/articles/active-directory/governance/entitlement-management-onboard-external-user.md b/articles/active-directory/governance/entitlement-management-onboard-external-user.md
@@ -32,6 +32,8 @@ For more information, see [License requirements](entitlement-management-overview
 
 ## Step 1: Configure basics
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 **Prerequisite role:** Global administrator, Identity Governance administrator, User administrator, Catalog owner, or Access package manager
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
diff --git a/articles/active-directory/governance/entitlement-management-organization.md b/articles/active-directory/governance/entitlement-management-organization.md
@@ -72,6 +72,8 @@ For a demonstration of how to add a connected organization, watch the following
 
 ## View the list of connected organizations
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 **Prerequisite role**: *Global administrator*, *Identity Governance administrator*,  or *User administrator*
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Identity Governance Administrator](../roles/permissions-reference.md#identity-governance-administrator).
diff --git a/articles/active-directory/governance/entitlement-management-reports.md b/articles/active-directory/governance/entitlement-management-reports.md
@@ -31,6 +31,8 @@ Watch the following video to learn how to view what resources users have access
 
 ## View users assigned to an access package
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 This report enables you to list all of the users who are assigned to an access package.
 
 **Prerequisite role:** Global administrator, Identity Governance administrator or User administrator
diff --git a/articles/active-directory/governance/entitlement-management-verified-id-settings.md b/articles/active-directory/governance/entitlement-management-verified-id-settings.md
@@ -39,6 +39,7 @@ Before you begin, you must set up your tenant to use the [Microsoft Entra Verifi
 
 ## Create an access package with verified ID requirements
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
 To add a verified ID requirement to an access package, you must start from the access package’s requests tab. Follow these steps to add a verified ID requirement to a new access package.
 
diff --git a/articles/active-directory/governance/trigger-custom-task.md b/articles/active-directory/governance/trigger-custom-task.md
@@ -27,6 +27,8 @@ For more information about Lifecycle Workflows extensibility, see: [Workflow Ext
 
 ## Create a custom task extension using the Microsoft Entra admin center
 
+[!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
+
 To use a custom task extension in your workflow, first a custom task extension must be created to be linked with an Azure Logic App. You're able to create a Logic App at the same time you're creating a custom task extension. To do this, you complete these steps:
 
 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Lifecycle Workflows Administrator](../roles/permissions-reference.md#lifecycle-workflows-administrator).
