Merge pull request #56829 from trinadhkotturu/patch-13

Update backup-rbac-rs-vault.md

Author: TrishaMc

articles/backup/backup-rbac-rs-vault.md

@@ -6,7 +6,7 @@ author: trinadhk
 manager: shreeshd
 ms.service: backup
 ms.topic: conceptual
-ms.date: 7/11/2018
+ms.date: 11/1/2018
 ms.author: trinadhk
 ---
 
@@ -35,24 +35,28 @@ The following table captures the Backup management actions and corresponding min
 | Enable backup of Azure VMs | Backup Operator | Resource group containing the vault |
 | | Virtual Machine Contributor | VM resource |
 | On-demand backup of VM | Backup Operator | Recovery vault resource |
-| Restore VM | Backup Operator | Resource group in which VM will be deployed |
+| Restore VM | Backup Operator | Recovery Services vault |
 | | Virtual Machine Contributor | Resource group in which VM will be deployed |
+| | Virtual Machine Contributor | Source VM which got backed up |
 | Restore unmanaged disks VM backup | Backup Operator | Recovery vault resource |
-| | Virtual Machine Contributor | VM resource |
-| | Storage Account Contributor | Storage account resource |
+| | Virtual Machine Contributor | Source VM which got backed up |
+| | Storage Account Contributor | Storage account resource where disks are going to be restored |
 | Restore managed disks from VM backup | Backup Operator | Recovery vault resource |
-| | Virtual Machine Contributor | VM resource |
-| | Storage Account Contributor | Storage account resource |
-| | Contributor | Resource group to which managed disk will be restored |
+| | Virtual Machine Contributor | Source VM which got backed up |
+| | Storage Account Contributor | Temporary Storage account selected as part of restore to hold data from vault before converting them to managed disks |
+| | Contributor | Resource group to which managed disk(s) will be restored |
 | Restore individual files from VM backup | Backup Operator | Recovery vault resource |
-| | Virtual Machine Contributor | VM resource |
+| | Virtual Machine Contributor | Source VM which got backed up |
 | Create backup policy for Azure VM backup | Backup Contributor | Recovery vault resource |
 | Modify backup policy of Azure VM backup | Backup Contributor | Recovery vault resource |
 | Delete backup policy of Azure VM backup | Backup Contributor | Recovery vault resource |
 | Stop backup (with retain data or delete data) on VM backup | Backup Contributor | Recovery vault resource |
 | Register on-premises Windows Server/client/SCDPM or Azure Backup Server | Backup Operator | Recovery vault resource |
 | Delete registered on-premises Windows Server/client/SCDPM or Azure Backup Server | Backup Contributor | Recovery vault resource |
 
+> [!IMPORTANT]
+> If you specify VM Contributor at a VM resource scope and click on Backup as part of VM settings, it will open 'Enable Backup' screen even though VM is already backed up as the call to verify backup status works only at subscription level. To avoid this, either go to vault and open the backup item view of the VM or specify VM Contributor role at a subscription level. 
+
 ## Next steps
 * [Role Based Access Control](../role-based-access-control/role-assignments-portal.md): Get started with RBAC in the Azure portal.
 * Learn how to manage access with: