touchups

v-thepet · v-thepet · commit c3138b07dae8 · 2025-03-26T10:20:14.000-07:00
diff --git a/articles/devtest-labs/add-artifact-vm.md b/articles/devtest-labs/add-artifact-vm.md
@@ -4,21 +4,19 @@ description: Learn how to add or configure artifacts on lab virtual machines (VM
 ms.topic: how-to
 ms.author: rosemalcolm
 author: RoseHJM
-ms.date: 03/25/2025
+ms.date: 03/26/2025
 ms.custom: devx-track-azurepowershell, UpdateFrequency2
 
 #customer intent: As a lab user, I want to add artifacts to my VMs so I can use them to run scripts or commands, install tools or applications, or take other actions on my VMs.
 ---
 
 # Add artifacts to DevTest Labs VMs
 
-This article describes how to add *artifacts* to Azure DevTest Labs virtual machines (VMs). Artifacts are tools, actions, or software you can add to lab VMs. For example, artifacts can run Windows PowerShell scripts or Bash commands, install tools or applications, or take other actions like joining a domain.
+This article describes how to add *artifacts* to Azure DevTest Labs virtual machines (VMs) by using the Azure portal or Azure PowerShell. Artifacts are tools, actions, or software you can add to lab VMs. For example, artifacts can run Windows PowerShell scripts or Bash commands, install tools or applications, or take other actions like joining a domain.
 
 DevTest Labs artifacts can come from the [public DevTest Labs Git repository](https://github.com/Azure/azure-devtestlab/tree/master/Artifacts) or from private Git repositories. Lab users can [create their own custom artifacts](devtest-lab-artifact-author.md) and store them in a repository, and use parameters to customize existing artifacts for their own needs.
 
-A lab administrator can [add artifact repositories to a lab](add-artifact-repository.md) so all lab users can access them. Lab administrators can also [specify mandatory artifacts to be installed on all lab VMs](devtest-lab-mandatory-artifacts.md) at creation.
-
-You can't change or remove mandatory artifacts at VM creation time, but you can add and configure other available artifacts at or after VM creation time. This article describes how to add available artifacts to VMs by using the Azure portal or Azure PowerShell.
+A lab administrator can [add artifact repositories to a lab](add-artifact-repository.md) so all lab users can access them. Lab administrators can also [specify mandatory artifacts to be installed on all lab VMs](devtest-lab-mandatory-artifacts.md) at creation. Lab users can't change or remove mandatory artifacts at VM creation time, but they can add and configure other available artifacts at or after VM creation time.
 
 ## Prerequisites
 
diff --git a/articles/devtest-labs/connect-virtual-machine-through-browser.md b/articles/devtest-labs/connect-virtual-machine-through-browser.md
@@ -4,7 +4,7 @@ description: Learn how to connect to Azure DevTest Labs virtual machines (VMs) t
 ms.topic: how-to
 ms.author: rosemalcolm
 author: RoseHJM
-ms.date: 03/25/2023
+ms.date: 03/26/2023
 ms.custom: UpdateFrequency2
 
 #customer intent: As a lab user, I want to connect to Bastion-enabled lab VMs through my browser, so I can connect securely without using public IP addresses or exposing RDP or SSH ports to the internet.
@@ -15,8 +15,7 @@ ms.custom: UpdateFrequency2
 This article describes how to connect to your DevTest Labs virtual machine (VM) through a browser by using [Azure Bastion](/azure/bastion/index). Bastion provides secure remote desktop protocol (RDP) or secure shell (SSH) access without using public IP addresses or exposing RDP or SSH ports to the internet.
 
 > [!IMPORTANT]
-> - The VM must be in an Azure Bastion-configured virtual network in a lab that has Bastion connections enabled. For more information, see [Enable browser connection to DevTest Labs VMs with Azure Bastion](enable-browser-connection-lab-virtual-machines.md).
-> - You must have ownership or sign-in permissions on the VM.
+> The VM must be in an Azure Bastion-configured virtual network in a lab that has Bastion connections enabled. For more information, see [Enable browser connection to DevTest Labs VMs with Azure Bastion](enable-browser-connection-lab-virtual-machines.md).
 
 To connect to a lab VM through a browser:
 
diff --git a/articles/devtest-labs/devtest-lab-add-devtest-user.md b/articles/devtest-labs/devtest-lab-add-devtest-user.md
@@ -4,15 +4,15 @@ description: Learn about the Azure DevTest Labs Owner, Contributor, and DevTest
 ms.topic: how-to
 ms.author: rosemalcolm
 author: RoseHJM
-ms.date: 03/25/2025
+ms.date: 03/26/2025
 ms.custom: devx-track-azurepowershell, UpdateFrequency2
 
 #customer intent: As a lab owner, I want to add and configure users for my lab so I can grant the access necessary to do specific lab tasks.
 ---
 
 # Add and configure lab users in Azure DevTest Labs
 
-Azure DevTest Labs has three built-in roles: **Owner**, **Contributor**, and **DevTest Labs User**, that use Azure [role-based access control](/azure/role-based-access-control/overview) (RBAC) to define the access necessary to do specific lab tasks. This article lists the tasks each role can do, and describes how Lab Owners can add members to lab roles by using the Azure portal or an Azure PowerShell script.
+Azure DevTest Labs has three built-in roles: **Owner**, **Contributor**, and **DevTest Labs User**, that define the access necessary to do specific lab tasks. Lab owners use Azure [role-based access control](/azure/role-based-access-control/overview) (RBAC) to add lab users with assigned roles. This article lists the tasks each role can do, and describes how Lab Owners can add members to lab roles by using the Azure portal or an Azure PowerShell script.
 
 <a name="devtest-labs-user"></a>
 ## Owners, Contributors, and DevTest Labs Users
@@ -44,29 +44,39 @@ The following table shows the actions that the DevTest Labs **Owner**, **Contrib
 > [!NOTE]
 > Lab users automatically have the **Owner** role on VMs they create.
 
-### Required permissions
+### Lab Owner role
 
-Azure permissions propagate from parent scope to child scope. Owners of an Azure subscription that contains labs are automatically owners of the subscription's labs.
+Azure permissions propagate from parent scope to child scope. Owners of an Azure subscription that contains labs are automatically **Owner**s of the subscription's labs.
 
-Azure subscription [Owners](/azure/role-based-access-control/built-in-roles#owner) and [User Access Administrators](/azure/role-based-access-control/built-in-roles#user-access-administrator) can add DevTest Labs **Owner**s, **Contributor**s, and **DevTest Labs Users** to labs in the subscription.
+Azure subscription [Owners](/azure/role-based-access-control/built-in-roles/privileged#owner) and [User Access Administrators](/azure/role-based-access-control/built-in-roles/privileged#user-access-administrator) can add and assign DevTest Labs **Owner**s, **Contributor**s, and **DevTest Labs Users** to labs in their subscriptions. Azure subscription [Contributors](/azure/role-based-access-control/built-in-roles/privileged#contributor) can create labs, but they are **Owners** of those labs only if a subscription Owner or User Access Administrator assigns them the lab **Owner** role.
 
-Users that are granted the lab **Owner** role can add and configure **Owner**s, **Contributor**s, and **DevTest Labs User**s for their own labs. However, added lab owners have a narrower scope of administration than Azure subscription-based owners. Added owners don't have full access to some resources that the DevTest Labs service creates.
+Lab users that are granted the **Owner** role can add and assign **Owner**s, **Contributor**s, and **DevTest Labs User**s for their own labs. However, added lab owners have a narrower scope of administration than Azure subscription-based owners. Added owners don't have full access to some resources that the DevTest Labs service creates.
 
-DevTest Labs Users must have a valid [Microsoft account](/windows-server/identity/ad-ds/manage/understand-microsoft-accounts), but they don't need an Azure subscription.
+## Prerequisites
 
-## Add a member to a lab
+# [Azure portal](#tab/portal)
 
-Lab Owners can add members to lab roles by using the Azure portal or an Azure PowerShell script.
+- You must be a lab **Owner**, either by assignment from a subscription owner or by inheritance as a subscription owner.
+- The user to be added must have a valid [Microsoft account](/windows-server/identity/ad-ds/manage/understand-microsoft-accounts). They don't need an Azure subscription.
 
-# [Azure portal](#tab/portal)
+# [Azure PowerShell](#tab/PowerShell)
 
-### Prerequisite
+- You must be a lab **Owner**, either by assignment from a subscription owner or by inheritance as a subscription owner.
+- The user to add must have a valid [Microsoft account](/windows-server/identity/ad-ds/manage/understand-microsoft-accounts). They don't need an Azure subscription.
+- This PowerShell script requires the added user to be in the Microsoft Entra ID. You can add an external user to Microsoft Entra ID as a guest. For more information, see [Add a new guest user](/entra/fundamentals/how-to-create-delete-users#invite-an-external-user). If you can't add the user to Microsoft Entra ID, use the portal procedure instead.
+- Azure PowerShell. You can either:
+  - [Use Azure Cloud Shell](/azure/cloud-shell/quickstart). Be sure to select the **PowerShell** environment in Cloud Shell.
+  - [Install Azure PowerShell](/powershell/azure/install-azure-powershell) to use on a physical or virtual machine. If necessary, run `Update-Module -Name Az` to update your installation.
 
-- Lab **Owner** role, either by assignment from a subscription owner or by inheritance as a subscription owner.
+---
 
-### Add a lab member
+## Add a user to a lab
 
-The following procedure adds a **DevTest Labs User** member to a lab. If you're an owner of the Azure subscription the lab is in, you can also do this procedure from the subscription's **Access control (IAM)** page.
+Lab Owners can add members to lab roles by using the Azure portal or an Azure PowerShell script.
+
+# [Azure portal](#tab/portal)
+
+The following procedure adds a user to a lab with **DevTest Labs User** role. If you're an owner of the Azure subscription the lab is in, you can also do this procedure from the subscription's **Access control (IAM)** page.
 
 1. On the lab's home page, select **Configuration and policies** from the left navigation.
 1. On the **Configuration and policies** page, select **Access control (IAM)** from the left navigation.
@@ -85,26 +95,14 @@ The following procedure adds a **DevTest Labs User** member to a lab. If you're
 # [Azure PowerShell](#tab/PowerShell)
 <a name="add-an-external-user-to-a-lab-using-powershell"></a>
 
-### Prerequisites
-
-- Lab **Owner** role, either by assignment from a subscription owner or by inheritance as a subscription owner.
-- Azure PowerShell. You can either:
-  - [Use Azure Cloud Shell](/azure/cloud-shell/quickstart). Be sure to select the **PowerShell** environment in Cloud Shell.
-  - [Install Azure PowerShell](/powershell/azure/install-azure-powershell) to use on a physical or virtual machine. If necessary, run `Update-Module -Name Az` to update your installation.
-
->[!NOTE]
->This PowerShell script requires the added user to be in the Microsoft Entra ID. You can add an external user to Microsoft Entra ID as a guest. For more information, see [Add a new guest user](/entra/fundamentals/how-to-create-delete-users#invite-an-external-user). If you can't add the user to Microsoft Entra ID, use the portal procedure instead.
-
-### Add a member
-
-The following PowerShell script adds a member to a lab with **DevTest Labs User** role. To use the script, replace the parameter values under the `# Values to change` comment with your own values. You can get the `subscriptionId`, `labResourceGroup`, and `labName` values from the lab's main page in the Azure portal.
+The following PowerShell script adds a user to a lab with **DevTest Labs User** role. To use the script, replace the parameter values under the `# Values to change` comment with your own values. You can get the `subscriptionId`, `labResourceGroup`, and `labName` values from the lab's main page in the Azure portal.
 
 ```azurepowershell
 # Values to change
 $subscriptionId = "<Azure subscription ID>"
-$labResourceGroup = "<Lab's resource group name>"
+$labResourceGroup = "<Lab resource group name>"
 $labName = "<Lab name>"
-$userDisplayName = "<User's display name>"
+$userDisplayName = "<User display name>"
 
 # Sign into your Azure account.
 Connect-AzAccount
diff --git a/articles/devtest-labs/enable-browser-connection-lab-virtual-machines.md b/articles/devtest-labs/enable-browser-connection-lab-virtual-machines.md
@@ -4,15 +4,15 @@ description: Learn how to integrate Azure Bastion with DevTest Labs to enable ac
 ms.topic: how-to
 ms.author: rosemalcolm
 author: RoseHJM
-ms.date: 03/25/2025
+ms.date: 03/26/2025
 ms.custom: UpdateFrequency2
 
 #customer intent: As a lab owner, I want to enable Azure Bastion for my lab virtual network so lab users can connect to their VMs through their browsers.
 ---
 
 # Enable browser connection to lab VMs through Azure Bastion
 
-Azure DevTest Labs integrates with [Azure Bastion](/azure/bastion/index) to allow connecting to lab virtual machines (VMs) through a browser. When a lab owner enables browser access to lab VMs through Bastion, all lab users can connect to their VMs through their browsers without needing any other client, agent, or software.
+Azure DevTest Labs integrates with [Azure Bastion](/azure/bastion/index) to allow connecting to lab virtual machines (VMs) through a browser. When a lab owner enables browser access to lab VMs through Bastion, lab users can connect to their VMs through their browsers without needing any other client, agent, or software.
 
 Azure Bastion provides secure and seamless remote desktop protocol (RDP) and secure shell (SSH) connectivity over transport layer security (TLS), directly from the Azure portal. Lab VMs don't need public IP addresses.
 
@@ -24,7 +24,7 @@ This article covers two ways to enable Azure Bastion browser connectivity to Dev
 ## Prerequisites
 
 - To enable and configure Azure Bastion for a lab, you need **Owner** or **Contributor** role in the lab.
-- To connect to an Azure Bastion-enabled lab virtual machine (VM) through a browser, you need **DevTest Labs User** role in the lab and sign-in access to the VM.
+- To connect to an Azure Bastion-enabled lab virtual machine (VM) through a browser, you need ownership access to the VM and at least **DevTest Labs User** role in the lab.
 
 For more information about DevTest Labs user roles and access, see [Add and configure lab users](devtest-lab-add-devtest-user.md).
 
