Merge pull request #235483 from austinmccollum/main

change first screenshot

Author: American-Dipper

articles/sentinel/media/workspace-manager/enable-workspace-manager-enabled.png

@@ -39,14 +39,13 @@ Depending on your scenario, consider these architectures:
 ## Enable workspace manager on the central workspace
 Enable the central workspace once you have decided which Microsoft Sentinel workspace should be the workspace manager. 
 
-1. Navigate to the **Settings** blade in the parent workspace, and toggle "On" the workspace manager configuration setting.
-1. Once enabled, a new blade **Workspace manager (preview)** appears on the left menu under **Configuration**.
+1. Navigate to the **Settings** blade in the parent workspace, and toggle **On** the workspace manager configuration setting to "Make this workspace a parent".
+1. Once enabled, a new menu **Workspace manager (preview)** appears under **Configuration**.
 
-Here's a comparison of the feature off and enabled side by side.
-:::image type="content" source="media/workspace-manager/workspace-manager-before-after.png" alt-text="Two screenshots showing the workspace manager configuration settings. One screenshot with the workspace parent toggle button off. The other with the menu item added for workspace manager and the toggle button on.":::
+   :::image type="content" source="media/workspace-manager/enable-workspace-manager-on.png" alt-text="Screenshot shows the workspace manager configuration settings. The menu item added for workspace manager is highlighted and the toggle button on.":::
 
 ## Onboard member workspaces
-Member workspaces are the set of workspaces to be managed by workspace manager. You can onboard some or all of the workspaces in the tenant, and across multiple tenants as well (if Azure Lighthouse is enabled).
+Member workspaces are the set of workspaces managed by workspace manager. Onboard some or all of the workspaces in the tenant, and across multiple tenants as well (if Azure Lighthouse is enabled).
 1. Navigate to workspace manager and select "Add workspaces"
     :::image type="content" source="media/workspace-manager/add-workspace.png" alt-text="Screenshot shows the add workspace menu." lightbox="media/workspace-manager/add-workspace.png":::
 1. Select the member workspace(s) you would like to onboard to workspace manager.
@@ -70,23 +69,23 @@ Workspace manager groups allow you to organize workspaces together based on busi
 1. On the **Create or update group** page, enter a **Name** and **Description** for the group.
     :::image type="content" source="media/workspace-manager/add-group-name.png" alt-text="Screenshot shows the group create or update configuration page.":::
 
-1. In the **Select workspaces** tab, click **Add** and select the member workspaces that you would like to add to the group.
+1. In the **Select workspaces** tab, select **Add** and select the member workspaces that you would like to add to the group.
 1. In the **Select content** tab, you have 2 ways to add content items.
-    - Method 1: Select the **Add** menu and choose **All content**. This pulls all active content currently deployed in the central workspace. This list is a point-in-time snapshot that selects only active content, not templates.
-    - Method 2: Select the **Add** menu and choose **Content**. This opens a **Select content** pane to custom select the content to be added. 
+    - Method 1: Select the **Add** menu and choose **All content**. All active content currently deployed in the central workspace is added. This list is a point-in-time snapshot that selects only active content, not templates.
+    - Method 2: Select the **Add** menu and choose **Content**. A **Select content** window opens to custom select the content added. 
     :::image type="content" source="media/workspace-manager/add-group-content.png" alt-text="Screenshot shows the group content selection.":::
 
-1. After either method, you can further filter the content before you **Review + create**.
-1. Once successfully created, the **Group count** increases and your groups are reflected in the **Groups tab**.
+1. Filter the content as needed before you **Review + create**.
+1. Once created, the **Group count** increases and your groups are reflected in the **Groups tab**.
 
 ## Publish the Group definition
 At this point, the content items selected haven't been published to the member workspace(s) yet.
 
-1. Select the group > Click the **Publish content** button.
+1. Select the group > **Publish content**.
 
     :::image type="content" source="media/workspace-manager/publish-group.png" alt-text="Screenshot shows the group publish window.":::
 
-    To bulk publish, multi-select the desired groups and click on **Publish**.
+    To bulk publish, multi-select the desired groups and select **Publish**.
     :::image type="content" source="media/workspace-manager/publish-groups.png" alt-text="Screenshot shows the multi-select group publishing window.":::
 
 1. The **Last publish status** column updates to reflect **In progress**.
@@ -95,12 +94,16 @@ At this point, the content items selected haven't been published to the member w
 1. If successful, the **Last publish status** updates to reflect **Succeeded**. The selected content items now exist in the member workspaces.
     :::image type="content" source="media/workspace-manager/publish-groups-success.png" alt-text="Screenshot shows the last published column with entries that succeeded.":::
 
-    If unsuccessful, the **Last publish status** updates to reflect **Failed**.
+    If just one content item fails to publish for the entire group, the **Last publish status** updates to reflect **Failed**.
 
 
 ### Troubleshooting
-Each publish attempt has a link to help with troubleshooting if something goes wrong. Click the **Failed** hyperlink, to open the job failure details window. A status for each content item and target workspace pair is displayed.
-:::image type="content" source="media/workspace-manager/publish-groups-job-details.png" alt-text="Screenshot shows the job details of a group publishing failure event." lightbox="media/workspace-manager/publish-groups-job-details.png":::
+Each publish attempt has a link to help with troubleshooting if content items fail to publish.  
+
+1. Select the **Failed** hyperlink to open the job failure details window. A status for each content item and target workspace pair is displayed.
+1. Filter the **Status** for failed item pairs.
+
+   :::image type="content" source="media/workspace-manager/publish-groups-job-details-failure.png" alt-text="Screenshot shows the job details of a group publishing failure event." lightbox="media/workspace-manager/publish-groups-job-details-failure.png":::
 
 Common reasons for failure include:
 - Content items referenced in the group definition no longer exist at the time of publish (have been deleted).
@@ -123,4 +126,4 @@ Common reasons for failure include:
 ## Next steps
 - [Manage multiple tenants in Microsoft Sentinel as an MSSP](multiple-tenants-service-providers.md)
 - [Work with Microsoft Sentinel incidents in many workspaces at once](multiple-workspace-view.md)
-- [Protecting MSSP intellectual property in Microsoft Sentinel](mssp-protect-intellectual-property.md)
+- [Protecting MSSP intellectual property in Microsoft Sentinel](mssp-protect-intellectual-property.md)