fixed tabs

Author: shellyhaverkamp

articles/healthcare-apis/azure-api-for-fhir/find-identity-object-ids.md

@@ -15,25 +15,29 @@ ms.author: kesheth
 
 [!INCLUDE [retirement banner](../includes/healthcare-apis-azure-api-fhir-retirement.md)]
 
-In this article, learn how to find identity object IDs needed when configuring the Azure API for FHIR to [use an external or secondary Active Directory tenant](configure-local-rbac.md) for data plane.
+In this article, learn how to find the identity object IDs needed to configure the Azure API for FHIR service to [use an external or secondary Active Directory tenant](configure-local-rbac.md) for data plane.
 
 ## Find user object ID
 
-If you have a user with user name `[email protected]`, you can locate the user's `ObjectId` by using this Microsoft Graph PowerShell command:
+If you have a user with user name `[email protected]`, you can locate the user's `ObjectId` by using a Microsoft Graph PowerShell command or the Azure Command-Line Interface (CLI).
+
+#### [PowerShell](#tab/powershell)
 
 ```powershell
 $(Get-MgUser -Filter "UserPrincipalName eq '[email protected]'").Id
 ```
 
-Or use the Azure Command-Line Interface (CLI):
+#### [Azure CLI](#tab/command-line)
 
 ```azurecli-interactive
 az ad user show --id [email protected] --query id --out tsv
 ```
 
 ## Find service principal object ID
 
-Suppose you registered a [service client app](register-service-azure-ad-client-app.md) and you want to allow this service client to access the Azure API for FHIR. Find the object ID for the client service principal with this Microsoft Graph PowerShell command:
+Suppose you registered a [service client app](register-service-azure-ad-client-app.md) and you want to allow this service client to access the Azure API for FHIR. Find the object ID for the client service principal with a Microsoft Graph PowerShell command or the Azure CLI.
+
+#### [PowerShell](#tab/powershell)
 
 ```powershell
 $(Get-MgServicePrincipal -Filter "AppId eq 'XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX'").Id
@@ -45,23 +49,25 @@ Where `XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX` is the service client application I
 $(Get-MgServicePrincipal -Filter "DisplayName eq 'testapp'").Id
 ```
 
-If you're using the Azure CLI, you can use:
+#### [Azure CLI](#tab/command-line)
 
 ```azurecli-interactive
 az ad sp show --id XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX --query id --out tsv
 ```
 
 ## Find a security group object ID
 
-If you would like to locate the object ID of a security group, you can use the following Microsoft Graph PowerShell command:
+If you would like to locate the object ID of a security group, you can use a Microsoft Graph PowerShell command or the Azure CLI.
+
+#### [PowerShell](#tab/powershell)
 
 ```powershell
 $(Get-MgGroup -Filter "DisplayName eq 'mygroup'").Id
 ```
 
 Where `mygroup` is the name of the group you're interested in.
 
-If you're using the Azure CLI, you can use:
+#### [Azure CLI](#tab/command-line)
 
 ```azurecli-interactive
 az ad group show --group "mygroup" --query id --out tsv