Merge pull request #251658 from kenwith/admin-center-app-provisioning-steps-2

Adds least privilege role to sign in instruction.

Author: prmerger-automator[bot]

articles/active-directory/app-proxy/application-proxy-configure-custom-domain.md

@@ -59,7 +59,7 @@ To configure an on-premises app to use a custom domain, you need a verified Azur
 ### Create and verify a custom domain
 
 To create and verify a custom domain:
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
 1. Browse to **Identity** > **Settings** > **Domain names**.
 1. Select **Add custom domain**. 
 1. Enter your custom domain name and select **Add Domain**. 

articles/active-directory/app-proxy/application-proxy-configure-custom-home-page.md

@@ -46,7 +46,7 @@ You can set the home page URL either through the Microsoft Entra admin center or
 [!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
 To change the home page URL of your app through the Microsoft Entra admin center, follow these steps:
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
 1. Select your username in the upper-right corner. Verify you're signed in to a directory that uses 
 1. Browse to **Identity** > **Applications** > **App registrations**. The list of registered apps appears.
 1. Choose your app from the list. A page showing the details of the registered app appears.

articles/active-directory/app-proxy/application-proxy-configure-hard-coded-link-translation.md

@@ -130,7 +130,7 @@ If you need to support one of these two scenarios, use the same internal and ext
 [!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
 Getting started with link translation is as easy as clicking a button:
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **All applications**.
 1. Select the app you want to manage.
 1. Turn **Translate URLs in application body** to **Yes**.

articles/active-directory/app-proxy/application-proxy-connector-groups.md

@@ -31,7 +31,7 @@ To group your connectors, you have to make sure you [installed multiple connecto
 ## Create connector groups
 
 Use these steps to create as many connector groups as you want.
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Application proxy**.
 1. Select **New connector group**. The New Connector Group blade appears.
 

articles/active-directory/app-proxy/application-proxy-integrate-with-logic-apps.md

@@ -47,7 +47,7 @@ To follow this tutorial, you will need:
 
 When a new Enterprise Application is created, a matching App Registration is also created. The App Registration allows configuration of secure programmatic access using certificates, secrets, or federated credentials. For integration with a Logic App, we will need to configure a client secret key, and configure the API permissions.
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
 
 1. Browse to **Identity** > **Applications** > **App registrations**.
 

articles/active-directory/app-proxy/application-proxy-integrate-with-tableau.md

@@ -45,7 +45,7 @@ For:
 **To publish your app**: 
 
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
 
 1. Browse to **Identity** > **Applications** > **Enterprise applications**.
 

articles/active-directory/app-proxy/application-proxy-ping-access-publishing-guide.md

@@ -44,7 +44,7 @@ If you've enabled Application Proxy and installed a connector already, you can s
 
 The Application Proxy connector is a Windows Server service that directs the traffic from your remote employees to your published applications. For more detailed installation instructions, see [Tutorial: Add an on-premises application for remote access through Application Proxy in Azure Active Directory](../app-proxy/application-proxy-add-on-premises-application.md).
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Application proxy**.
 1. Select **Download connector service**. The **Application Proxy Connector Download** page appears.
 

articles/active-directory/app-proxy/application-proxy-qlik.md

@@ -31,7 +31,7 @@ To publish QlikSense, you will need to publish two applications in Azure.
 Follow these steps to publish your app. For a more detailed walkthrough of steps 1-8, see [Publish applications using Azure AD Application Proxy](../app-proxy/application-proxy-add-on-premises-application.md). 
 
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
 1. Browse to **Identity** > **Applications** > **Enterprise applications**.
 3. Select **New application** at the top of the blade. 
 4. Select **On-premises application**. 

articles/active-directory/app-proxy/application-proxy-secure-api-access.md

@@ -48,7 +48,7 @@ To publish the SecretAPI web API through Application Proxy:
 
 1. Build and publish the sample SecretAPI project as an ASP.NET web app on your local computer or intranet. Make sure you can access the web app locally.
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
 
 1. Browse to **Identity** > **Applications** > **Enterprise applications**.
 
@@ -100,7 +100,7 @@ You've published your web API through Azure AD Application Proxy. Now, add users
 Native apps are programs developed to use on a particular platform or device. Before your native app can connect and access an API, you must register it in Azure AD. The following steps show how to register a native app and give it access to the web API you published through Application Proxy.
 
 To register the AppProxyNativeAppSample native app:
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
 
 1. Browse to **Identity** > **Applications** > **Enterprise applications** > **App registrations**.