More files.

Author: jdmartinez36

articles/virtual-machines/linux/disk-encryption-key-vault-aad.md

@@ -114,7 +114,7 @@ You can manage your service principals with Azure CLI using the [az ad sp](/cli/
 1. Create a new service principal.
 
      ```azurecli-interactive
-     az ad sp create-for-rbac --name "ServicePrincipalName" --password "My-AAD-client-secret" --skip-assignment
+     az ad sp create-for-rbac --name "ServicePrincipalName" --role Contributor --password "My-AAD-client-secret" --skip-assignment
      ```
 3.  The appId returned is the Azure AD ClientID used in other commands. It's also the SPN you'll use for az keyvault set-policy. The password is the client secret that you should use later to enable Azure Disk Encryption. Safeguard the Azure AD client secret appropriately.
 

articles/virtual-machines/windows/disk-encryption-key-vault-aad.md

@@ -114,7 +114,7 @@ You can manage your service principals with Azure CLI using the [az ad sp](/cli/
 1. Create a new service principal.
 
      ```azurecli-interactive
-     az ad sp create-for-rbac --name "ServicePrincipalName" --password "My-AAD-client-secret" --skip-assignment
+     az ad sp create-for-rbac --name "ServicePrincipalName" --role Contributor --password "My-AAD-client-secret" --skip-assignment
      ```
 3.  The appId returned is the Azure AD ClientID used in other commands. It's also the SPN you'll use for az keyvault set-policy. The password is the client secret that you should use later to enable Azure Disk Encryption. Safeguard the Azure AD client secret appropriately.
 

includes/key-vault-sp-creation.md

@@ -16,7 +16,7 @@ For the sake of simplicity however, this quickstart creates a desktop applicatio
 Create a service principal using the Azure CLI [az ad sp create-for-rbac](/cli/azure/ad/sp#az_ad_sp_create_for_rbac) command:
 
 ```azurecli
-az ad sp create-for-rbac --skip-assignment -n "http://<my-unique-service-principal-name>" --sdk-auth
+az ad sp create-for-rbac --skip-assignment -n "http://<my-unique-service-principal-name>" --role Contributor --sdk-auth
 ```
 
 This operation will return a series of key / value pairs.