Clarify admin perms

Author: mgblythe

articles/azure-portal/admin-timeout.md

@@ -5,19 +5,20 @@ services: azure-portal
 keywords: settings, timeout
 author: mgblythe
 ms.author: mblythe
-ms.date: 12/19/2019
+ms.date: 02/10/2020
 ms.topic: conceptual
 
 ms.service: azure-portal
 manager:  mtillman
 ---
+
 # Set directory-level inactivity timeout
 
-The inactivity timeout setting helps to protect your resources from unauthorized access if users forget to secure their workstation. When a user has been idle for a while, their Azure portal session is automatically signed out. Admins can enforce the maximum idle time before a session is signed out. The inactivity timeout setting applies at the directory level. For more information about directories, see [Active Directory Domain Services Overview](/windows-server/identity/ad-ds/get-started/virtual-dc/active-directory-domain-services-overview).
+The inactivity timeout setting helps to protect your resources from unauthorized access if users forget to secure their workstation. When a user has been idle for a while, their Azure portal session is automatically signed out. Admins in the [Global Administrator role](../active-directory/users-groups-roles/directory-assign-admin-roles.md#global-administrator--company-administrator) can enforce the maximum idle time before a session is signed out. The inactivity timeout setting applies at the directory level. For more information about directories, see [Active Directory Domain Services Overview](/windows-server/identity/ad-ds/get-started/virtual-dc/active-directory-domain-services-overview).
 
 ## Configure the inactive timeout setting
 
-If you’re an admin, and you want to enforce an idle timeout setting for all users of the Azure portal, follow these steps:
+If you’re a Global Administrator, and you want to enforce an idle timeout setting for all users of the Azure portal, follow these steps:
 
 1. Sign in to the [Azure portal](https://portal.azure.com).
 2. Select **Settings** from the global page header.