Merge pull request #251141 from rolyon/rolyon-abac-custom-security-attributes-portal-entra-admin-center

[Azure AD] [Custom security attributes] Azure portal to Microsoft Entra admin center

Author: v-shils

articles/active-directory/enterprise-users/media/users-custom-security-attributes/users-attributes-assign.png

@@ -39,16 +39,15 @@ To assign or remove custom security attributes for a user in your Azure AD tenan
 
 [!INCLUDE [portal updates](~/articles/active-directory/includes/portal-update.md)]
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
-
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as an [Attribute Assignment Administrator](../roles/permissions-reference.md#attribute-assignment-administrator).
 
 1. Make sure that you have defined custom security attributes. For more information, see [Add or deactivate custom security attribute definitions in Azure AD](../fundamentals/custom-security-attributes-add.md).
 
-1. Select Microsoft Entra ID (Azure AD)  > **Users** > **All users**.
+1. Browse to **Identity**  > **Users** > **All users**.
 
 1. Find and select the user you want to assign custom security attributes to.
 
-1. In the Manage section, select **Custom security attributes (preview)**.
+1. In the Manage section, select **Custom security attributes**.
 
 1. Select **Add assignment**.
 
@@ -68,13 +67,13 @@ To assign or remove custom security attributes for a user in your Azure AD tenan
 
 ## Update custom security attribute assignment values for a user
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as an [Attribute Assignment Administrator](../roles/permissions-reference.md#attribute-assignment-administrator).
 
-1. Select Microsoft Entra ID (Azure AD)  > **Users** > **All users**.
+1. Browse to **Identity**  > **Users** > **All users**.
 
 1. Find and select the user that has a custom security attribute assignment value you want to update.
 
-1. In the Manage section, select **Custom security attributes (preview)**.
+1. In the Manage section, select **Custom security attributes**.
 
 1. Find the custom security attribute assignment value you want to update.
 
@@ -88,9 +87,9 @@ To assign or remove custom security attributes for a user in your Azure AD tenan
 
 You can filter the list of custom security attributes assigned to users on the All users page.
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as an [Attribute Assignment Reader](../roles/permissions-reference.md#attribute-assignment-reader).
 
-1. Select Microsoft Entra ID (Azure AD)  > **Users** > **All users**.
+1. Browse to **Identity**  > **Users** > **All users**.
 
 1. Select **Add filter** to open the Add filter pane.
 
@@ -108,13 +107,13 @@ You can filter the list of custom security attributes assigned to users on the A
 
 ## Remove custom security attribute assignments from a user
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Global Administrator](../roles/permissions-reference.md#global-administrator).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as an [Attribute Assignment Administrator](../roles/permissions-reference.md#attribute-assignment-administrator).
 
-1. Select Microsoft Entra ID (Azure AD)  > **Users** > **All users**.
+1. Browse to **Identity**  > **Users** > **All users**.
 
 1. Find and select the user that has the custom security attribute assignments you want to remove.
 
-1. In the Manage section, select **Custom security attributes (preview)**.
+1. In the Manage section, select **Custom security attributes**.
 
 1. Add check marks next to all the custom security attribute assignments you want to remove.
 
@@ -1074,7 +1073,7 @@ None
 
 **Where are custom security attribute assignments for users supported?**
 
-Custom security attribute assignments for users are supported in Azure portal, PowerShell, and Microsoft Graph APIs. Custom security attribute assignments are not supported in My Apps or Microsoft 365 admin center.
+Custom security attribute assignments for users are supported in Microsoft Entra admin center, PowerShell, and Microsoft Graph APIs. Custom security attribute assignments are not supported in My Apps or Microsoft 365 admin center.
 
 **Who can view the custom security attributes assigned to a user?**
 

articles/active-directory/enterprise-users/users-custom-security-attributes.md

@@ -40,9 +40,9 @@ To add or deactivate custom security attributes definitions, you must have:
 
 An attribute set is a collection of related attributes. All custom security attributes must be part of an attribute set. Attribute sets cannot be renamed or deleted.
 
-1. Sign in to the [Azure portal](https://portal.azure.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Attribute Definition Administrator](../roles/permissions-reference.md#attribute-definition-administrator).
 
-1. Click **Azure Active Directory** > **Custom security attributes (Preview)**.
+1. Browse to **Protection** > **Custom security attributes**.
 
 1. Click **Add attribute set** to add a new attribute set.
 
@@ -60,9 +60,9 @@ An attribute set is a collection of related attributes. All custom security attr
 
 ## Add a custom security attribute definition
 
-1. Sign in to the [Azure portal](https://portal.azure.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Attribute Definition Administrator](../roles/permissions-reference.md#attribute-definition-administrator).
 
-1. Click **Azure Active Directory** > **Custom security attributes (Preview)**.
+1. Browse to **Protection** > **Custom security attributes**.
 
 1. On the Custom security attributes page, find an existing attribute set or click **Add attribute set** to add a new attribute set.
 
@@ -104,7 +104,6 @@ An attribute set is a collection of related attributes. All custom security attr
 
     ![Screenshot of New attribute pane with Add predefined value pane in Azure portal.](./media/custom-security-attributes-add/attribute-new-value-add.png)
 
-
 1. When finished, click **Save**.
 
     The new custom security attribute appears in the list of custom security attributes.
@@ -115,9 +114,9 @@ An attribute set is a collection of related attributes. All custom security attr
 
 Once you add a new custom security attribute definition, you can later edit some of the properties. Some properties are immutable and cannot be changed.
 
-1. Sign in to the [Azure portal](https://portal.azure.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Attribute Definition Administrator](../roles/permissions-reference.md#attribute-definition-administrator).
 
-1. Click **Azure Active Directory** > **Custom security attributes (Preview)**.
+1. Browse to **Protection** > **Custom security attributes**.
 
 1. Click the attribute set that includes the custom security attribute you want to edit.
 
@@ -133,9 +132,9 @@ Once you add a new custom security attribute definition, you can later edit some
 
 Once you add a custom security attribute definition, you can't delete it. However, you can deactivate a custom security attribute definition.
 
-1. Sign in to the [Azure portal](https://portal.azure.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Attribute Definition Administrator](../roles/permissions-reference.md#attribute-definition-administrator).
 
-1. Click **Azure Active Directory** > **Custom security attributes (Preview)**.
+1. Browse to **Protection** > **Custom security attributes**.
 
 1. Click the attribute set that includes the custom security attribute you want to deactivate.
 

articles/active-directory/fundamentals/custom-security-attributes-add.md

@@ -117,13 +117,11 @@ To grant access to the appropriate people, follow these steps to assign one of t
 
 The following examples show how to assign a custom security attribute role to a principal at an attribute set scope named Engineering.
 
-# [Portal](#tab/azure-portal)
+# [Admin center](#tab/admin-center)
 
-1. Sign in to the [Azure portal](https://portal.azure.com).
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Attribute Assignment Administrator](../roles/permissions-reference.md#attribute-assignment-administrator).
 
-1. Click **Azure Active Directory**.
-
-1. In the left navigation menu, click **Custom security attributes (Preview)**.
+1. Browse to **Protection** > **Custom security attributes**.
 
 1. Click the attribute set you want grant access to.
 
@@ -180,13 +178,11 @@ $roleAssignment = New-AzureADMSRoleAssignment -RoleDefinitionId $roleDefinitionI
 
 The following examples show how to assign a custom security attribute role to a principal at tenant scope.
 
-# [Portal](#tab/azure-portal)
-
-1. Sign in to the [Azure portal](https://portal.azure.com).
+# [Admin center](#tab/admin-center)
 
-1. Click **Azure Active Directory**.
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Attribute Assignment Administrator](../roles/permissions-reference.md#attribute-assignment-administrator).
 
-1. In the left navigation menu, click **Roles and administrators**.
+1. Browse to **Identity** > **Roles & admins** > **Roles & admins**.
 
     ![Screenshot of assigning attribute roles at tenant scope.](./media/custom-security-attributes-manage/manage-tenant.png)
 

articles/active-directory/fundamentals/custom-security-attributes-manage.md

@@ -47,7 +47,7 @@ Learn how to work with custom attributes for applications in Azure AD.
 
 Undertake the following steps to assign custom security attributes through the Microsoft Entra admin center.
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Attribute Assignment Administrator](../roles/permissions-reference.md#attribute-assignment-administrator). 
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as an [Attribute Assignment Administrator](../roles/permissions-reference.md#attribute-assignment-administrator). 
 1. Browse to **Identity** > **Applications** > **Enterprise applications**. 
 
 1. Find and select the application you want to add a custom security attribute to.
@@ -72,7 +72,7 @@ Undertake the following steps to assign custom security attributes through the M
 
 ### Update custom security attribute assignment values for an application
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Attribute Assignment Administrator](../roles/permissions-reference.md#attribute-assignment-administrator). 
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as an [Attribute Assignment Administrator](../roles/permissions-reference.md#attribute-assignment-administrator). 
 1. Browse to **Identity** > **Applications** > **Enterprise applications**.
 
 1. Find and select the application that has a custom security attribute assignment value you want to update.
@@ -91,7 +91,7 @@ Undertake the following steps to assign custom security attributes through the M
 
 You can filter the list of custom security attributes assigned to applications on the **All applications** page.
 
-1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Attribute Assignment Administrator](../roles/permissions-reference.md#attribute-assignment-administrator). 
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Attribute Assignment Reader](../roles/permissions-reference.md#attribute-assignment-reader). 
 1. Browse to **Identity** > **Applications** > **Enterprise applications**.
 
 1. Select **Add filters** to open the Pick a field pane.