Add Data Explorer connection details

Author: maud-lv

articles/managed-grafana/how-to-authentication-permissions.md

@@ -36,7 +36,7 @@ This command will prompt your web browser to launch and load an Azure sign-in pa
 
 ---
 
-## Create a workspace and set up authentication and permissions
+## Set up authentication and permissions during the creation of the instance
 
 Create a workspace with the Azure portal or the CLI.
 
@@ -104,7 +104,7 @@ System-assigned managed identity is the default authentication method provided t
 
     :::image type="content" source="media/authentication/create-form-validation.png" alt-text="Screenshot of the Azure portal. Create workspace form. Validation.":::
 
- ### [Azure CLI](#tab/azure-cli)
+### [Azure CLI](#tab/azure-cli)
 
 Run the [az group create](/cli/azure/group#az-group-create) command below to create a resource group to organize the Azure resources needed. Skip this step if you already have a resource group you want to use.
 
@@ -172,6 +172,20 @@ Once the deployment is complete, you'll see a note in the output of the command
 
 ---
 
+## Update authentication and permissions
+
+After your workspace has been created, you can still turn on or turn off system-assigned managed identity and update Azure role assignments for Azure Managed Grafana.
+
+1. In the Azure portal, from the left menu, under **Settings**, select **Identity**.
+1. Set the status for System assigned to **Off**, to deactivate the system assigned managed identity, or set it to **On** to activate this authentication method.
+1. Under permissions, select **Azure role assignments** to set Azure roles.
+1. When done, select **Save**
+
+    :::image type="content" source="media/authentication/update-identity.png" alt-text="Screenshot of the Azure portal. Updating the system-assigned managed identity. Basics.":::
+
+> [!NOTE]
+> Disabling a system-assigned managed identity is irreversible. If you re-enable the identity in the future, Azure will create a new identity.
+
 ## Next steps
 
 > [!div class="nextstepaction"]

articles/managed-grafana/how-to-data-source-plugins-managed-identity.md

@@ -56,7 +56,7 @@ You can find all available Grafana data sources by going to your resource and se
 
 For more information about data sources, go to [Data sources](https://grafana.com/docs/grafana/latest/datasources/) on the Grafana Labs website.
 
-## Default configuration for Azure Monitor
+## Configuration for Azure Monitor
 
 The Azure Monitor data source is automatically added to all new Managed Grafana resources. To review or modify its configuration, follow these steps in your Managed Grafana endpoint:
 
@@ -65,16 +65,30 @@ The Azure Monitor data source is automatically added to all new Managed Grafana
    :::image type="content" source="media/data-sources/configuration.png" alt-text="Screenshot of the Add data sources page.":::
 
 1. Azure Monitor is listed as a built-in data source for your Managed Grafana instance. Select **Azure Monitor**.
-1. In **Settings**, authenticate through **Managed Identity** and select your subscription from the dropdown list or enter your **App Registration** details
+1. In the **Settings** tab, authenticate through **Managed Identity** and select your subscription from the dropdown list or enter your **App Registration** details
 
    :::image type="content" source="media/data-sources/configure-Azure-Monitor.png" alt-text="Screenshot of the Azure Monitor page in data sources.":::
 
 Authentication and authorization are then made through the provided managed identity. With Managed Identity, you can assign permissions for your Managed Grafana instance to access Azure Monitor data without having to manually manage service principals in Azure Active Directory (Azure AD).
 
-## Next steps
+## Configuration for Azure Data Explorer
 
-> [!div class="nextstepaction"]
-> [Modify access permissions to Azure Monitor](./how-to-permissions.md)
+Azure Managed Grafana can also access data sources using a service principal set up in Azure Active Directory (Azure AD).
+
+1. From the left menu, select **Configuration** > **Data sources**.
+
+   :::image type="content" source="media/data-sources/configuration.png" alt-text="Screenshot of the Add data sources page.":::
+
+1. **Azure Data Explorer Datasource** is listed as a built-in data source for your Managed Grafana instance. Select this data source.
+1. In the **Settings** tab, fill out the form under **Connection Details**,  and optionally also edit the **Query Optimizations**, **Database schema settings**, and **Tracking** sections.
+
+   :::image type="content" source="media/data-sources/data-explorer-connection-settings.jpg" alt-text="Screenshot of the Connection details section for Data Explorer in data sources.":::
+
+   To complete this process, you need to have an Azure AD service principal and connect Azure AD with an Azure Data Explorer User. For more information, go to [Configuring the datasource in Grafana](https://github.com/grafana/azure-data-explorer-datasource#configuring-the-datasource-in-grafana).
+
+1. Select **Save & test** to validate the connection. "Success" is displayed on screen and confirms that Azure Managed Grafana is able to fetch the data source through the provided connection details, using the service principal in Azure AD.
+
+## Next steps
 
 > [!div class="nextstepaction"]
 > [Share an Azure Managed Grafana instance](./how-to-share-grafana-workspace.md)

articles/managed-grafana/how-to-permissions.md

@@ -59,4 +59,4 @@ For more information about how to use Managed Grafana with Azure Monitor, go to
 ## Next steps
 
 > [!div class="nextstepaction"]
-> [How to configure data sources for Azure Managed Grafana](./how-to-data-source-plugins-managed-identity.md)
+> [How to configure data sources for Azure Managed Grafana](./how-to-data-source-plugins-managed-identity.md)