Merge pull request #270369 from rcdun/update_explanation_of_managed_identity_for_ingestion

Add more detail to managed-identity.md about the purpose of managed i…

Author: prmerger-automator[bot]

articles/operator-insights/managed-identity.md

@@ -6,7 +6,7 @@ ms.author: rdunstan
 ms.reviewer: rathishr
 ms.service: operator-insights
 ms.topic: concept-article
-ms.date: 01/23/2024
+ms.date: 03/26/2024
 ---
 
 # Managed identity for Azure Operator Insights
@@ -31,7 +31,7 @@ Azure Operator Insights use a user-assigned managed identity for:
 
 - Encryption with customer-managed keys, also called CMK-based encryption.
 - Integration with Microsoft Purview. The managed identity allows the Data Product to manage the collection and the data catalog within the collection.
-- Authentication to Azure with an [ingestion agent](ingestion-agent-overview.md). See [use a managed identity for authentication](set-up-ingestion-agent.md#use-a-managed-identity-for-authentication).
+- Authentication to Azure for an [Azure Operator Insights ingestion agent](ingestion-agent-overview.md) on an Azure VM. The managed identity allows the ingestion agent to access a Data Product's Key Vault. See [use a managed identity for authentication](set-up-ingestion-agent.md#use-a-managed-identity-for-authentication).
 
 When you [create a Data Product](data-product-create.md), you set up the managed identity and associate it with the Data Product. To use the managed identity with Microsoft Purview, you must also [grant the managed identity the appropriate permissions in Microsoft Purview](purview-setup.md#access-and-set-up-your-microsoft-purview-account).
 
@@ -41,7 +41,7 @@ You use Microsoft Entra ID to manage user-assigned managed identities. For more
 
 Azure Operator Insights Data Products don't support system-assigned managed identities.
 
-Azure Operator Insights ingestion agents on Azure VMs support system-assigned managed identities. See [Use a managed identity for authentication](set-up-ingestion-agent.md#use-a-managed-identity-for-authentication).
+Azure Operator Insights ingestion agents on Azure VMs support system-assigned managed identities for accessing a Data Product's Key Vault. See [Use a managed identity for authentication](set-up-ingestion-agent.md#use-a-managed-identity-for-authentication).
 
 ## Related content