Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into rolyon-aadroles-custom-roles-app-permissions-descriptions

Author: rolyon

articles/api-management/api-management-configuration-repository-git.md

@@ -207,6 +207,7 @@ These files can be created, deleted, edited, and managed on your local file syst
 > * [Subscriptions](/rest/api/apimanagement/current-ga/subscription)
 > * Named values
 > * Developer portal entities other than styles and templates
+> * Policy Fragments
 >
 
 ### Root api-management folder

articles/azure-functions/functions-add-output-binding-storage-queue-vs-code.md

@@ -1,7 +1,7 @@
 ---
 title: Connect Azure Functions to Azure Storage using Visual Studio Code
 description: Learn how to connect Azure Functions to an Azure Queue Storage by adding an output binding to your Visual Studio Code project.
-ms.date: 06/15/2022
+ms.date: 01/31/2023
 ms.topic: quickstart
 ms.devlang: csharp, java, javascript, powershell, python, typescript
 ms.custom: devx-track-python, devx-track-js, mode-ui, devdivchpfy22
@@ -174,17 +174,7 @@ Because you're using the storage connection string, your function connects to th
 
 ### Connect Storage Explorer to your account
 
-Skip this section if you have already installed Azure Storage Explorer and connected it to your Azure account.
-
-1. Run the [Azure Storage Explorer](https://storageexplorer.com/) tool, select the connect icon on the left, and select **Add an account**.
-
-    :::image type="content" source="./media/functions-add-output-binding-storage-queue-vs-code/storage-explorer-add-account.png" alt-text="Screenshot of how to add an Azure account to Microsoft Azure Storage Explorer.":::
-
-1. In the **Connect** dialog, choose **Add an Azure account**, choose your **Azure environment**, and then select **Sign in...**.
-
-    :::image type="content" source="./media/functions-add-output-binding-storage-queue-vs-code/storage-explorer-connect-azure-account.png" alt-text="Screenshot of the sign-in to your Azure account window.":::
-
-After you successfully sign in to your account, you see all of the Azure subscriptions associated with your account.
+[!INCLUDE [functions-storage-explorer-connect.md](../../includes/functions-storage-explorer-connect.md)]
 
 ### Examine the output queue
 

articles/azure-functions/functions-add-output-binding-storage-queue-vs.md

@@ -1,7 +1,7 @@
 ---
 title: Connect functions to Azure Storage using Visual Studio
 description: "Learn how to add an output binding to connect your C# class library functions to an Azure Storage queue using Visual Studio."
-ms.date: 05/30/2021
+ms.date: 01/31/2023
 ms.topic: quickstart
 ms.devlang: csharp
 ms.custom: mvc, mode-ui
@@ -20,8 +20,8 @@ Most bindings require a stored connection string that Functions uses to access t
 
 Before you start this article, you must: 
 
- - Complete [part 1 of the Visual Studio quickstart](./functions-create-your-first-function-visual-studio.md). 
-
+- Complete [part 1 of the Visual Studio quickstart](./functions-create-your-first-function-visual-studio.md). 
+- Install [Azure Storage Explorer](https://storageexplorer.com/). Storage Explorer is a tool that you'll use to examine queue messages generated by your output binding. Storage Explorer is supported on macOS, Windows, and Linux-based operating systems. 
 - Sign in to your Azure subscription from Visual Studio.
 
 ## Download the function app settings
@@ -72,21 +72,21 @@ After the binding is defined, you can use the `name` of the binding to access it
 
 [!INCLUDE [functions-run-function-test-local-vs](../../includes/functions-run-function-test-local-vs.md)]
 
-A new queue named `outqueue` is created in your storage account by the Functions runtime when the output binding is first used. You'll use Cloud Explorer to verify that the queue was created along with the new message.
+A new queue named `outqueue` is created in your storage account by the Functions runtime when the output binding is first used. You'll use Storage Explorer to verify that the queue was created along with the new message.
 
-## Examine the output queue
+### Connect Storage Explorer to your account
 
-1. In Visual Studio from the **View** menu, select **Cloud Explorer**.
+[!INCLUDE [functions-storage-explorer-connect.md](../../includes/functions-storage-explorer-connect.md)]
 
-1. In **Cloud Explorer**, expand your Azure subscription and **Storage Accounts**, then expand the storage account used by your function. If you can't remember the storage account name, check the `AzureWebJobsStorage` connection string setting in the *local.settings.json* file.  
+### Examine the output queue
 
-1. Expand the **Queues** node, and then double-click the queue named **outqueue** to view the contents of the queue in Visual Studio. 
+1. In Storage Explorer, expand the **Queues** node, and then select the queue named **outqueue**.
 
    The queue contains the message that the queue output binding created when you ran the HTTP-triggered function. If you invoked the function with the default `name` value of *Azure*, the queue message is *Name passed to the function: Azure*.
 
-    ![Queue message shown in Azure Storage Explorer](./media/functions-add-output-binding-storage-queue-vs-code/function-queue-storage-output-view-queue.png)
+    :::image type="content" source="./media/functions-add-output-binding-storage-queue-vs-code/function-queue-storage-output-view-queue.png" alt-text="Screenshot of the queue message shown in Azure Storage Explorer.":::
 
-1. Run the function again, send another request, and you'll see a new message appear in the queue.  
+1. Run the function again, send another request, and you see a new message in the queue.  
 
 Now, it's time to republish the updated function app to Azure.
 

articles/azure-functions/media/functions-add-output-binding-storage-queue-vs-code/storage-explorer-add-account.png

@@ -356,7 +356,7 @@ For more information, see [Azure Policy guest configuration](../concepts/guest-c
 |Name<br /><sub>(ID)</sub> |Details |Expected value<br /><sub>(Type)</sub> |Severity |
 |---|---|---|---|
 |Audit Plug and Play Events<br /><sub>(AZ-WIN-00182)</sub> |**Description**: This PNP Activity policy setting allows you to audit when plug and play detects an external device. The recommended state for this setting is: `Success`. **Note:** A Windows 10, Server 2016 or higher OS is required to access and set this value in Group Policy.<br />**Key Path**: {0CCE9248-69AE-11D9-BED3-505054503030}<br />**OS**: WS2016, WS2019, WS2022<br />**Server Type**: Domain Controller, Domain Member, Workgroup Member |\>\= Success<br /><sub>(Audit)</sub> |Critical |
-|Audit Process Creation<br /><sub>(CCE-36059-4)</sub> |**Description**: This subcategory reports the creation of a process and the name of the program or user that created it. Events for this subcategory include: - 4688: A new process has been created. - 4696: A primary token was assigned to process. Refer to Microsoft Knowledge Base article 947226: [Description of security events in Windows Vista and in Windows Server 2008](https://support.microsoft.com/en-us/kb/947226) for the most recent information about this setting. The recommended state for this setting is: `Success`.<br />**Key Path**: {0CCE922B-69AE-11D9-BED3-505054503030}<br />**OS**: WS2008, WS2008R2, WS2012, WS2012R2, WS2016, WS2019, WS2022<br />**Server Type**: Domain Controller, Domain Member, Workgroup Member |\>\= Success<br /><sub>(Audit)</sub> |Critical |
+|Audit Process Creation<br /><sub>(CCE-36059-4)</sub> |**Description**: This subcategory reports the creation of a process and the name of the program or user that created it. Events for this subcategory include: - 4688: A new process has been created. - 4696: A primary token was assigned to process. Refer to Microsoft Knowledge Base article 947226: [Description of security events in Windows Vista and in Windows Server 2008](https://support.microsoft.com/topic/ms16-014-description-of-the-security-update-for-windows-vista-windows-server-2008-windows-7-windows-server-2008-r2-windows-server-2012-windows-8-1-and-windows-server-2012-r2-february-9-2016-1ff344d3-cd1c-cdbd-15b4-9344c7a7e6bd) for the most recent information about this setting. The recommended state for this setting is: `Success`.<br />**Key Path**: {0CCE922B-69AE-11D9-BED3-505054503030}<br />**OS**: WS2008, WS2008R2, WS2012, WS2012R2, WS2016, WS2019, WS2022<br />**Server Type**: Domain Controller, Domain Member, Workgroup Member |\>\= Success<br /><sub>(Audit)</sub> |Critical |
 
 ## System Audit Policies - DS Access
 

articles/governance/policy/samples/guest-configuration-baseline-windows.md

@@ -96,12 +96,14 @@ Key Vault service sends requests to CA (outbound traffic). Therefore, it’s ful
 
 ### Formats of Import we support
 Azure Key Vault supports .pem and .pfx certificate files for importing Certificates into Key vault.
-We support the following type of Import for PEM file format. A single PEM encoded certificate along with a PKCS#8 encoded, unencrypted key which has the following
+We support the following type of Import for PEM file format. A single PEM encoded certificate along with a PKCS#8 encoded, unencrypted key which has the following format:
 
 -----BEGIN CERTIFICATE-----
+
 -----END CERTIFICATE-----
 
 -----BEGIN PRIVATE KEY-----
+
 -----END PRIVATE KEY-----
 
 When you are importing the certificate, you need to ensure that the key is included in the file itself. If you have the private key separately in a different format, you would need to combine the key with the certificate. Some certificate authorities provide certificates in different formats, therefore before importing the certificate, make sure that they are either in .pem or .pfx format. 
@@ -111,10 +113,12 @@ When you are importing the certificate, you need to ensure that the key is inclu
 >Ensure that no other meta data is present in the certificate file and that the private key not showing as encrypted.
 
 ### Formats of Merge CSR we support
+
 AKV supports 2 PEM based formats. You can either merge a single PKCS#8 encoded certificate or a base64 encoded P7B (chain of certificates signed by CA).
 If you need to covert the P7B's format to the supported one, you can use [certutil -encode](/windows-server/administration/windows-commands/certutil#-encode)
 
 -----BEGIN CERTIFICATE-----
+
 -----END CERTIFICATE-----
 
 

articles/key-vault/certificates/certificate-scenarios.md

@@ -5,7 +5,7 @@ ms.service: purview
 ms.subservice: purview-data-catalog
 ms.custom: ignite-2022
 ms.topic: include
-ms.date: 11/01/2021
+ms.date: 01/31/2023
 ---
 
 ### Copy activity support
@@ -51,6 +51,7 @@ Currently, if you use the following copy activity features, the lineage is not y
 - Compression setting for Binary, delimited text, Excel, JSON, and XML files.
 - Source partition options for Azure SQL Database, Azure SQL Managed Instance, Azure Synapse Analytics, SQL Server, and SAP Table.
 - Copy data to file-based sink with setting of max rows per file.
+- Column level lineage is not currently supported by ADF copy for resource sets.
 
 In additional to lineage, the data asset schema (shown in Asset -> Schema tab) is reported for the following connectors:
 

articles/purview/includes/data-factory-common-supported-capabilities.md

@@ -11,6 +11,6 @@ Add code that uses the `msg` output binding object on `context.bindings` to crea
 
 :::code language="javascript" range="5-7" source="~/functions-docs-javascript/functions-add-output-binding-storage-queue-cli/HttpExample/index.js":::
 
-At this point, your function must look as follows:
+At this point, your function could look as follows:
 
 :::code language="javascript" source="~/functions-docs-javascript/functions-add-output-binding-storage-queue-cli/HttpExample/index.js":::

includes/functions-add-output-binding-js.md

@@ -0,0 +1,19 @@
+---
+author: ggailey777
+ms.service: azure-functions
+ms.topic: include
+ms.date: 01/31/2023
+ms.author: glenga
+---
+
+Skip this section if you've already installed Azure Storage Explorer and connected it to your Azure account.
+
+1. Run the [Azure Storage Explorer](https://storageexplorer.com/) tool, select the connect icon on the left, and select **Add an account**.
+
+    :::image type="content" source="./media/functions-storage-explorer-connect/storage-explorer-add-account.png" alt-text="Screenshot of how to add an Azure account to Microsoft Azure Storage Explorer.":::
+
+1. In the **Connect** dialog, choose **Add an Azure account**, choose your **Azure environment**, and then select **Sign in...**.
+
+    :::image type="content" source="./media/functions-storage-explorer-connect/storage-explorer-connect-azure-account.png" alt-text="Screenshot of the sign-in to your Azure account window.":::
+
+After you successfully sign in to your account, you see all of the Azure subscriptions associated with your account. Choose your subscription and select **Open Explorer**.