Update categories to align more with portal

Author: rolyon

articles/active-directory/roles/custom-user-permissions.md

@@ -23,11 +23,16 @@ ms.custom: it-pro
 User management permissions can be used in custom role definitions in Azure Active Directory (Azure AD) to grant fine-grained access such as the following:
 
 - Read or update basic properties of users
-- Read or update other properties of users
-- Read or update employee and job information of users
+- Read or update identity of users
+- Read or update job information of users
+- Update contact information of users
+- Update parental controls of users
+- Update settings of users
+- Read direct reports of users
+- Update extension properties of users
 - Read device information of users
 - Read or manage licenses of users
-- Update policy information of users
+- Update password policies of users
 - Read assignments and memberships of users
 
 This article lists the permissions you can use in your custom roles for different user management scenarios. For information about how to create custom roles, see [Create and assign a custom role](custom-create.md).
@@ -46,31 +51,72 @@ The following permissions are available to read or update basic properties of us
 > | microsoft.directory/users/standard/read | Read basic properties on users. |
 > | microsoft.directory/users/basic/update | Update basic properties on users. |
 
-## Read or update other properties of users
+## Read or update identity of users
 
-The following permissions are available to read or update other properties of users.
+The following permissions are available to read or update identity of users.
 
 > [!div class="mx-tableFixed"]
 > | Permission | Description |
 > | ---------- | ----------- |
-> | microsoft.directory/users/contactInfo/update | Update the contact info properties of users, such as address, phone, and email. |
-> | microsoft.directory/users/extensionProperties/update | Update extension properties of users. |
 > | microsoft.directory/users/identities/read | Read identities of users. |
 > | microsoft.directory/users/identities/update | Update the identity properties of users, such as name, user principal name, and object ID. |
 
-## Read or update employee and job information of users
+## Read or update job information of users
 
-The following permissions are available to read or update employee and job information of users.
+The following permissions are available to read or update job information of users.
 
 > [!div class="mx-tableFixed"]
 > | Permission | Description |
 > | ---------- | ----------- |
 > | microsoft.directory/users/manager/read | Read manager of users. |
 > | microsoft.directory/users/manager/update | Update manager for users. |
-> | microsoft.directory/users/directReports/read | Read the direct reports for users. |
 > | microsoft.directory/users/jobInfo/update | Update the job info properties of users, such as job title, department, and company name. |
+
+## Update contact information of users
+
+The following permissions are available to update contact information of users.
+
+> [!div class="mx-tableFixed"]
+> | Permission | Description |
+> | ---------- | ----------- |
+> | microsoft.directory/users/contactInfo/update | Update the contact info properties of users, such as address, phone, and email. |
+
+## Update parental controls of users
+
+The following permissions are available to update parental controls of users.
+
+> [!div class="mx-tableFixed"]
+> | Permission | Description |
+> | ---------- | ----------- |
+> | microsoft.directory/users/parentalControls/update | Update parental controls of users. |
+
+## Update settings of users
+
+The following permissions are available to update settings of users.
+
+> [!div class="mx-tableFixed"]
+> | Permission | Description |
+> | ---------- | ----------- |
 > | microsoft.directory/users/usageLocation/update | Update usage location of users. |
 
+## Read direct reports of users
+
+The following permissions are available to read direct reports of users.
+
+> [!div class="mx-tableFixed"]
+> | Permission | Description |
+> | ---------- | ----------- |
+> | microsoft.directory/users/directReports/read | Read the direct reports for users. |
+
+## Update extension properties of users
+
+The following permissions are available to update extension properties of users.
+
+> [!div class="mx-tableFixed"]
+> | Permission | Description |
+> | ---------- | ----------- |
+> | microsoft.directory/users/extensionProperties/update | Update extension properties of users. |
+
 ## Read device information of users
 
 The following permissions are available to read device information of users.
@@ -93,14 +139,13 @@ The following permissions are available to read or manage licenses of users.
 > | microsoft.directory/users/assignLicense | Manage user licenses. |
 > | microsoft.directory/users/reprocessLicenseAssignment | Reprocess license assignments for users. |
 
-## Update policy information of users
+## Update password policies of users
 
-The following permissions are available to update policy information of users.
+The following permissions are available to update password policies of users.
 
 > [!div class="mx-tableFixed"]
 > | Permission | Description |
 > | ---------- | ----------- |
-> | microsoft.directory/users/parentalControls/update | Update parental controls of users. |
 > | microsoft.directory/users/passwordPolicies/update | Update password policies properties of users. |
 
 ## Read assignments and memberships of users