tweaks

Author: halkazwini

articles/network-watcher/required-rbac-permissions.md

@@ -29,7 +29,7 @@ Azure role-based access control (Azure RBAC) enables you to assign only the spec
 | ---------                                                           | -------------                                                  |
 | Microsoft.Network/networkWatchers/configureFlowLog/action           | Configure a flow Log                                           |
 | Microsoft.Network/networkWatchers/queryFlowLogStatus/action         | Query status for a flow log                                    |
-Microsoft.Storage/storageAccounts/listServiceSas/Action, </br> Microsoft.Storage/storageAccounts/listAccountSas/Action, <br> Microsoft.Storage/storageAccounts/listKeys/Action | Used to fetch shared access signatures (SAS) enabling [secure access to storage account](../storage/common/storage-sas-overview.md) and write to the storage account |
+Microsoft.Storage/storageAccounts/listServiceSas/Action, </br> Microsoft.Storage/storageAccounts/listAccountSas/Action, <br> Microsoft.Storage/storageAccounts/listKeys/Action | Fetch shared access signatures (SAS) enabling [secure access to storage account](../storage/common/storage-sas-overview.md) and write to the storage account |
 
 ## Connection troubleshoot
 
@@ -99,13 +99,13 @@ Network Watcher capabilities also require the following actions:
 
 | Action(s)                                                           | Description       |
 | ---------                                                           | -------------        |
-| Microsoft.Authorization/\*/Read                                     | Used to fetch Azure role assignments and policy definitions   |
-| Microsoft.Resources/subscriptions/resourceGroups/Read               | Used to enumerate all the resource groups in a subscription    |
-| Microsoft.Storage/storageAccounts/Read                              | Used to get the properties for the specified storage account   |
+| Microsoft.Authorization/\*/Read                                     | Fetch Azure role assignments and policy definitions   |
+| Microsoft.Resources/subscriptions/resourceGroups/Read               | Enumerate all the resource groups in a subscription    |
+| Microsoft.Storage/storageAccounts/Read                              | Get the properties for the specified storage account   |
 | Microsoft.Storage/storageAccounts/listServiceSas/Action, </br> Microsoft.Storage/storageAccounts/listAccountSas/Action, <br> Microsoft.Storage/storageAccounts/listKeys/Action | Used to fetch shared access signatures (SAS) enabling [secure access to storage account](../storage/common/storage-sas-overview.md) and write to the storage account |
-| Microsoft.Compute/virtualMachines/Read, </br> Microsoft.Compute/virtualMachines/Write| Used to log in to the VM, do a packet capture and upload it to storage account |
-| Microsoft.Compute/virtualMachines/extensions/Read, </br> Microsoft.Compute/virtualMachines/extensions/Write | Used to check if Network Watcher extension is present, and install if necessary |
-| Microsoft.Compute/virtualMachineScaleSets/Read, </br> Microsoft.Compute/virtualMachineScaleSets/Write | Used to access virtual machine scale sets, do packet captures and upload them to storage account |
-| Microsoft.Compute/virtualMachineScaleSets/extensions/Read, </br> Microsoft.Compute/virtualMachineScaleSets/extensions/Write| Used to check if Network Watcher extension is present, and install if necessary |
-| Microsoft.Insights/alertRules/*                                     | Used to set up metric alerts      |
-| Microsoft.Support/*                                                 | Used to create and update support tickets from Network Watcher |
+| Microsoft.Compute/virtualMachines/Read, </br> Microsoft.Compute/virtualMachines/Write| Log in to the VM, do a packet capture and upload it to storage account |
+| Microsoft.Compute/virtualMachines/extensions/Read, </br> Microsoft.Compute/virtualMachines/extensions/Write | Check if Network Watcher extension is present, and install if necessary |
+| Microsoft.Compute/virtualMachineScaleSets/Read, </br> Microsoft.Compute/virtualMachineScaleSets/Write | Access virtual machine scale sets, do packet captures and upload them to storage account |
+| Microsoft.Compute/virtualMachineScaleSets/extensions/Read, </br> Microsoft.Compute/virtualMachineScaleSets/extensions/Write| Check if Network Watcher extension is present, and install if necessary |
+| Microsoft.Insights/alertRules/*                                     | Set up metric alerts      |
+| Microsoft.Support/*                                                 | Create and update support tickets from Network Watcher |