Merge pull request #235622 from Heidilohr/work-faq-models

Updating phrasing for a question and answer pair to resolve a GitHub issue

Author: prmerger-automator[bot]

articles/virtual-desktop/faq.yml

@@ -5,7 +5,7 @@ metadata:
   author: Heidilohr
   ms.topic: faq
   ms.service: virtual-desktop
-  ms.date: 12/06/2022
+  ms.date: 04/27/2023
   ms.author: helohr 
   ms.custom: devx-track-azurepowershell
   manager: femila
@@ -41,11 +41,11 @@ sections:
           ```
           
       - question: |
-         Does Azure Virtual Desktop support split Azure Active Directory models?
+         Can I deploy Azure Virtual Desktop across multiple Azure Active Directory tenants?
         answer: |
-          When a user is assigned to an application group, the service does a simple Azure role assignment. As a result, the user's Azure Active Directory (Azure AD) and the application group's Azure AD must be in the same location. All service objects, such as host pools, application groups, and workspaces, also must be in the same Azure AD as the user.
-          
-          You can create virtual machines (VMs) in a different Azure AD as long as you sync the Active Directory with the user's Azure AD in the same virtual network (VNET).
+          Users must be in the same Azure Active Directory (Azure AD) tenant as their assigned workspace, host pool, and app group. Having everything in the same tenant lets you assign users to proper role-based access control (RBAC) roles so they can access their resources.
+
+          However, you can deploy virtual machines (VMs) in a different Azure AD tenant if they're joined to either the same AD as the user or an AD that has a trust relationship with the user's AD.
           
       - question: |
          What are location restrictions?