Update disconnected-operations-known-issues.md

Added the H2 heading back so that the other headings aren't out of alignment.

Author: ronmiab

azure-local/manage/disconnected-operations-known-issues.md

@@ -18,7 +18,9 @@ This article lists critical known issues and their workarounds in disconnected o
 
 These release notes update continuously, and we add critical issues that require a workaround as we find them. Before you deploy disconnected operations with Azure Local, review the information here.
 
-## Azure Local deployment with Azure Keyvault
+## Known issues for the preview release
+
+### Azure Local deployment with Azure Keyvault
 
 Role-Based Access Control (RBAC) permissions on a newly created Azure Key Vault take up to 20 minutes to propagate. If you create the Azure Key Vault in the local portal and try to finish the cloud deployment, you might encounter permission issues when validating the cluster before deployment.
 
@@ -72,29 +74,29 @@ $managedIds|foreach-object {
 Write-Verbose "Wait 30 min before running cloud deployment from portal"
 ```
 
-## Azure Local VMs (Arc VMs)
+### Azure Local VMs (Arc VMs)
 
-### Azure Resource Graph add or edit tags error
+#### Azure Resource Graph add or edit tags error
 
 When adding or editing a tag on an Arc VM, you might see an Azure Resource Graph error.
 
 **Mitigation**: Use Azure Command-Line Interface (CLI) to add or edit tags for the resource.
 
-### Start, restart, or delete buttons disabled after stopping VM
+#### Start, restart, or delete buttons disabled after stopping VM
 
 After you stop an Arc VM, the start, restart, and delete buttons in the Azure portal are disabled.
 
 **Mitigation**: Refresh your browser and the page.
 
-### Unable to view the network interface or read properties on an Arc VM
+#### Unable to view the network interface or read properties on an Arc VM
 
 Viewing the network interface or properties on an Arc VM in the portal is unsupported in this preview release.
 
-### Portal showing unsaved change notification after updating VM size
+#### Portal showing unsaved change notification after updating VM size
 
 If the notification in the top right shows that the save operation is complete, you can ignore the unsaved message and continue navigating away. The VM size is updated.
 
-### Delete a VM resource
+#### Delete a VM resource
 
 When you delete a VM from the portal, you might see the message ***Delete associated resource failed*** and ***Failed to delete the associated resource 'name' of type 'Network interface'***.
 
@@ -104,9 +106,9 @@ When you delete a VM from the portal, you might see the message ***Delete associ
 az stack-hci-vm network nic delete
 ```
 
-## Azure Kubernetes Service (AKS) on Azure Local
+### Azure Kubernetes Service (AKS) on Azure Local
 
-### Use an existing public key when creating AKS cluster
+#### Use an existing public key when creating AKS cluster
 
 In this release, you can only use an existing public key when creating an AKS cluster.
 
@@ -117,7 +119,7 @@ ssh-keygen -t rsa
 (cat ~\.ssh\id_rsa.pub)|set-clipboard
 ```
 
-### Update or scale a node pool from the portal is disabled
+#### Update or scale a node pool from the portal is disabled
 
 Updating or scaling a node pool from the portal is unsupported in this preview release.
 
@@ -128,35 +130,35 @@ az aksarc nodepool update
 az aksarc nodepool scale
 ```
 
-### Kubernetes cluster list empty under Azure Local (Kubernetes clusters)
+#### Kubernetes cluster list empty under Azure Local (Kubernetes clusters)
 
 When you navigate to Azure Local and click **Kubernetes clusters**, you might see an empty list of clusters.
 
 **Mitigation**: Navigate to **Kubernetes** > **Azure Arc** in the left menu or using the search bar. Your clusters should appear in the list.
 
-### Save Kubernetes service notification stuck
+#### Save Kubernetes service notification stuck
 
 After updating to a newer version of Kubernetes, you might encounter a stuck notification, `Save Kubernetes service`.
 
 **Mitigation**: Navigate to the cluster view page and refresh it. Verify that the state is still upgrading or has completed. If it's completed, you can ignore the notification.
 
-### Activity log shows authentication issue
+#### Activity log shows authentication issue
 
 Ignore the portal warning for this release.
 
-### Microsoft Entra authentication with Kubernetes RBAC fails
+#### Microsoft Entra authentication with Kubernetes RBAC fails
 
 When attempting to create a Kubernetes cluster with Entra authentication, you encounter an error.
 
 **Mitigation**: Only local accounts with Kubernetes RBAC are supported in this preview release.
 
-### Arc extensions
+#### Arc extensions
 
 When navigating to extensions on an AKS cluster the add button is disabled and there aren't any extensions listed.
 
 Arc extensions are unsupported in this preview release.
 
-### AKS resource shows on portal after deletion
+#### AKS resource shows on portal after deletion
 
 After successfully deleting an AKS cluster from portal the resource continues to show.
 
@@ -166,47 +168,47 @@ After successfully deleting an AKS cluster from portal the resource continues to
 az aksarc delete
 ```
 
-### Export Host Guardian Service certificates
+#### Export Host Guardian Service certificates
 
 This feature is unsupported in this preview release.
 
-### Restart a node or the control plane VM
+#### Restart a node or the control plane VM
 
 After you restart a node or the control plane VM, the system might take up to an hour to become fully ready. If you notice issues with the local portal, missing resources, or failed deployments, check the appliance health using the **OperationsModule** to confirm that all services are fully converged.
 
-## Subscriptions
+### Subscriptions
 
-### Operator create subscription
+#### Operator create subscription
 
 After you create a new subscription as an operator, the subscription appears in the list as non-clickable and displays ***no access*** for the owner.
 
 **Mitigation**: Refresh your browser window.
 
-### Operator subscriptions view (timeout)
+#### Operator subscriptions view (timeout)
 
 If you're signed in as an operator, you might see a timeout screen and be unable to view, list, or create subscriptions.
 
 **Cause**: This issue happens when a subscription owner is deleted or isn't synced from the source identity system to the local control plane. When you try to view subscriptions, the process fails because the owner's identity isn't available.
 
 **Mitigation**: If the portal doesn't work, use Azure CLI or REST API to create and list subscriptions. To assign a different owner, use the REST API and enter the `subscriptionOwnerId` parameter when you create the subscription.
 
-## Azure CLI
+### Azure CLI
 
-### Manage clouds
+#### Manage clouds
 
 When you use the `az cloud` commands, such as `az cloud register`, `az cloud show`, or `az cloud set`, you might encounter issues if you use uppercase letters in the cloud name.
 
 **Mitigation**: Only use lowercase letters for cloud names in `az cloud` subcommands, such as `register`, `show`, or `set`.
 
-### Create subscriptions
+#### Create subscriptions
 
 Azure CLI doesn't support providing `subscriptionOwnerId` for new subscriptions. This makes the operator the default owner of newly created subscriptions without a way of changing the owner currently.
 
 **Mitigation**: Use `az rest` to create subscriptions with a different owner if required to automate directly with different owner
 
-## Azure portal
+### Azure portal
 
-### Signout fails
+#### Signout fails
 
 When you select Sign-out, the request doesn't work.
 
@@ -218,13 +220,13 @@ When you select Sign-out, the request doesn't work.
 
 ### AKS on Azure Local-->
 
-## Azure Resource Manager
+### Azure Resource Manager
 
-### Template specs
+#### Template specs
 
 Template specs are unsupported in the preview release. Deployments that use ARM templates with template specs fail.
 
-## Unsupported scenarios
+### Unsupported scenarios
 
 The following scenarios are unsupported in the preview release.