CAP Updates

Author: DebLanger

exposure-management/predefined-classification-rules-and-levels.md

@@ -52,7 +52,7 @@ Current asset types are:
 | Identity with Privileged  Role           | Identity   | High                      | The following identities (User, Group, Service Principal, or Managed Identity) have an assigned built-in or custom privileged Azure RBAC role, at subscription scope, containing a critical resource. The role can include permissions for Azure role assignments, modifying Azure policies, executing scripts on a VM using Run command, read access to storage accounts and keyvaults, and more. |
 | Application Administrator                     | Identity   | Very High                 | Identities in this role can create and manage all aspects of enterprise applications, application registrations, and application proxy settings. |
 | Application Developer                         | Identity   | High                      | Identities in this role can create application registrations independent of the 'Users can register applications' setting. |
-| Authentication Administrator                  | Identity   | Very High                 | Identities in this role can set and reset authentication methods (including passwords) for non-admin users. |
+| Authentication Administrator                  | Identity   | Very High                 | Identities in this role can set and reset authentication methods (including passwords) for nonadmin users. |
 | Backup Operators                  | Identity   | Very High                      | Identities in this role can backup and restore all files on a computer, regardless of the permissions that protect those files. Backup operators also can log on to and shut down the computer and can perform backup and restore operations on domain controllers. |
 | Server Operators                  | Identity   | Very High                      | Identities in this role can administer domain controllers. Members of the Server operators group can take the following actions: sign in to a server interactively, create and delete network shared resources, start and stop services, backup and restore files, format the hard disk drive of the computer, and shut down the computer. |
 | B2C IEF Keyset Administrator                  | Identity   | High                      | Identities in this role can manage secrets for federation and encryption in the Identity Experience Framework (IEF). |
@@ -65,13 +65,13 @@ Current asset types are:
 | Enterprise Administrator                          | Identity   | Very High                 | Identities in this role have complete access to configuring all domain controllers. Members in this group can modify the membership of all administrative groups. |
 | Global Administrator                          | Identity   | Very High                 | Identities in this role can manage all aspects of Microsoft Entra ID and Microsoft services that use Microsoft Entra identities. |
 | Global Reader                                 | Identity   | High                      | Identities in this role can read everything that a Global Administrator can, but not update anything. |
-| Helpdesk Administrator                        | Identity   | Very High                 | Identities in this role can reset passwords for non-administrators and Helpdesk Administrators. |
+| Helpdesk Administrator                        | Identity   | Very High                 | Identities in this role can reset passwords for nonadministrators and Helpdesk Administrators. |
 | Hybrid Identity Administrator                 | Identity   | Very High                 | Identities in this role can manage Active Directory to Microsoft Entra cloud provisioning, Microsoft Entra Connect, Pass-through Authentication (PTA), Password hash synchronization (PHS), seamless single sign-on (Seamless SSO), and federation settings. |
 | Intune Administrator                          | Identity   | Very High                 | Identities in this role can manage all aspects of the Intune product. |
-| Partner Tier1 Support                         | Identity   | Very High                 | Identities in this role can reset passwords for non-admin users, update credentials for applications, create and delete users, and create OAuth2 permission grants. This role has been deprecated and will be removed from Microsoft Entra ID in the future. Don't use - not intended for general use. |
+| Partner Tier1 Support                         | Identity   | Very High                 | Identities in this role can reset passwords for nonadmin users, update credentials for applications, create and delete users, and create OAuth2 permission grants. This role has been deprecated and will be removed from Microsoft Entra ID in the future. Don't use - not intended for general use. |
 | Partner Tier2 Support                         | Identity   | Very High                 | Identities in this role can reset passwords for all users (including Global Administrators), update credentials for applications, create and delete users, and create OAuth2 permission grants. This role has been deprecated and will be removed from Microsoft Entra ID in the future. Don't use - not intended for general use. |
-| Password Administrator                        | Identity   | Very High                 | Identities in this role can reset passwords for non-administrators and Password Administrators. |
-| Privileged Authentication Administrator       | Identity   | Very High                 | Identities in this role can view, set, and reset authentication method information for any user (admin or non-admin). |
+| Password Administrator                        | Identity   | Very High                 | Identities in this role can reset passwords for nonadministrators and Password Administrators. |
+| Privileged Authentication Administrator       | Identity   | Very High                 | Identities in this role can view, set, and reset authentication method information for any user (admin or nonadmin). |
 | Privileged Role Administrator                 | Identity   | Very High                 | Identities in this role can manage role assignments in Microsoft Entra ID, and all aspects of Privileged Identity Management. |
 | Security Operations Admin User                | Identity   | High                      | Identities in this role can configure, manage, monitor, and respond to threats within the organization.  **Note**: This rule logic relies on the predefined critical device classification “Security Operations Admin Device”.  |
 | Security Administrator                        | Identity   | High                      | Identities in this role can read security information and reports and manage configuration in Microsoft Entra ID and Office 365. |