Merge pull request #1146 from DebLanger/caps-table-update

Caps table update

Author: DebLanger

exposure-management/predefined-classification-rules-and-levels.md

@@ -47,7 +47,7 @@ Current asset types are:
 | Identity with Privileged Azure Role           | Identity   | High                      | The following identities (User, Group, Service Principal, or Managed Identity) have an assigned built-in or custom privileged Azure RBAC role, at subscription scope, containing a critical resource. The role can include permissions for Azure role assignments, modifying Azure policies, executing scripts on a VM using Run command, read-access to storage accounts and keyvaults, and more. |
 | Application Administrator                     | Identity   | Very High                 | Users in this role can create and manage all aspects of enterprise applications, application registrations, and application proxy settings. |
 | Application Developer                         | Identity   | High                      | Users in this role can create application registrations independent of the 'Users can register applications' setting. |
-| Authentication Administrator                  | Identity   | Very High                 | Users in this role can set and reset authentication method (including passwords) for nonadmin users. |
+| Authentication Administrator                  | Identity   | Very High                 | Users in this role can set and reset authentication method (including passwords) for non-admin users. |
 | B2C IEF Keyset Administrator                  | Identity   | High                      | Users in this role can manage secrets for federation and encryption in the Identity Experience Framework (IEF). |
 | Cloud Application Administrator               | Identity   | Very High                 | Users in this role can create and manage all aspects of app registrations and enterprise apps except App Proxy. |
 | Cloud Device Administrator                    | Identity   | High                      | Users in this role have limited access to manage devices in Microsoft Entra ID. They can enable, disable, and delete devices in Microsoft Entra ID and read Windows 10 BitLocker keys (if present) in the Azure portal. |
@@ -88,7 +88,7 @@ Current asset types are:
 | Attribute Definition Administrator            | Identity   | High                      | Users in this role can define and manage the definition of custom security attributes. |
 | Attribute Assignment Administrator            | Identity   | High                      | Users in this role can assign custom security attribute keys and values to supported Microsoft Entra objects. |
 | Identity Governance Administrator             | Identity   | High                      | Users in this role can manage access using Microsoft Entra ID for identity governance scenarios. |
-| Cloud App Security Administrator              | Identity   | High                      |                                                              |
+| Cloud App Security Administrator              | Identity   | High                      | Users in this role can manage all aspects of the Defender for Cloud Apps product.                                                             |
 | Windows 365 Administrator                     | Identity   | High                      | Users in this role can provision and manage all aspects of Cloud PCs. |
 | Yammer Administrator                          | Identity   | High                      | Users in this role can manage all aspects of the Yammer service. |
 | Authentication Extensibility Administrator    | Identity   | High                      | Users in this role can customize sign in and sign up experiences for users by creating and managing custom authentication extensions. |