upload guidebook - Yuval

Author: mberdugo

defender-xdr/security-upload-guide.md

@@ -30,7 +30,7 @@ This guide outlines how to upload your organization's specific guidelines to Mic
 
 ## Prerequisites
 
-- You must have appropriate permissions to upload files in the Microsoft Defender portal. Typically, this requires being assigned a role such as Security Administrator.
+- You must be at least a security administrator to upload, approve or delete files. Security operators can review the guidebooks but not manage them.
 - Your organization-specific guidelines should be in a supported format (PDF, DOCX, TXT) and should not exceed the maximum file size limit of 3 MB.
 
 ## Steps to upload organization-specific guidelines
@@ -52,20 +52,11 @@ Then follow these steps:
 1. Browse to the file location, choose the file, and then select **Generate**.
 1. After the file is uploaded, go to the **Pending review** tab.
 
-    :::image type="content" source="{source}" alt-text="{alt-text}":::
-
-1. The pending review tab shows the new recommendations based on the uploaded guidebook. Review the file to ensure it meets your organization's standards. Select the guidebook name and review the suggested generated tasks.
-
-
     :::image type="content" source="./media/security-upload-guide/pending-review.png" alt-text="Screenshot of the pending review tab for uploaded guidebooks.":::
 
+1. The pending review tab shows the new recommendations based on the uploaded guidebook. Review the file to ensure it meets your organization's standards. Select the guidebook name and review the suggested generated tasks.
 1. If the guidebook meets your standards, select **Approve and activate** to make it available for use in guided responses. If it does not meet your standards, select **Delete** to remove it.
 
     :::image type="content" source="./media/security-upload-guide/approve-guidebook.png" alt-text="Screenshot of the approve and activate button for uploaded guidebooks.":::
 
 Copilot uses the most relevant guidance it has for each incident. A banner shows which guidebook is being used for the current recommendation.
-
-## Considerations and limitations
-
-- You must be at least a security administrator to upload, approve or delete files. Security operators can review the guidebooks but not manage them.
--