changed files by pdets auto publish service, publishid[b0a7b0c8-de2b-496a-946e-abf0279b8417] and do [publish].

wwlpublish · web-flow · commit 0bcd1fa4a7ea · 2025-04-04T03:12:57.000+08:00
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/1-introduction.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/1-introduction.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Introduction
   description: "Introduction"
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/10-knowledge-check.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/10-knowledge-check.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Knowledge check
   description: "Knowledge check"
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
@@ -31,9 +31,9 @@ quiz:
       explanation: "Sorry, that's incorrect. A domain name can be included as part of an application or other resource if the organization owns the domain name that contains the resource."
   - content: "The proliferation of many types of devices and bring your own device (BYOD) concept require IT professionals to accommodate two rather different goals. One goal is to allow users to be productive wherever and anytime. What is the other goal?"
     choices:
-    - content: "Provide antimalware apps for a various devices."
+    - content: "Provide anti-malware apps for a various devices."
       isCorrect: false
-      explanation: "Sorry, that's incorrect. Providing antimalware apps for a all devices isn't a goal that IT professionals need to accommodate."
+      explanation: "Sorry, that's incorrect. Providing anti-malware apps for a all devices isn't a goal that IT professionals need to accommodate."
     - content: "Establish baseline security guidelines for users."
       isCorrect: false
       explanation: "Sorry, that's incorrect. Establishing baseline security guidelines isn't a goal that IT professionals need to accommodate."
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/11-summary-resources.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/11-summary-resources.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Summary and resources
   description: "Summary and resources"
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/2-configure-company-brand.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/2-configure-company-brand.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Configure company brand
   description: "Configure company brand"
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/3-configure-manage-roles.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/3-configure-manage-roles.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Configure and manage Microsoft Entra roles
   description: "Configure and manage Microsoft Entra roles"
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/4-exercise-manage-users-roles.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/4-exercise-manage-users-roles.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Exercise manage users roles
   description: "Exercise manage users roles"
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/5-configure-delegation-administrative-units.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/5-configure-delegation-administrative-units.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Configure delegation by using administrative units
   description: "Configure delegation by using administrative units"
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/6-analyze-azure-ad-role-permissions.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/6-analyze-azure-ad-role-permissions.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Analyze Microsoft Entra role permissions
   description: "Analyze Microsoft Entra role permissions"
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/7-configure-manage-custom-domains.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/7-configure-manage-custom-domains.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Configure and manage custom domains
   description: "Configure and manage custom domains"
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/8-configure-tenant-wide-options.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/8-configure-tenant-wide-options.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Configure tenant-wide setting
   description: "Configure tenant-wide setting"
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/9-exercise-set-tenant-wide-properties.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/9-exercise-set-tenant-wide-properties.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Exercise - setting tenant-wide properties
   description: "Exercise - setting tenant-wide properties"
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/includes/3-configure-manage-roles.md b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/includes/3-configure-manage-roles.md
@@ -8,7 +8,7 @@ Microsoft Entra ID is Microsoft’s cloud-based identity and access management s
 Microsoft Entra ID is intended for:
 
 - **IT admins** - As an IT admin, you can use Microsoft Entra ID to control access to your apps and your app resources, based on your business requirements. For example, you can use Microsoft Entra ID to require multifactor authentication when accessing important organizational resources. Additionally, you can use Microsoft Entra ID to automate user provisioning between your existing Windows Server AD and your cloud apps, including Microsoft 365. Finally, Microsoft Entra ID gives you powerful tools to automatically help protect user identities and credentials and to meet your access governance requirements.
-- **App developers** - As an app developer, you can use Microsoft Entra ID as a standards-based approach for adding single sign-on (SSO) to your app, allowing it to work with a user's pre-existing credentials. Microsoft Entra ID also provides APIs that can help you build personalized app experiences using existing organizational data.
+- **App developers** - As an app developer, you can use Microsoft Entra ID as a standards-based approach for adding single sign-on (SSO) to your app, allowing it to work with a user's preexisting credentials. Microsoft Entra ID also provides APIs that can help you build personalized app experiences using existing organizational data.
 - **Microsoft 365, Office 365, Azure, or Dynamics CRM Online subscribers** - As a subscriber, you're already using Microsoft Entra ID. Each Microsoft 365, Office 365, Azure, and Dynamics CRM Online tenant is automatically a Microsoft Entra tenant. You can immediately start to manage access to your integrated cloud apps.
 
 In Microsoft Entra ID, if one of your users needs permission to manage Microsoft Entra resources, you must assign them to a role that provides the permissions they need.
@@ -54,12 +54,12 @@ At a high level, Azure roles control permissions to manage Azure resources, whil
 
 ### Do Azure roles and Microsoft Entra roles overlap?
 
-By default, Azure roles and Microsoft Entra roles don't span Azure and Microsoft Entra ID. However, if a Global Administrator elevates their access by choosing the **Access management for Azure resources** switch in the Azure portal, they will be granted the User Access Administrator role (an Azure role) on all subscriptions for a particular tenant. The User Access Administrator role enables the user to grant other users access to Azure resources. This switch can be helpful to regain access to a subscription.
+By default, Azure roles and Microsoft Entra roles don't span Azure and Microsoft Entra ID. However, if a Global Administrator elevates their access by choosing the **Access management for Azure resources** switch in the Azure portal, they're granted the User Access Administrator role (an Azure role) on all subscriptions for a particular tenant. The User Access Administrator role enables the user to grant other users access to Azure resources. This switch can be helpful to regain access to a subscription.
 
 Several Microsoft Entra roles span Microsoft Entra ID and Microsoft 365, such as the Global and User Administrator roles. For example, if you're assigned the Global Administrator role, you have administrator capabilities in Microsoft Entra ID and Microsoft 365, such as making changes to Microsoft Exchange and Microsoft SharePoint. However, by default, the Global Administrator doesn't have access to Azure resources.
 
 > [!NOTE]
-> Microsoft does not recommend the use of the Global Administrator role. It is recommended that you follow the principle of least privilege when performing administrative tasks.
+> Microsoft doesn't recommend the use of the Global Administrator role. It's recommended that you follow the principle of least privilege when performing administrative tasks.
 
 :::image type="content" source="../media/azure-office-roles.png" alt-text="Diagram of relationship of Azure roles to Microsoft Entra roles. Azure roles accessed in Azure tenant.  Microsoft Entra roles also accessed from Microsoft Entra ID and Microsoft 365.":::
 
@@ -83,7 +83,7 @@ The best method for your configuration needs can be used, but care must be taken
 A common way to assign Microsoft Entra roles to a user is on the Assigned roles page for a user. You can also configure the user eligibility to be elevated just-in-time into a role using **Privileged Identity Management (PIM)**.
 
 > [!NOTE]
-> If you have an Microsoft Entra ID Premium P2 license plan and already use PIM, all role management tasks are performed in the Privileged Identity Management experience. This feature is currently limited to assigning only one role at a time. You can't currently select multiple roles and assign them to a user all at once.
+> If you have a Microsoft Entra ID Premium P2 license plan and already use PIM, all role management tasks are performed in the Privileged Identity Management experience. This feature is currently limited to assigning only one role at a time. You can't currently select multiple roles and assign them to a user all at once.
 
 :::image type="content" source="../media/privileged-identity-management-manages-roles.png" alt-text="Screenshot of Privileged Identity Manager for users assigned Global Admin and have a Premium P2 license.":::
 
@@ -109,4 +109,4 @@ Custom roles can be created in the [Roles and administrators](https://portal.azu
 5. Next, enter "basic" in the search bar, select the `microsoft.directory/applications/basic/update` permission, and then select **Next**.
 6. On the **Review + create** tab, review the permissions and select **Create**.
 
-Your custom role will show up in the list of available roles to assign.
+Your custom role shows up in the list of available roles to assign.
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/includes/5-configure-delegation-administrative-units.md b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/includes/5-configure-delegation-administrative-units.md
@@ -17,13 +17,13 @@ You can have users in the following roles to manage your administrative unit:
 - User administrator
 
 > [!NOTE]
-> If you are familiar with on-premises Active Directory, this capability was handled by setting up Organizational Units (OUs) in your directory and adding your users to the OU.
+> If you're familiar with on-premises Active Directory, this capability was handled by setting up Organizational Units (OUs) in your directory and adding your users to the OU.
 
 ## Plan your administrative units
 
 You can use administrative units to logically group Microsoft Entra resources. An organization whose IT department is scattered globally might create administrative units that define relevant geographical boundaries. In another scenario, where a global organization has suborganizations that are semi-autonomous in their operations, administrative units could represent the suborganizations.
 
-The criteria on which administrative units are created are guided by the unique requirements of an organization. Administrative units are a common way to define structure across Microsoft 365 services. We recommend that you prepare your administrative units with their use across Microsoft 365 services in mind. You can get maximum value out of administrative units when you can associate common resources across Microsoft 365 under an administrative unit.
+The administrative units creation criteria is guided by the unique requirements of an organization. Administrative units are a common way to define structure across Microsoft 365 services. We recommend that you prepare your administrative units with their use across Microsoft 365 services in mind. You can get maximum value out of administrative units when you can associate common resources across Microsoft 365 under an administrative unit.
 
 You can expect the creation of administrative units in the organization to go through the following stages:
 
@@ -59,14 +59,14 @@ It's work to develop a delegation model that fits your needs. Developing a deleg
 
 ## Define roles
 
-Determine the Active Directory tasks that are carried out by administrators and how they map to roles. Each task should be evaluated for frequency, importance, and difficulty. These criteria are vital aspects of task definition because they govern whether a permission should be delegated:
+Determine the directory tasks carried out by administrators and how they map to roles. Each task should be evaluated for frequency, importance, and difficulty. These criteria are vital aspects of task definition because they govern whether a permission should be delegated:
 
 - Tasks that you do routinely, have limited risk, and are trivial to complete are excellent candidates for delegation.
 - Tasks that you do rarely but have potential risk across the organization and require high skill levels should be considered carefully before delegating. Instead, you can temporarily elevate an account to the required role or reassign the task.
 
 ## Delegate app administration
 
-The proliferation of apps within your organization can strain your delegation model. If it places the burden for application access management on the Global Administrator, it's likely that model increases its overhead as time goes on. If you have granted people the Global Administrator role for things like configuring enterprise applications, you can now offload them to the following less-privileged roles. Doing so helps to improve your security posture and reduces the potential for unfortunate mistakes. The most-privileged application administrator roles are:
+The proliferation of apps within your organization can strain your delegation model. If it places the burden for application access management on the Global Administrator, it's likely that model increases its overhead as time goes on. If you granted people the Global Administrator role for things like configuring enterprise applications, you can now offload them to the following less-privileged roles. Doing so helps to improve your security posture and reduces the potential for unfortunate mistakes. The most-privileged application administrator roles are:
 
 - The **Application Administrator** role, which grants the ability to manage all applications in the directory, including registrations, single sign-on settings, user and group assignments and licensing, Application Proxy settings, and consent. It doesn't grant the ability to manage Conditional Access.
 - The **Cloud Application Administrator** role, which grants all the abilities of the Application Administrator, except it doesn't grant access to Application Proxy settings (because it has no on-premises permission).
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/includes/9-exercise-set-tenant-wide-properties.md b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/includes/9-exercise-set-tenant-wide-properties.md
@@ -1,4 +1,4 @@
-You goal is to change the tenant display name
+Your goal is to change the tenant display name.
 
 1. Browse to the [Azure portal](https://portal.azure.com/) and sign in using an Administrator account for the directory.
 2. Select the **Show portal menu** hamburger icon and then select **Microsoft Entra ID**.
@@ -15,7 +15,7 @@ You goal is to change the tenant display name
 7. Under **Tenant properties**, locate **Country / region** and review the information.
     
    > [!IMPORTANT]
-   > When the tenant is created, the Country / region is specified at that time. This setting cannot be changed later.
+   > When the tenant is created, the Country / region is specified at that time. This setting can't be changed later.
 
 ### Find the location associated with your tenant
 
@@ -51,7 +51,7 @@ You add your organization's privacy information in the **Properties** area of Mi
 12. Add your privacy info for your employees:
     
    - **Technical contact**. Type the email address for the person to contact for technical support within your organization.
-   - **Global privacy contact**. Type the email address for the person to contact for inquiries about personal data privacy. This person is also who Microsoft contacts if there's a data breach. If there's no person listed here, Microsoft contacts your the administrator who own the tenant.
+   - **Global privacy contact**. Type the email address for the person to contact for inquiries about personal data privacy. This person is also who Microsoft contacts if there's a data breach. If there's no person listed here, Microsoft contacts the administrator who owns the tenant.
    - **Privacy statement URL**. Type the link to your organization's document that describes how your organization handles both internal and external guest's data privacy.
         
       :::image type="content" source="../media/active-directory-privacy-statement-contact.png" alt-text="Screenshot of the B 2 B Collaboration Review permissions box with Accept / Cancel buttons.":::
diff --git a/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/index.yml b/learn-pr/wwl-sci/implement-initial-configuration-of-azure-active-directory/index.yml
@@ -5,7 +5,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Implement initial configuration of Microsoft Entra ID
   description: "Learn to create an initial Azure Active Directory configuration to ensure all the identity solutions available in Azure are ready to use. This module explores how to build and configure an Azure AD system."
-  ms.date: 04/02/2025
+  ms.date: 04/03/2025
   author: wwlpublish
   ms.author: roberts
   ms.topic: module-standard-task-based
