Merge pull request #49790 from ceperezb/CEPEREZB-sfi-fixes

minor fixes for sfi

Author: prmerger-automator[bot]

learn-pr/wwl-sci/describe-identity-protection-governance-capabilities/includes/3-describe-what-entitlement-management-access-reviews.md

@@ -4,7 +4,7 @@ Microsoft Entra ID enables you to collaborate with users from inside your organi
 
 There are many use cases in which access reviews should be used. Here are just a few examples.
 
-- **Too many users in privileged roles**: It's a good idea to check how many users have administrative access and if there are any invited guests or partners that haven't been removed after being assigned to do an administrative task. You can recertify the role assignment of users in Microsoft Entra roles such as Global Administrators, or Azure resources roles such as User Access Administrator in the Microsoft Entra Privileged Identity Management (PIM) experience.
+- **Too many users in privileged roles**: It's a good idea to check how many users have administrative access and if there are any invited guests or partners that haven't been removed after being assigned to do an administrative task. You can recertify the role assignment of users in Microsoft Entra roles or Azure resources roles in the Microsoft Entra Privileged Identity Management (PIM) experience.
 - **Business critical data access**: For certain resources, such as business critical applications, it might be required as part of compliance processes to ask people to regularly reconfirm and give a justification on why they need continued access.
 - **To maintain a policy's exception list**: Sometimes there are business cases that require you to make exceptions to policies. As the IT admin, you can manage this task and provide auditors with proof that these exceptions are reviewed regularly.
 - **Ask group owners to confirm they still need guests in their groups**: If a group gives guests access to business sensitive content, then it's the group owner's responsibility to confirm the guests still have a legitimate business need for access.

learn-pr/wwl-sci/describe-threat-protection-with-microsoft-365-defender/includes/7-describe-microsoft-defender-portal.md

@@ -3,7 +3,7 @@ A unified security operations platform is a fully integrated toolset for securit
 
 Through the Microsoft Defender portal, Microsoft delivers on the promise of a unified security operations platform so you can view the security health of your organization. The Microsoft Defender portal combines protection, detection, investigation, and response to threats across your entire organization and all its components, in a central place.
 
-To access the portal, You must be assigned an appropriate role, such as Global Administrator, Security Administrator, Security Operator, or Security Reader in Microsoft Entra ID to access the Microsoft Defender portal.
+To access the portal, you must be assigned an appropriate role such as Global Reader or Administrator, Security Reader or Administrator, or Security Operator in Microsoft Entra ID to access the Microsoft Defender portal.  
 
 The Defender portal emphasizes quick access to information, simpler layouts, and bringing related information together for easier use.
 

learn-pr/wwl-sci/security-copilot-getting-started/includes/6-describe-how-to-enable-security-copilot.md

@@ -14,7 +14,7 @@ Before users can start using Copilot, admins need to provision and allocate capa
 - You must have an Azure subscription.
 - You need to be an Azure owner or Azure contributor, at a resource group level, as a minimum.
 
-    *Keep in mind that a global administrator in Microsoft Entra ID  doesn't necessarily have the Azure owner or Azure contributor role by default. Microsoft Entra role assignments don't grant access to Azure resources. As a global admin in Microsoft Entra, you can enable access management for Azure resources through the Azure portal. For details, see [Elevate access to manage all Azure subscriptions and management groups](/azure/role-based-access-control/elevate-access-global-admin). Once you've enabled access management to Azure resources, you can configure the appropriate Azure role.*
+    *Keep in mind that a global Microsoft Entra administrator role doesn't necessarily have the Azure owner or Azure contributor role by default. Microsoft Entra role assignments don't grant access to Azure resources. As a global Microsoft Entra administrator, you can enable access management for Azure resources through the Azure portal. For details, see [Elevate access to manage all Azure subscriptions and management groups](/azure/role-based-access-control/elevate-access-global-admin). Once you've enabled access management to Azure resources, you can configure the appropriate Azure role.*
 
 There are two options for provisioning capacity:
 
@@ -40,10 +40,7 @@ Once admins complete the steps to onboard to Copilot, they can manage capacity b
 
 ### Set up the default environment
 
-To set up the default environment, you need to have one of the following Microsoft Entra ID roles:
-
-- Global administrator
-- Security administrator
+To set up the default environment, you need to have, at least, a Security Administrator role.
 
 During the setup of Security Copilot, you're prompted to configure settings. These include:
 
@@ -70,7 +67,7 @@ During the setup of Security Copilot, you're prompted to configure settings. The
 - Plugin settings - The admin manages plugins and configures whether to allow Security Copilot to access data from your Microsoft 365 services.
   - Configure who can add and manage their own custom plugins and who can add and manage custom plugins for everyone in the organization.
   - Manage plugin availability and restrict access. When enabled, admins decide which new and existing plugins will be available to everyone in your organization, and which will be restricted to owners only.
-  - Allow Security Copilot to access data from your Microsoft 365 services. If this option is turned off, your organization won't be able to use plugins that access Microsoft 365 services. Currently, this option is required for use of the Microsoft Purview plugin. Setting and/or changing this setting requires a user with a Global administrator role.
+  - Allow Security Copilot to access data from your Microsoft 365 services. If this option is turned off, your organization won't be able to use plugins that access Microsoft 365 services. Currently, this option is required for use of the Microsoft Purview plugin. Setting and/or changing this setting requires a user with a Copilot owner role or a global Microsoft Entra administrator role.
 
     :::image type="content" source="../media/plugin-settings-no-restrictions.png" lightbox="../media/plugin-settings-no-restrictions.png" alt-text="Screen capture showing the plugin settings and the setting to allow Security Copilot to access data from your Microsoft 365 services.":::