Apply suggestions from code review

Author: ranbel

src/content/changelog/email-security-cf1/2025-09-01-updated-new-roles.mdx

@@ -1,14 +1,14 @@
 ---
-title: Updated Email Security Roles
+title: Updated Email Security roles
 description: More granular controls for Email Security roles
 date: 2025-09-01T23:25:49Z
 ---
 
 
-To provide more granular controls we refined the [existing roles](https://developers.cloudflare.com/cloudflare-one/roles-permissions/#email-security-roles) for Email Security and launched a new Email Security role as well. 
+To provide more granular controls we refined the [existing roles](/cloudflare-one/roles-permissions/#email-security-roles) for Email Security and launched a new Email Security role as well. 
 
 
-All Email Security roles now do not have read or write access to any of the other Zero Trust products:
+All Email Security roles no longer have read or write access to any of the other Zero Trust products:
 -   **Email Configuration Admin**
 -   **Email Integration Admin**
 -   **Email Security Read Only**
@@ -17,10 +17,10 @@ All Email Security roles now do not have read or write access to any of the othe
 -   **Email Security Reporting**
 
 
-To configure [Data Loss Prevention (DLP)](https://developers.cloudflare.com/cloudflare-one/email-security/outbound-dlp/) or [Remote Browser Isolation (RBI)](https://developers.cloudflare.com/cloudflare-one/policies/browser-isolation/setup/clientless-browser-isolation/#set-up-clientless-web-isolation), you now need to be an admin for the Zero Trust dashboard with the “Cloudflare Zero Trust” role.
+To configure [Data Loss Prevention (DLP)](/cloudflare-one/email-security/outbound-dlp/) or [Remote Browser Isolation (RBI)](/cloudflare-one/policies/browser-isolation/setup/clientless-browser-isolation/#set-up-clientless-web-isolation), you now need to be an admin for the Zero Trust dashboard with the **Cloudflare Zero Trust** role.
 
 
-Also through customer feedback, we have created a new additive role to allow “Email Security Analyst” to create, edit, and delete Email Security policies, without needing to provide access via the “Email Configuration Admin” role. This role is called “Email Security Policy Admin”, which can read all settings, but has write access to [allow policies](https://developers.cloudflare.com/cloudflare-one/email-security/detection-settings/allow-policies/), [trusted domains](https://developers.cloudflare.com/cloudflare-one/email-security/detection-settings/trusted-domains/), and [blocked senders](https://developers.cloudflare.com/cloudflare-one/email-security/detection-settings/blocked-senders/).
+Also through customer feedback, we have created a new additive role to allow **Email Security Analyst** to create, edit, and delete Email Security policies, without needing to provide access via the **Email Configuration Admin** role. This role is called **Email Security Policy Admin**, which can read all settings, but has write access to [allow policies](/cloudflare-one/email-security/detection-settings/allow-policies/), [trusted domains](/cloudflare-one/email-security/detection-settings/trusted-domains/), and [blocked senders](/cloudflare-one/email-security/detection-settings/blocked-senders/).