address review comments

Author: richard-dennehy

docs/reference/elasticsearch-plugins/authentication-plugins.md

@@ -5,7 +5,7 @@ applies_to:
   stack: ga 9.1
 ---
 
-# Authentication Plugins [authentication]
+# Authentication plugins [authentication]
 
 Authentication plugins extend the functionality provided by the built-in [authentication realms](docs-content://deploy-manage/users-roles/cluster-or-deployment-auth/authentication-realms.md).
 

docs/reference/elasticsearch-plugins/ms-graph-authz-configure-azure.md

@@ -10,7 +10,7 @@ applies_to:
 To make API calls to Microsoft Graph, Elasticsearch requires Azure credentials
 with the correct permissions.
 
-## Create a custom Azure Application
+## Create a custom Azure application
 
 1) Log in to the [Azure portal](https://portal.azure.com) and go to Microsoft
    Entra ID.
@@ -23,7 +23,7 @@ with the correct permissions.
 :alt: "create your own application" page
 :::
 
-## Configure the custom Application
+## Configure the custom application
 
 1) In the [Azure portal](https://portal.azure.com), go to Microsoft Entra ID.
 2) Under **App registrations**, select the **All applications** tab, and then
@@ -51,8 +51,9 @@ with the correct permissions.
     3. Choose **Application permissions**.
     4. Select `Directory.ReadWrite.All`, `Group.ReadWrite.All`, `User.Read.All`.
 
-   Note that an Azure Admin will need to approve these permissions before the
-   credentials can be used
+   :::{note}
+   An Azure Admin must approve these permissions before the credentials can be used.
+
    :::{image} ./images/ms-graph-authz/05-configure-api-permissions.png
    :alt: configure api permissions
    :::

docs/reference/elasticsearch-plugins/ms-graph-authz.md

@@ -15,7 +15,7 @@ size limit (see [Group overages](https://learn.microsoft.com/en-us/security/zero
 
 ## Installation [ms-graph-authz-install]
 
-This plugin can be installed using the plugin manager:
+If you're using a [self-managed Elasticsearch cluster](docs-content:///deploy-manage/deploy/self-managed.md), then this plugin can be installed using the plugin manager:
 
 ```sh
 sudo bin/elasticsearch-plugin install microsoft-graph-authz
@@ -31,6 +31,8 @@ To verify the `.zip` file, use
 the [SHA hash](https://artifacts.elastic.co/downloads/elasticsearch-plugins/microsoft-graph-authz/microsoft-graph-authz-{{version.stack}}.zip.sha512)
 or [ASC key](https://artifacts.elastic.co/downloads/elasticsearch-plugins/microsoft-graph-authz/microsoft-graph-authz-{{version.stack}}.zip.asc).
 
+For all other deployment types, refer to [plugin management](/reference/elasticsearch-plugins/plugin-management.md).
+
 ## Removal [ms-graph-authz-remove]
 
 The plugin can be removed with the following command:
@@ -41,4 +43,6 @@ sudo bin/elasticsearch-plugin remove microsoft-graph-authz
 
 The node must be stopped before removing the plugin.
 
+## Configuration
 
+To learn how to configure the Microsoft Graph Authz plugin, refer to [configuration properties](/reference/elasticsearch-plugins/ms-graph-authz-configure-elasticsearch.md).