Update troubleshoot-permission-errors-in-activity-log-configuration.md

Edit review per CI 6615

Author: przlplx

support/azure/azure-monitor/activity-logs/config-export/troubleshoot-permission-errors-in-activity-log-configuration.md

@@ -7,37 +7,35 @@ ms.service: azure-monitor
 ms.custom: I can’t configure export of Activity Logs
 ---
 
-# Troubleshoot Permission Errors in Activity Log Configuration
+# Troubleshoot permission errors in Activity Log configuration
 
-When configuring the Azure Activity Log to export to Log Analytics, users may encounter permission errors. This issue typically arises due to insufficient permissions assigned to the custom role. Understanding the root cause and applying the correct permissions can resolve this problem efficiently.
+Users might experience permission errors when they configure the Azure Activity Log to export to Log Analytics. This issue typically occurs because insufficient permissions are assigned to the custom role. This article helps you determine the root cause of the errors and apply the correct permissions to resolve the issue efficiently.
 
-## Common Issues and Solutions
+## Common issues and solutions
 
 - **Authorization Failed**: This error indicates that the user does not have the necessary permissions to perform the action. Verify that the correct permissions are assigned and that the scope is set correctly.
 
-### Step-by-Step Instructions to Resolve Permission Errors
+### Instructions to resolve permission errors
 
-1. **Verify Role Assignments**:
-   - Navigate to **Azure Portal**.
-   - Go to **Subscriptions** and select the relevant subscription.
-   - Click on **Access Control (IAM)** and then **Role assignments**.
-   - Ensure that the custom role is assigned to the account responsible for creating the diagnostic settings.
+**Step 1: Verify role assignments**
+   1. Navigate to **Azure Portal**.
+   1. Go to **Subscriptions** and select the relevant subscription.
+   1. Select **Access Control (IAM)** > **Role assignments**.
+   1. Make sure that the custom role is assigned to the account that's responsible for creating the diagnostic settings.
 
-2. **Assign Necessary Permissions**:
-   - Duplicate the **Log Analytics Contributor** role.
-   - Remove any unnecessary permissions.
-   - Ensure the **Microsoft.Insights/diagnosticSettings/write** permission is included.
+**Step 2: Assign necessary permissions**
+   1. Duplicate the **Log Analytics Contributor** role.
+   1. Remove any unnecessary permissions.
+   1. Make sure that the **Microsoft.Insights/diagnosticSettings/write** permission is included.
 
-3. **Set Scope Appropriately**:
-   - Ensure the scope is set to the **subscription level** rather than the resource group level.
+**Step 3: Set scope appropriately** - Make sure that the scope is set to the **subscription level** instead of the resource group level.
 
-4. **Update Credentials**:
-   - If access was recently granted, update the credentials to reflect the changes.
+**Step 4: Update credentials** - If access was recently granted, update the credentials to reflect the changes.
 
-## Reference
+## References
 
 - [Azure Analysis Services Overview](https://learn.microsoft.com/analysis-services/azure-analysis-services/analysis-services-overview?view=asallproducts-allversions)
 - [Log Analytics Contributor Role](https://learn.microsoft.com/azure/role-based-access-control/built-in-roles/analytics#log-analytics-contributor)
 - [Azure Monitor Activity Log](https://learn.microsoft.com/azure/azure-monitor/platform/activity-log?tabs=powershell)
 
-If the issue persists after following the solution steps, please open a support case for further assistance.
+If the issue persists after you follow these steps, open a support case for further assistance.