Merge pull request #306957 from jenniferf-skc/ARBACYmltoMD2

JamesJBarnett · web-flow · commit 051a38bd8548 · 2025-10-15T10:43:06.000-07:00
Updating link paths for YML to MD conversion
diff --git a/articles/role-based-access-control/TOC.yml b/articles/role-based-access-control/TOC.yml
@@ -87,7 +87,7 @@
     - name: Portal
       items:
       - name: Assign roles
-        href: role-assignments-portal.yml
+        href: /azure/role-based-access-control/role-assignments-portal
       - name: Managed identity
         href: /azure/role-based-access-control/role-assignments-portal-managed-identity
       - name: External users
diff --git a/articles/role-based-access-control/best-practices.md b/articles/role-based-access-control/best-practices.md
@@ -24,7 +24,7 @@ The following diagram shows a suggested pattern for using Azure RBAC.
 
 :::image type="content" source="./media/best-practices/rbac-least-privilege.png" alt-text="Diagram of suggested pattern for using Azure RBAC and least privilege." lightbox="./media/best-practices/rbac-least-privilege.png":::
 
-For information about how to assign roles, see [Assign Azure roles using the Azure portal](role-assignments-portal.yml).
+For information about how to assign roles, see [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal).
 
 ## Limit the number of subscription owners
 
diff --git a/articles/role-based-access-control/classic-administrators.md b/articles/role-based-access-control/classic-administrators.md
@@ -6,7 +6,7 @@ manager: pmwongera
 
 ms.service: role-based-access-control
 ms.topic: how-to
-ms.date: 03/12/2025
+ms.date: 10/15/2025
 ms.author: rolyon
 ms.reviewer: bagovind
 ms.custom: sfi-image-nochange
@@ -147,7 +147,7 @@ Most users don't need the same permissions as a Co-Administrator. Consider a job
 
 1. Determine the [scope](scope-overview.md) user needs.
 
-1. Follow steps to [assign a job function role to user](role-assignments-portal.yml).
+1. Follow steps to [assign a job function role to user](/azure/role-based-access-control/role-assignments-portal).
 
 1. [Remove Co-Administrator](#how-to-remove-a-co-administrator).
 
@@ -235,7 +235,7 @@ Your Service Administrator might be a Microsoft account or a Microsoft Entra acc
 
 1. If Service Administrator user is a Microsoft Entra account and you want this user to keep the same permissions, [convert the Service Administrator to Owner role](#how-to-convert-the-service-administrator-to-owner-role).
 
-1. If you want to change the Service Administrator user to a different user, [assign the Owner role](role-assignments-portal.yml) to this new user at subscription scope without conditions. Then, [remove the Service Administrator](#how-to-remove-the-service-administrator).
+1. If you want to change the Service Administrator user to a different user, [assign the Owner role](/azure/role-based-access-control/role-assignments-portal) to this new user at subscription scope without conditions. Then, [remove the Service Administrator](#how-to-remove-the-service-administrator).
 
 ### How to convert the Service Administrator to Owner role
 
@@ -281,5 +281,5 @@ The easiest way to convert the Service Administrator role assignment to the [Own
 ## Next steps
 
 - [Understand the different roles](../role-based-access-control/rbac-and-directory-admin-roles.md)
-- [Assign Azure roles using the Azure portal](../role-based-access-control/role-assignments-portal.yml)
+- [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal)
 - [Understand Microsoft Customer Agreement administrative roles in Azure](../cost-management-billing/manage/understand-mca-roles.md)
diff --git a/articles/role-based-access-control/conditions-role-assignments-portal.md b/articles/role-based-access-control/conditions-role-assignments-portal.md
@@ -39,7 +39,7 @@ There are two ways that you can add a condition. You can add a condition when yo
 
 ### New role assignment
 
-1. Follow the steps to [Assign Azure roles using the Azure portal](role-assignments-portal.yml).
+1. Follow the steps to [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal).
 
 1. On the **Conditions (optional)** tab, click **Add condition**.
 
diff --git a/articles/role-based-access-control/delegate-role-assignments-portal.md b/articles/role-based-access-control/delegate-role-assignments-portal.md
@@ -38,7 +38,7 @@ Once you know the permissions that delegate needs, you use the following steps t
 
 1. Sign in to the [Azure portal](https://portal.azure.com).
 
-1. Follow the steps to [open the Add role assignment page](role-assignments-portal.yml).
+1. Follow the steps to [open the Add role assignment page](/azure/role-based-access-control/role-assignments-portal).
 
 1. On the **Roles** tab, select the **Privileged administrator roles** tab.
 
@@ -163,7 +163,7 @@ If the condition templates don't work for your scenario or if you want more cont
 
 ## Step 5: Delegate assigns roles with conditions
 
-- Delegate can now follow steps to [assign roles](role-assignments-portal.yml).
+- Delegate can now follow steps to [assign roles](/azure/role-based-access-control/role-assignments-portal).
 
     :::image type="content" source="./media/shared/groups-constrained.png" alt-text="Diagram of role assignments constrained to specific roles and specific groups." lightbox="./media/shared/groups-constrained.png":::
 
diff --git a/articles/role-based-access-control/elevate-access-global-admin.md b/articles/role-based-access-control/elevate-access-global-admin.md
@@ -76,7 +76,7 @@ Follow these steps to elevate access for a Global Administrator using the Azure
 
 1. Make the changes you need to make at elevated access.
 
-    For information about assigning roles, see [Assign Azure roles using the Azure portal](role-assignments-portal.yml). If you are using Privileged Identity Management, see [Discover Azure resources to manage](/entra/id-governance/privileged-identity-management/pim-resource-roles-discover-resources) or [Assign Azure resource roles](/entra/id-governance/privileged-identity-management/pim-resource-roles-assign-roles).
+    For information about assigning roles, see [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal). If you are using Privileged Identity Management, see [Discover Azure resources to manage](/entra/id-governance/privileged-identity-management/pim-resource-roles-discover-resources) or [Assign Azure resource roles](/entra/id-governance/privileged-identity-management/pim-resource-roles-assign-roles).
 
 1. Perform the steps in the following section to remove your elevated access.
 
diff --git a/articles/role-based-access-control/index.yml b/articles/role-based-access-control/index.yml
@@ -69,7 +69,7 @@ landingContent:
       - linkListType: how-to-guide
         links: 
           - text: Portal
-            url: role-assignments-portal.yml
+            url: /azure/role-based-access-control/role-assignments-portal
           - text: Portal - Subscription admin
             url: /azure/role-based-access-control/role-assignments-portal-subscription-admin
           - text: PowerShell
diff --git a/articles/role-based-access-control/overview.md b/articles/role-based-access-control/overview.md
@@ -144,6 +144,6 @@ Consider the following example. Arina creates a virtual machine in East Asia. Bo
 
 ## Next steps
 
-- [Assign Azure roles using the Azure portal](role-assignments-portal.yml)
+- [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal)
 - [Understand the different roles](rbac-and-directory-admin-roles.md)
 - [Cloud Adoption Framework: Resource access management in Azure](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management)
diff --git a/articles/role-based-access-control/pim-integration.md b/articles/role-based-access-control/pim-integration.md
@@ -86,7 +86,7 @@ If your organization has process or compliance reasons to limit the use of PIM,
 
 1. In the **Edit assignment** pane, select **Active** for the assignment type and **Permanent** for the assignment duration.
 
-    For more information, see [Edit assignment](role-assignments-portal.yml#edit-assignment).
+    For more information, see [Edit assignment](/azure/role-based-access-control/role-assignments-portal#edit-assignment).
 
     :::image type="content" source="./media/shared/assignment-type-edit.png" alt-text="Screenshot of Edit assignment pane with Assignment type options displayed." lightbox="./media/shared/assignment-type-edit.png":::
 
@@ -232,5 +232,5 @@ For information about how to assign an Azure Policy with parameters, see [Tutori
 
 ## Next steps
 
-- [Assign Azure roles using the Azure portal](role-assignments-portal.yml)
+- [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal)
 - [What is Microsoft Entra Privileged Identity Management?](/entra/id-governance/privileged-identity-management/pim-configure)
diff --git a/articles/role-based-access-control/rbac-and-directory-admin-roles.md b/articles/role-based-access-control/rbac-and-directory-admin-roles.md
@@ -53,7 +53,7 @@ When you click the **Roles** tab, you'll see the list of built-in and custom rol
 
 :::image type="content" source="./media/shared/roles-list.png" alt-text="Screenshot of built-in roles in the Azure portal." lightbox="./media/shared/roles-list.png":::
 
-For more information, see [Assign Azure roles using the Azure portal](role-assignments-portal.yml).
+For more information, see [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal).
 
 <a name='azure-ad-roles'></a>
 
@@ -127,6 +127,6 @@ Accounts and subscriptions are managed in the [Azure portal](https://portal.azur
 
 ## Next steps
 
-- [Assign Azure roles using the Azure portal](role-assignments-portal.yml)
+- [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal)
 - [Assign Microsoft Entra roles to users](../active-directory/roles/manage-roles-portal.md)
 - [Roles for Microsoft 365 services in Microsoft Entra ID](../active-directory/roles/m365-workload-docs.md)
diff --git a/articles/role-based-access-control/role-assignments-alert.md b/articles/role-based-access-control/role-assignments-alert.md
@@ -108,7 +108,7 @@ To get notified of privileged role assignments, you create an alert rule in Azur
 
 Once you've created an alert rule, you can test that it fires. 
 
-1. Assign the Contributor, Owner, or User Access Administrator role at subscription scope. For more information, see [Assign Azure roles using the Azure portal](role-assignments-portal.yml).
+1. Assign the Contributor, Owner, or User Access Administrator role at subscription scope. For more information, see [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal).
 
 1. Wait a few minutes to receive the alert based on the aggregation granularity and the frequency of evaluation of the log query.
 
diff --git a/articles/role-based-access-control/role-assignments-external-users.md b/articles/role-based-access-control/role-assignments-external-users.md
@@ -63,7 +63,7 @@ For more information about the invitation process, see [Microsoft Entra B2B coll
 
 ## Assign a role to an external user
 
-In Azure RBAC, to grant access, you assign a role. To assign a role to an external user, you follow [same steps](role-assignments-portal.yml) as you would for a member user, group, service principal, or managed identity. Follow these steps assign a role to an external user at different scopes.
+In Azure RBAC, to grant access, you assign a role. To assign a role to an external user, you follow [same steps](/azure/role-based-access-control/role-assignments-portal) as you would for a member user, group, service principal, or managed identity. Follow these steps assign a role to an external user at different scopes.
 
 1. Sign in to the [Azure portal](https://portal.azure.com).
 
@@ -113,7 +113,7 @@ In Azure RBAC, to grant access, you assign a role. To assign a role to an extern
 
 ## Assign a role to an external user not yet in your directory
 
-To assign a role to an external user, you follow [same steps](role-assignments-portal.yml) as you would for a member user, group, service principal, or managed identity.
+To assign a role to an external user, you follow [same steps](/azure/role-based-access-control/role-assignments-portal) as you would for a member user, group, service principal, or managed identity.
 
 If the external user is not yet in your directory, you can invite the user directly from the Select members pane.
 
diff --git a/articles/role-based-access-control/role-assignments-list-portal.yml b/articles/role-based-access-control/role-assignments-list-portal.yml
@@ -6,7 +6,7 @@ metadata:
   author: rolyon
   ms.author: rolyon
   manager: pmwongera
-  ms.date: 12/12/2024
+  ms.date: 10/15/2025
   ms.service: role-based-access-control
   ms.topic: how-to
   ms.custom:
@@ -194,7 +194,7 @@ procedureSection:
   - title: | 
       List number of role assignments
     summary: |
-        You can have up to **4000** role assignments in each subscription. This limit includes role assignments at the subscription, resource group, and resource scopes. [Eligible role assignments](./role-assignments-portal.yml#step-6-select-assignment-type) and role assignments scheduled in the future do not count towards this limit. To help you keep track of this limit, the **Role assignments** tab includes a chart that lists the number of role assignments for the current subscription.
+        You can have up to **4000** role assignments in each subscription. This limit includes role assignments at the subscription, resource group, and resource scopes. [Eligible role assignments](/azure/role-based-access-control/role-assignments-portal#step-6-select-assignment-type) and role assignments scheduled in the future do not count towards this limit. To help you keep track of this limit, the **Role assignments** tab includes a chart that lists the number of role assignments for the current subscription.
 
         ![Screenshot of Access control and number of role assignments chart.](./media/role-assignments-list-portal/access-control-role-assignments-chart.png)
 
@@ -245,7 +245,7 @@ procedureSection:
 
 relatedContent:
   - text: Assign Azure roles using the Azure portal
-    url: role-assignments-portal.yml
+    url: /azure/role-based-access-control/role-assignments-portal
   - text: Troubleshoot Azure RBAC
     url: troubleshooting.md
 
diff --git a/articles/role-based-access-control/role-assignments-portal-managed-identity.yml b/articles/role-based-access-control/role-assignments-portal-managed-identity.yml
@@ -14,7 +14,7 @@ metadata:
 title: |
   Assign Azure roles to a managed identity (Preview)
 introduction: |
-  You can assign a role to a managed identity by using the **Access control (IAM)** page as described in [Assign Azure roles using the Azure portal](role-assignments-portal.yml). When you use the Access control (IAM) page, you start with the scope and then select the managed identity and role. This article describes an alternate way to assign roles for a managed identity. Using these steps, you start with the managed identity and then select the scope and role.
+  You can assign a role to a managed identity by using the **Access control (IAM)** page as described in [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal). When you use the Access control (IAM) page, you start with the scope and then select the managed identity and role. This article describes an alternate way to assign roles for a managed identity. Using these steps, you start with the managed identity and then select the scope and role.
 
   > [!IMPORTANT]
   > Assign a role to a managed identity using these alternate steps is currently in preview.
@@ -92,6 +92,6 @@ relatedContent:
   - text: What are managed identities for Azure resources?
     url: ../active-directory/managed-identities-azure-resources/overview.md
   - text: Assign Azure roles using the Azure portal
-    url: role-assignments-portal.yml
+    url: /azure/role-based-access-control/role-assignments-portal
   - text: List Azure role assignments using the Azure portal
     url: /azure/role-based-access-control/role-assignments-list-portal
diff --git a/articles/role-based-access-control/role-assignments-portal-subscription-admin.yml b/articles/role-based-access-control/role-assignments-portal-subscription-admin.yml
@@ -153,7 +153,7 @@ procedureSection:
 
 relatedContent:
   - text: Assign Azure roles using the Azure portal
-    url: role-assignments-portal.yml
+    url: /azure/role-based-access-control/role-assignments-portal
   - text: Organize your resources with Azure management groups
     url: ../governance/management-groups/overview.md
   - text: Alert on privileged Azure role assignments
diff --git a/articles/role-based-access-control/role-assignments-steps.md b/articles/role-based-access-control/role-assignments-steps.md
@@ -5,13 +5,13 @@ author: rolyon
 manager: pmwongera
 ms.service: role-based-access-control
 ms.topic: how-to
-ms.date: 09/30/2024
+ms.date: 10/15/2025
 ms.author: rolyon
 ---
 
 # Steps to assign an Azure role
 
-[!INCLUDE [Azure RBAC definition grant access](../../includes/role-based-access-control/definition-grant.md)] This article describes the high-level steps to assign Azure roles using the [Azure portal](role-assignments-portal.yml), [Azure PowerShell](role-assignments-powershell.md), [Azure CLI](role-assignments-cli.md), or the [REST API](role-assignments-rest.md).
+[!INCLUDE [Azure RBAC definition grant access](../../includes/role-based-access-control/definition-grant.md)] This article describes the high-level steps to assign Azure roles using the [Azure portal](/azure/role-based-access-control/role-assignments-portal), [Azure PowerShell](role-assignments-powershell.md), [Azure CLI](role-assignments-cli.md), or the [REST API](role-assignments-rest.md).
 
 ## Step 1: Determine who needs access
 
@@ -89,11 +89,11 @@ If you are using a service principal to assign roles, you might get the error "I
 
 Once you know the security principal, role, and scope, you can assign the role. You can assign roles using the Azure portal, Azure PowerShell, Azure CLI, Azure SDKs, or REST APIs.
 
-You can have up to **4000** role assignments in each subscription. This limit includes role assignments at the subscription, resource group, and resource scopes. [Eligible role assignments](./role-assignments-portal.yml#step-6-select-assignment-type) and role assignments scheduled in the future do not count towards this limit. You can have up to **500** role assignments in each management group. For more information, see [Troubleshoot Azure RBAC limits](troubleshoot-limits.md).
+You can have up to **4000** role assignments in each subscription. This limit includes role assignments at the subscription, resource group, and resource scopes. [Eligible role assignments](/azure/role-based-access-control/role-assignments-portal#step-6-select-assignment-type) and role assignments scheduled in the future do not count towards this limit. You can have up to **500** role assignments in each management group. For more information, see [Troubleshoot Azure RBAC limits](troubleshoot-limits.md).
 
 Check out the following articles for detailed steps for how to assign roles.
 
-- [Assign Azure roles using the Azure portal](role-assignments-portal.yml)
+- [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal)
 - [Assign Azure roles using Azure PowerShell](role-assignments-powershell.md)
 - [Assign Azure roles using Azure CLI](role-assignments-cli.md)
 - [Assign Azure roles using the REST API](role-assignments-rest.md)
diff --git a/articles/role-based-access-control/troubleshoot-limits.md b/articles/role-based-access-control/troubleshoot-limits.md
@@ -5,7 +5,7 @@ author: rolyon
 manager: pmwongera
 ms.service: role-based-access-control
 ms.topic: how-to
-ms.date: 06/27/2024
+ms.date: 10/15/2025
 ms.author: rolyon
 ms.custom: sfi-image-nochange
 ---
@@ -32,7 +32,7 @@ When you try to assign a role, you get the following error message:
 
 ### Cause
 
-Azure supports up to **4000** role assignments per subscription. This limit includes role assignments at the subscription, resource group, and resource scopes, but not at the management group scope. [Eligible role assignments](./role-assignments-portal.yml#step-6-select-assignment-type) and role assignments scheduled in the future do not count towards this limit. You should try to reduce the number of role assignments in the subscription.
+Azure supports up to **4000** role assignments per subscription. This limit includes role assignments at the subscription, resource group, and resource scopes, but not at the management group scope. [Eligible role assignments](/azure/role-based-access-control/role-assignments-portal#step-6-select-assignment-type) and role assignments scheduled in the future do not count towards this limit. You should try to reduce the number of role assignments in the subscription.
 
 > [!NOTE]
 > The **4000** role assignments limit per subscription is fixed and cannot be increased.
@@ -105,7 +105,7 @@ To reduce the number of role assignments in the subscription, add principals (us
 
     For information about how to add principals in bulk, see [Bulk add group members in Microsoft Entra ID](../active-directory/enterprise-users/groups-bulk-import-members.md).
 
-1. Assign the role to the group you created at the same scope. For more information, see [Assign Azure roles using the Azure portal](role-assignments-portal.yml).
+1. Assign the role to the group you created at the same scope. For more information, see [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal).
 
     Now you can find and remove the principal-based role assignments.
 
@@ -260,7 +260,7 @@ To reduce the number of role assignments in the subscription, replace multiple b
 
 1. Open the **Access control (IAM)** page at the same scope as the role assignments.
 
-1. Assign the new custom role to the principal. For more information, see [Assign Azure roles using the Azure portal](role-assignments-portal.yml).
+1. Assign the new custom role to the principal. For more information, see [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal).
 
     Now you can remove the built-in role assignments.
 
diff --git a/articles/role-based-access-control/troubleshooting.md b/articles/role-based-access-control/troubleshooting.md
diff --git a/articles/role-based-access-control/whats-new.md b/articles/role-based-access-control/whats-new.md
