Merge pull request #307258 from jenniferf-skc/ARBACYmltoMD-4

[BULK Update] Updating link paths for YML to Markdown conversion. role-assignment-portal.yml

Author: denrea

articles/api-management/api-management-howto-app-insights.md

@@ -45,7 +45,7 @@ You can easily integrate Azure Application Insights with Azure API Management. A
 
         * If you enable a user-assigned managed identity, take note of the identity's **Client ID**.
 
-    1. Assign the identity the **Monitoring Metrics Publisher** role, scoped to the Application Insights resource. To assign the role, use the [Azure portal](../role-based-access-control/role-assignments-portal.yml) or other Azure tools.
+    1. Assign the identity the **Monitoring Metrics Publisher** role, scoped to the Application Insights resource. To assign the role, use the [Azure portal](/azure/role-based-access-control/role-assignments-portal) or other Azure tools.
 
 ## Scenario overview
 

articles/api-management/api-management-howto-disaster-recovery-backup-restore.md

@@ -65,7 +65,7 @@ Azure generates two 512-bit storage account access keys for each storage account
 
     * If you enable a user-assigned managed identity, take note of the identity's **Client ID**.
     * If you will back up and restore to different API Management instances, enable a managed identity in both the source and target instances.
-1. Assign the identity the **Storage Blob Data Contributor** role, scoped to the storage account used for backup and restore. To assign the role, use the [Azure portal](../role-based-access-control/role-assignments-portal.yml) or other Azure tools.
+1. Assign the identity the **Storage Blob Data Contributor** role, scoped to the storage account used for backup and restore. To assign the role, use the [Azure portal](/azure/role-based-access-control/role-assignments-portal) or other Azure tools.
 
 
 ## Back up an API Management service

articles/api-management/api-management-howto-log-event-hubs.md

@@ -46,7 +46,7 @@ To log events to the event hub, you need to configure credentials for access fro
 
     * If you enable a user-assigned managed identity, take note of the identity's **Object ID**.
 
-1. Assign the identity the **Azure Event Hubs Data sender** role, scoped to the Event Hubs namespace or to the event hub used for logging. To assign the role, use the [Azure portal](../role-based-access-control/role-assignments-portal.yml) or another Azure tool.
+1. Assign the identity the **Azure Event Hubs Data sender** role, scoped to the Event Hubs namespace or to the event hub used for logging. To assign the role, use the [Azure portal](/azure/role-based-access-control/role-assignments-portal) or another Azure tool.
 
 
 ### Option 2: Configure an Event Hubs connection string

articles/api-management/api-management-howto-send-service-bus.md

@@ -55,7 +55,7 @@ To send messages to the service bus, you need to configure a managed identity fo
 
     * If you enable a user-assigned managed identity, take note of the identity's **Client ID**.
 
-1. Assign the identity the **Azure Service Bus Data Sender** role, scoped to the service bus. To assign the role, use the [Azure portal](../role-based-access-control/role-assignments-portal.yml) or other Azure tools.
+1. Assign the identity the **Azure Service Bus Data Sender** role, scoped to the service bus. To assign the role, use the [Azure portal](/azure/role-based-access-control/role-assignments-portal) or other Azure tools.
 
 ## Configure send-service-bus-message policy
 

articles/api-management/api-management-role-based-access-control.md

@@ -23,7 +23,7 @@ Azure API Management relies on Azure role-based access control (Azure RBAC) to e
 
 API Management currently provides three built-in service roles. These roles can be assigned at different scopes, including subscription, resource group, and individual API Management instance. For instance, if you assign the "API Management Service Reader" role to a user at the resource-group level, then the user has read access to all API Management instances inside the resource group. 
 
-The following table provides brief descriptions of the built-in roles. You can assign these roles by using the Azure portal or other tools, including Azure [PowerShell](../role-based-access-control/role-assignments-powershell.md), [Azure CLI](../role-based-access-control/role-assignments-cli.md), and [REST API](../role-based-access-control/role-assignments-rest.md). For details about how to assign built-in roles, see [Assign Azure roles to manage access to your Azure subscription resources](../role-based-access-control/role-assignments-portal.yml).
+The following table provides brief descriptions of the built-in roles. You can assign these roles by using the Azure portal or other tools, including Azure [PowerShell](../role-based-access-control/role-assignments-powershell.md), [Azure CLI](../role-based-access-control/role-assignments-cli.md), and [REST API](../role-based-access-control/role-assignments-rest.md). For details about how to assign built-in roles, see [Assign Azure roles to manage access to your Azure subscription resources](/azure/role-based-access-control/role-assignments-portal).
 
 | Role          | Read access<sup>[1]</sup> | Write access<sup>[2]</sup> | Service creation, deletion, scaling, VPN, and custom domain configuration | Access to the legacy publisher portal | Description
 | ------------- | ---- | ---- | ---- | ---- | ---- 
@@ -87,6 +87,6 @@ The [Azure Resource Manager resource provider operations](../role-based-access-c
 
 To learn more about role-based access control in Azure, see the following articles:
   * [Get started with access management in the Azure portal](../role-based-access-control/overview.md)
-  * [Assign Azure roles to manage access to your Azure subscription resources](../role-based-access-control/role-assignments-portal.yml)
+  * [Assign Azure roles to manage access to your Azure subscription resources](/azure/role-based-access-control/role-assignments-portal)
   * [Custom roles in Azure RBAC](../role-based-access-control/custom-roles.md)
   * [Azure Resource Manager resource provider operations](../role-based-access-control/resource-provider-operations.md#microsoftapimanagement)

articles/api-management/how-to-create-workspace.md

@@ -80,7 +80,7 @@ To manage the workspace gateway, we recommend also assigning workspace users an
 > 
 
 * For a list of built-in workspace roles, see [How to use role-based access control in API Management](api-management-role-based-access-control.md).
-* For steps to assign a role, see [Assign Azure roles using the portal](../role-based-access-control/role-assignments-portal.yml?tabs=current).
+* For steps to assign a role, see [Assign Azure roles using the portal](/azure/role-based-access-control/role-assignments-portal?tabs=current).
 
 
 ### Assign a service-scoped role

articles/api-management/self-hosted-gateway-enable-azure-ad.md

@@ -99,7 +99,7 @@ When configuring the custom roles, update the [`AssignableScopes`](../role-based
 
 ### Assign API Management Configuration API Access Validator Service Role 
 
-Assign the API Management Configuration API Access Validator Service Role to the managed identity of the API Management instance. For detailed steps to assign a role, see [Assign Azure roles using the portal](../role-based-access-control/role-assignments-portal.yml). 
+Assign the API Management Configuration API Access Validator Service Role to the managed identity of the API Management instance. For detailed steps to assign a role, see [Assign Azure roles using the portal](/azure/role-based-access-control/role-assignments-portal). 
 
 - Scope: The  resource group or subscription in which the API Management instance is deployed
 - Role: API Management Configuration API Access Validator Service Role

articles/app-service/includes/tutorial-dotnet-storage-managed-identity/introduction.md

@@ -180,7 +180,7 @@ You need to grant your web app access to the storage account before you can crea
 
 In the [Azure portal](https://portal.azure.com), go into your storage account to grant your web app access. Select **Access control (IAM)** in the left pane, and then select **Role assignments**. You'll see a list of who has access to the storage account. Now you want to add a role assignment to a robot, the app service that needs access to the storage account. Select **Add** > **Add role assignment** to open the **Add role assignment** page.
 
-Assign the **Storage Blob Data Contributor** role to the **App Service** at subscription scope.  For detailed steps, see [Assign Azure roles using the Azure portal](../../../role-based-access-control/role-assignments-portal.yml).
+Assign the **Storage Blob Data Contributor** role to the **App Service** at subscription scope.  For detailed steps, see [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal).
 
 Your web app now has access to your storage account.
 

articles/automanage/repair-automanage-account.md

@@ -78,7 +78,7 @@ If you're using an ARM template or the Azure CLI, you'll need the Principal ID (
 
 1. Select **Add** > **Add role assignment** to open the **Add role assignment** page.
 
-1. Assign the following role. For detailed steps, see [Assign Azure roles using the Azure portal](../role-based-access-control/role-assignments-portal.yml).
+1. Assign the following role. For detailed steps, see [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal).
 
     | Setting          | Value                              |
     | ---------------- | ---------------------------------- |

articles/automation/add-user-assigned-identity.md

@@ -297,7 +297,7 @@ Before you can use your user-assigned managed identity for authentication, set u
 
 Follow the principal of least privilege and carefully assign permissions only required to execute your runbook. For example, if the Automation account is only required to start or stop an Azure VM, then the permissions assigned to the Run As account or managed identity needs to be only for starting or stopping the VM. Similarly, if a runbook is reading from blob storage, then assign read only permissions.
 
-This example uses Azure PowerShell to show how to assign the Contributor role in the subscription to the target Azure resource. The Contributor role is used as an example and may or may not be required in your case. Alternatively, you can also assign the role to the target Azure resource in the [Azure portal](../role-based-access-control/role-assignments-portal.yml).
+This example uses Azure PowerShell to show how to assign the Contributor role in the subscription to the target Azure resource. The Contributor role is used as an example and may or may not be required in your case. Alternatively, you can also assign the role to the target Azure resource in the [Azure portal](/azure/role-based-access-control/role-assignments-portal).
 
 ```powershell
 New-AzRoleAssignment `