Merge branch 'main' into chucked2-working

Author: chuckedmonson

microsoft-365/admin/manage/enable-dev-analytics.md

@@ -37,6 +37,8 @@ To enable the setting, in the Microsoft 365 Admin Center, sign in with the **Tea
 
 :::image type="content" source="../../media/enable-dev-analytics/enable-dev-analytics-flyout.png" alt-text="Image of the flyout pane where you can enable the setting":::
 
+[!INCLUDE [global-administrator-note](../../includes/global-administrator-note.md)]
+
 ## How will this setting affect admins and their organization?
 
 By default, the **App usage for custom apps** setting is disabled. When you enable this setting, enterprise developers are provided with better insights into the performance and user engagement of custom apps, helping them make informed decisions about app improvements. If this setting is disabled, developers may be prevented from understanding app usage and other insights, causing disruptive change to their workflow.

microsoft-365/commerce/licenses/online-service-activation-open-programs.md

@@ -37,6 +37,8 @@ Microsoft Open Value and Open Value Subscription offer the ability to add online
 - You must have a volume licensing (VL) role to access the VL pages in the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank">Microsoft 365 admin center</a>.
 - You must have the Global Administrator role on the organization's online services tenant to activate online service activation (OSA) keys.
 
+[!INCLUDE [global-administrator-note](../../includes/global-administrator-note.md)]
+
 ## Activate services from the online service activation email
 
 After you order your online services through an Open program, the *Primary Contact* listed on the licensing contract receives an email titled "Sign in and activate your online services" that contains a link and instructions to activate your services. The primary contact can choose to complete the service activation themselves or can forward the email to an individual who has global administrator permissions.

microsoft-365/commerce/manage-billing-accounts.md

@@ -106,6 +106,8 @@ If you have an MCA billing account type, the top of the billing account details
 
 If you're a Global Administrator, you can assign yourself a Billing account role in the Microsoft 365 admin center through the billing account roles and permissions. Elevating your access to manage billing accounts gives you the ability to view and manage cost and billing for your accounts. You can view invoices, charges, products that are purchased, and the users who have access to the billing accounts.
 
+[!INCLUDE [global-administrator-note](../includes/global-administrator-note.md)]
+
 You can provide others with access to the billing account in the Microsoft 365 admin center through the billing account roles and permissions. For instructions about how to grant billing account access to other users, see [Assign billing account roles](#assign-billing-account-roles).
 
 Only a billing account owner can grant access to a billing account. You can assign the following roles to users:

microsoft-365/commerce/subscriptions/self-service-purchase-faq.yml

@@ -121,7 +121,10 @@ sections:
           Global and billing admins can see subscriptions bought through self-service purchase in **Billing** > **Your products** in the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank">Microsoft 365 admin center</a>. They can filter the products list to only show the subscriptions purchased through central procurement, or to include subscriptions bought through self-service purchase.
           
           Admins can see the product, purchaser name, subscription purchased, expiry date, order history, the purchase price, and assigned users.
-          
+
+          > [!IMPORTANT]
+          > Microsoft recommends that you use roles with the fewest permissions. Using lower permissioned accounts helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role. To learn more, see [About administrator roles in the Microsoft 365 admin center](../../admin/add-users/about-admin-roles.md).
+
   - name: Support and training
     questions:
       - question: |