Apply SharePoint Embedded docs review fixes (review 20260721-145410)

docs/embedded/admin/admin-overview.md

@@ -1,7 +1,7 @@
 ---
 title: Admin overview
 description: Learn how administrators manage SharePoint Embedded apps, containers, billing, and compliance in Microsoft 365.
-ms.date: 07/13/2026
+ms.date: 07/21/2026
 ms.reviewer: shsaravanan
 ms.author: mawin
 ms.localizationpriority: high
@@ -42,9 +42,9 @@ SharePoint Embedded administration commonly involves the following roles.
 | --- | --- |
 | Global Administrator | Assign the SharePoint Embedded Administrator role and perform any SharePoint Embedded admin task when needed. |
 | SharePoint Embedded Administrator | Manage SharePoint Embedded apps and containers through SharePoint admin center and supported SharePoint PowerShell cmdlets. |
-| Tenant administrator | Manage apps and settings in the consuming Microsoft 365 tenant. |
-| Compliance administrator | Configure Microsoft Purview audit, retention, DLP, eDiscovery, and related policies. |
-| Security administrator | Configure security policies and investigate security events that apply to SharePoint Embedded content. |
+| Tenant Administrator | Manage apps and settings in the consuming Microsoft 365 tenant. |
+| Compliance Administrator | Configure Microsoft Purview audit, retention, Data Loss Prevention (DLP), eDiscovery, and related policies. |
+| Security Administrator | Configure security policies and investigate security events that apply to SharePoint Embedded content. |
 
 The SharePoint Embedded Administrator role is available in Microsoft Entra and the Microsoft 365 admin center.
 
@@ -54,7 +54,7 @@ It doesn't grant regular SharePoint site management access.
 
 For example, a SharePoint Embedded Administrator doesn't see the **Active sites** or **Deleted sites** pages in the SharePoint admin center and can't run site-specific SharePoint PowerShell cmdlets.
 
-Likewise, the SharePoint administrator role doesn't administer SharePoint Embedded apps or containers.
+Likewise, the SharePoint Administrator role doesn't administer SharePoint Embedded apps or containers.
 
 ### Assign the SharePoint Embedded Administrator role
 
@@ -153,7 +153,7 @@ Some scenarios that need end-user interaction depend on the owning app to provid
 
 Review [Review audit events](review-audit-events.md) and [Apply security and compliance controls](apply-security-compliance-controls.md).
 
-## SharePoint admin center versus PowerShell
+## SharePoint admin center and PowerShell
 
 Use both management surfaces.
 

docs/embedded/admin/apply-security-compliance-controls.md

@@ -1,7 +1,7 @@
 ---
 title: Apply security and compliance controls
 description: Apply Microsoft Purview and SharePoint controls to protect and govern SharePoint Embedded content.
-ms.date: 07/13/2026
+ms.date: 07/21/2026
 ms.reviewer: dilucesr
 ms.author: mawin
 ms.localizationpriority: high
@@ -63,7 +63,7 @@ Use PowerShell to retrieve application and container details.
 1. Retrieve details for a container.
 
    ```powershell
-   Get-SPOContainer -OwningApplicationId <ApplicationID> -Identity <ContainerID>
+   Get-SPOContainer -Identity <ContainerID>
    ```
 
 Use the container site URL to target policies at specific SharePoint Embedded containers.
@@ -72,7 +72,7 @@ For cmdlet details, see [Get-SPOContainer](/powershell/module/sharepoint-online/
 
 ## Apply audit controls
 
-Audit capabilities for SharePoint Embedded mirror existing SharePoint audit capabilities. User and admin operations performed in SharePoint Embedded applications are captured in the unified audit log.
+Audit capabilities for SharePoint Embedded mirror existing SharePoint audit capabilities. The unified audit log captures user and admin operations performed in SharePoint Embedded applications.
 
 Use Microsoft Purview audit to search activity and investigate file, user, app, and admin operations.
 
@@ -165,7 +165,7 @@ Global Administrators and SharePoint Embedded Administrators can set or remove s
 Set a label:
 
 ```powershell
-Set-SPOContainer -Identity <ContainerID/ContainerSiteURL> -SensitivityLabel <SensitivityLabelGUID>
+Set-SPOContainer -Identity <ContainerID-or-ContainerSiteURL> -SensitivityLabel <SensitivityLabelGUID>
 ```
 
 Remove a label by using the supported container label command documented in [Manage containers with PowerShell](manage-containers-powershell.md).

docs/embedded/admin/consuming-tenant-admin.md

@@ -1,7 +1,7 @@
 ---
 title: Consuming tenant admin
 description: Understand the consuming tenant admin role and responsibilities for SharePoint Embedded.
-ms.date: 07/13/2026
+ms.date: 07/21/2026
 ms.reviewer: shsaravanan
 ms.localizationpriority: high
 ai-usage: ai-assisted
@@ -23,9 +23,11 @@ next: install-sharepoint-embedded-app.md
 >
 > Global Administrators can continue to execute SharePoint Embedded container cmdlets.
 >
-> A global administrator can assign a user the SharePoint Embedded administrator role to act as a consuming tenant admin for SharePoint Embedded.
+> A Global Administrator can assign a user the SharePoint Embedded Administrator role to act as a consuming tenant admin for SharePoint Embedded.
 
-Organizations that use SharePoint Embedded applications in their Microsoft 365 tenants are consuming tenants. The consuming tenant administrator manages these applications and the containers that hold content. Consuming tenant administrators can manage applications registered in their tenant, tenant-level configurations, and security and compliance settings. This article describes enterprise manageability features that consuming tenant administrators can use through PowerShell cmdlets or the SharePoint admin center.
+Organizations that use SharePoint Embedded applications in their Microsoft 365 tenants are consuming tenants. The consuming tenant administrator manages these applications and the containers that hold content.
+
+Consuming tenant administrators can manage applications registered in their tenant, tenant-level configurations, and security and compliance settings. They use PowerShell cmdlets or the SharePoint admin center for enterprise management tasks.
 
 ## Consuming tenant admin role
 
@@ -48,33 +50,33 @@ The [fileStorageContainerTypeRegistration](/graph/api/resources/filestorageconta
 
 ### SharePoint Online Management Shell
 
-On PowerShell, the SharePoint Embedded Admin can run the following cmdlets:
+In PowerShell, the SharePoint Embedded Administrator can run the following cmdlets:
 
-1. Enumerate applications in a tenant
-1. Enumerate containers of an application in a tenant
-1. Enumerate containers of an application sorted by storage usage
-1. Enumerate archived containers of an application
-1. Edit the sensitivity label on a container
-1. Set the sharing capability configuration on a container
+- Enumerate applications in a tenant
+- Enumerate containers of an application in a tenant
+- Enumerate containers of an application sorted by storage usage
+- Enumerate archived containers of an application
+- Edit the sensitivity label on a container
+- Set the sharing capability configuration on a container
 
 For information on consuming tenant admin in PowerShell, see [Manage containers with PowerShell](manage-containers-powershell.md).
 
 ### SharePoint admin center
 
-The SharePoint Embedded Admin can access the Active and Deleted containers page in the SharePoint admin center and perform SharePoint Embedded application-level and container-level actions. This includes the following:
+The SharePoint Embedded Administrator can access the Active and Deleted containers page in the SharePoint admin center and perform SharePoint Embedded application-level and container-level actions. This includes the following:
 
-1. View the Active container page
-1. View the Archived container page
-1. View the Deleted container page
-1. View the detailed information of a container
-1. Archive and reactivate containers
-1. Soft delete, restore, and purge deleted containers
+- View the Active container page
+- View the Archived container page
+- View the Deleted container page
+- View the detailed information of a container
+- Archive and reactivate containers
+- Soft delete, restore, and purge deleted containers
 
 For information on consuming tenant admin in SharePoint admin center, see [Manage containers in SharePoint admin center](manage-containers-sharepoint-admin-center.md).
 
 ## Security and compliance administration
 
-SharePoint Embedded uses Microsoft's comprehensive compliance and data governance solutions to help organizations manage risk, protect and govern sensitive data, and respond to regulatory requirements. Security and compliance solutions work in SharePoint Embedded in a similar way to Microsoft 365. These solutions help store data securely while making it easier for Compliance Administrators and SharePoint Embedded Administrators to enforce critical security and compliance policies on the content. For information on supported security and compliance capabilities, see [Plan security, compliance, and governance](../plan/security-compliance-governance.md).
+SharePoint Embedded uses Microsoft 365 compliance and data governance solutions to help organizations manage risk, protect and govern sensitive data, and respond to regulatory requirements. Security and compliance solutions work in SharePoint Embedded in a similar way to Microsoft 365. These solutions help Compliance Administrators and SharePoint Embedded Administrators enforce security and compliance policies on content. For information on supported security and compliance capabilities, see [Plan security, compliance, and governance](../plan/security-compliance-governance.md).
 
 ## Set up billing for pass-through container type
 
@@ -84,9 +86,9 @@ To use a pass-through billing SharePoint Embedded app, a Global Administrator ne
 
 For detailed meter information, see [Billing meters](../reference/billing-meters.md).
 
-SharePoint Embedded employs a pay-as-you-go (PAYG) billing model through an Azure subscription. Billing is determined by how much data in GB you store in SharePoint Embedded in active and archived states, transactions used to access and modify the container and container contents, and data that's egressed from the SharePoint Embedded platform. Each of these factors contributes to the overall cost, ensuring that you only pay for the resources and services you use. You can view this usage and billing details in the [Microsoft Cost Management](https://portal.azure.com/).
+SharePoint Embedded uses a pay-as-you-go (PAYG) billing model through an Azure subscription. Billing is determined by how much data in GB you store in SharePoint Embedded in active and archived states, transactions used to access and modify the container and container contents, and data that's egressed from the SharePoint Embedded platform. You can view usage and billing details in [Microsoft Cost Management](https://portal.azure.com/).
 
-SharePoint Embedded has four GA billing meters, as shown. For the private preview agent message meter, see [Billing meters](../reference/billing-meters.md). Refer to the [product page](https://adoption.microsoft.com/sharepoint/embedded/) for pricing details.
+SharePoint Embedded has four generally available billing meters, as shown. For the private preview agent message meter, see [Billing meters](../reference/billing-meters.md). Refer to the [product page](https://adoption.microsoft.com/sharepoint/embedded/) for pricing details.
 
 | SharePoint Embedded Service Meters |   Meter Unit   |
 | ---------------------------------- | -------------- |

docs/embedded/admin/create-apps-powershell.md

@@ -1,7 +1,7 @@
 ---
 title: Create apps with PowerShell
 description: Create and configure SharePoint Embedded apps with SharePoint PowerShell.
-ms.date: 07/13/2026
+ms.date: 07/21/2026
 ms.reviewer: shsaravanan
 ms.author: mawin
 ms.localizationpriority: high
@@ -33,7 +33,7 @@ Make sure you have:
 > [!IMPORTANT]
 > Choose the billing method when you create the container type. You can't change the billing method after creation.
 
-## Create a standard billed app
+## Create an app that uses standard billing
 
 Use standard billing when the organization that owns the app pays for SharePoint Embedded usage.
 
@@ -47,7 +47,7 @@ Set up billing for the standard container type by assigning an Azure subscriptio
 Add-SPOContainerTypeBilling -ContainerTypeId <ContainerTypeId> -AzureSubscriptionId <AzureSubscriptionId> -ResourceGroup <ResourceGroup> -Region <Region>
 ```
 
-## Create a pass-through billed app
+## Create an app that uses pass-through (customer) billing
 
 Use pass-through billing when the consuming tenant pays for SharePoint Embedded usage.
 

docs/embedded/admin/create-apps-sharepoint-admin-center.md

@@ -1,7 +1,7 @@
 ---
 title: Create apps in SharePoint admin center
 description: Create a SharePoint Embedded app from the SharePoint admin center and validate the new app registration.
-ms.date: 07/13/2026
+ms.date: 07/21/2026
 ms.reviewer: shsaravanan
 ms.author: mawin
 ms.localizationpriority: high
@@ -82,7 +82,7 @@ Use it to verify app creation and to start installation when an app is ready.
 
 *Figure 3: The Create app panel registers a Microsoft Entra app, assigns owners, and sets the billing type in a single flow.*
 
-## Choose the Entra app registration option
+## Choose the Microsoft Entra app registration option
 
 In **Entra app registration**, choose one option.
 
@@ -91,7 +91,7 @@ In **Entra app registration**, choose one option.
 | New app | You want the admin center flow to create a new Microsoft Entra application registration. |
 | Use an existing Entra app | You already have a Microsoft Entra app and want to associate it with the SharePoint Embedded app. |
 
-If you choose **New app**, enter the new Entra app name.
+If you choose **New app**, enter the new Microsoft Entra app name.
 
 If you choose **Use an existing Entra app**, search by application ID or application name.
 
@@ -164,15 +164,15 @@ For Graph Explorer documentation, see [Use Graph Explorer to try Microsoft Graph
 
 ## Submit the app
 
-1. Review the Entra app registration selection.
+1. Review the Microsoft Entra app registration selection.
 1. Review the app owners.
 1. Review billing type.
 1. Review advanced settings.
 1. Select **Create app**.
 
 When you select **Create app**, the admin center completes these steps together:
 
-- Registers the Microsoft Entra app, or associates the existing Entra app you selected.
+- Registers the Microsoft Entra app, or associates the existing Microsoft Entra app you selected.
 - Creates the SharePoint Embedded app and its associated container type.
 - Installs the app in your tenant.
 - Attaches billing when you select **Owner org** and **Setup now**.
@@ -221,7 +221,7 @@ Continue with these tasks.
 Use these checks if creation fails or the app isn't usable.
 
 - Confirm your account has the SharePoint Embedded Administrator role.
-- Confirm the selected existing Entra app exists and is available in the tenant.
+- Confirm the selected existing Microsoft Entra app exists and is available in the tenant.
 - Confirm owners resolve in the people picker.
 - Confirm required billing fields are complete.
 - Confirm owner organization billing uses a valid Azure subscription and resource group.

docs/embedded/admin/grant-admin-consent-permissions.md

@@ -1,7 +1,7 @@
 ---
 title: Grant admin consent and permissions
 description: Review SharePoint Embedded permissions, grant admin consent, and verify the consent state in a consuming tenant.
-ms.date: 07/13/2026
+ms.date: 07/21/2026
 ms.reviewer: dilucesr
 ms.author: mawin
 ms.localizationpriority: high
@@ -19,7 +19,9 @@ outcome: Grant admin consent for a SharePoint Embedded app and validate permissi
 next: setup-billing-microsoft-365-admin-center.md
 -->
 
-Grant admin consent when a SharePoint Embedded app needs high-privilege permissions in your Microsoft 365 tenant. Application permissions require admin consent. Delegated flows can avoid tenant-wide admin consent, but they still require the appropriate admin role for registration or per-user consent for container access. To learn more, see [Grant admin consent](/entra/identity/enterprise-apps/grant-admin-consent?pivots=portal).
+Grant admin consent when a SharePoint Embedded app needs high-privilege permissions in your Microsoft 365 tenant.
+
+Application permissions require admin consent. Delegated flows can avoid tenant-wide admin consent, but they still require the appropriate admin role for registration or per-user consent for container access. To learn more, see [Grant admin consent](/entra/identity/enterprise-apps/grant-admin-consent?pivots=portal).
 
 Use this article to review requested permissions, grant consent, and troubleshoot common consent failures.
 
@@ -55,7 +57,7 @@ These are the permissions that the owning application needs to act on the consum
 | Permission | Why the app requests it | Consent note |
 | --- | --- | --- |
 | [`FileStorageContainerTypeReg.Selected`](/graph/permissions-reference#filestoragecontainertyperegselected) | Register the container type in the consuming tenant. | The app can request this as delegated or application permission. If delegated registration is used, no admin consent is required but the user performing the registration must be a SharePoint Embedded Administrator or Global Administrator. |
-| [`FileStorageContainer.Selected`](/graph/permissions-reference#filestoragecontainerselected) | Access containers and content for its container type in the consuming tenant. | The app can request this as delegated or application permission. If delegated access is used, no admin consent is required but each user of the app will need to consent when signing into the app. |
+| [`FileStorageContainer.Selected`](/graph/permissions-reference#filestoragecontainerselected) | Access containers and content for its container type in the consuming tenant. | The app can request this as delegated or application permission. If delegated access is used, no admin consent is required but each user of the app will need to consent when signing in to the app. |
 
 ## Review requested permissions
 

docs/embedded/admin/install-sharepoint-embedded-app.md

@@ -1,7 +1,7 @@
 ---
 title: Install a SharePoint Embedded app
 description: Install or register a SharePoint Embedded app in a consuming tenant and validate the tenant setup.
-ms.date: 07/13/2026
+ms.date: 07/21/2026
 ms.reviewer: shsaravanan
 ms.author: mawin
 ms.localizationpriority: high
@@ -23,7 +23,7 @@ Install a SharePoint Embedded app when a consuming Microsoft 365 tenant needs to
 
 Installation makes the app visible for tenant administration, but the tenant may still need admin consent, container type permission registration, and billing setup before users can access content.
 
-This article focuses on the consuming-tenant administrator path in the SharePoint admin center.
+This article focuses on the consuming tenant administrator path in the SharePoint admin center.
 
 > [!IMPORTANT]
 > A consuming tenant admin is typically a user assigned the **SharePoint Embedded Administrator** role.
@@ -39,9 +39,9 @@ Confirm these prerequisites.
 
 - You can sign in to the consuming tenant.
 - Your account has the SharePoint Embedded Administrator role or Global Administrator role.
-- The SharePoint Embedded app exists in the owning tenant.
+- The SharePoint Embedded app exists in the developer tenant.
 - You have the app identity or installation link provided by the app owner.
-- You know whether billing is handled by the app owner or by the user organization.
+- You know whether the app owner or consuming tenant pays for usage.
 - You know which permissions the app requests.
 - You can complete admin consent if the installation flow requires it.
 - You know whether the app is a single-tenant line-of-business app or a multitenant independent software vendor (ISV) app.
@@ -54,7 +54,7 @@ A consuming tenant is the Microsoft 365 tenant where users run the SharePoint Em
 
 The consuming tenant admin manages the app and containers in that tenant.
 
-For a single-tenant line-of-business app, the owning tenant and consuming tenant are usually the same.
+For a single-tenant line-of-business app, the developer tenant and consuming tenant are usually the same.
 
 For a multitenant ISV app, each customer tenant is a consuming tenant and customer files remain in the customer Microsoft 365 tenant boundary.