edits

windows/deployment/update/deployment-service-drivers.md

@@ -23,6 +23,13 @@ In this tutorial, you will:
 > * Do Z
 > * Do Z
 
+## Prerequisites
+
+### Permissions
+
+<!--Using include for tutorial permissions-->
+[!INCLUDE [Windows Update for Business deployment service tutorial permissions](./includes/wufb-deployment-tutorial-permissions.md.md)]
+
 ## Open Graph Explorer
 
 <!--Using include for Graph Explorer sign in-->

windows/deployment/update/deployment-service-expedited-updates.md

@@ -26,6 +26,11 @@ In this tutorial, you will:
 
 ? This requires an extra license at the moment correct? Of does the client have to be listed as intune managed at the moment?
 
+### Permissions
+
+<!--Using include for tutorial permissions-->
+[!INCLUDE [Windows Update for Business deployment service tutorial permissions](./includes/wufb-deployment-tutorial-permissions.md.md)]
+
 ## Open Graph Explorer
 
 <!--Using include for Graph Explorer sign in-->

windows/deployment/update/deployment-service-feature-updates.md

@@ -21,6 +21,13 @@ In this tutorial, you will:
 > * [Run queries to identify test devices](#run-queries-to-identify-test-devices)
 > * Do Z
 
+## Prerequisites
+
+### Permissions
+
+<!--Using include for tutorial permissions-->
+[!INCLUDE [Windows Update for Business deployment service tutorial permissions](./includes/wufb-deployment-tutorial-permissions.md.md)]
+
 ## Open Graph Explorer
 
 <!--Using include for Graph Explorer sign in-->

windows/deployment/update/includes/wufb-deployment-find-device-name-graph-explorer.md

@@ -10,7 +10,7 @@ ms.localizationpriority: medium
 ---
 <!--This file is shared by deployment-service-drivers.md, deployment-service-expedited-updates.md, and the deployment-service-feature-updates.md articles. Headings may be driven by article context. 7512398 -->
 
-You will need at least [Device.Read.All](/graph/permissions-reference#device-permissions) permission to display [device](/graph/api/resources/device) information.
+
 
 Displays the **AzureAD Device ID** and **Name** of all devices:
 
@@ -50,4 +50,4 @@ GET https://graph.microsoft.com/v1.0/devices?$filter=model ne 'virtual machine'
 > Requests using the [device](/graph/api/resources/device) resource type typically have both an `id` and a `deviceid`:
 > - The `deviceid` is the **Azure AD Device ID** and will be used in this tutorial.
 >    - Later in this tutorial, this `deviceid` will be used as an `id` when you make certain requests such as adding a device to a deployment audience.
-> - The `id` from the [device](/graph/api/resources/device) resource type is usually the Azure AD Object ID and it won't be used in this tutorial.
+> - The `id` from the [device](/graph/api/resources/device) resource type is usually the Azure AD Object ID, which won't be used in this tutorial.

windows/deployment/update/includes/wufb-deployment-graph-explorer.md

@@ -24,8 +24,9 @@ For this tutorial, you'll use Graph Explorer to make requests to the [Microsoft
 
 1. To make requests:
    1. Select either GET, POST, PUT, PATCH, or DELETE from the drop-down list for the HTTP method.
-   1. Enter the request into the URL field. The version will populate automatically based on the URL
+   1. Enter the request into the URL field. The version will populate automatically based on the URL.
    1. If you need to modify the request body, edit the **Request body** tab.
    1. Select the **Run query** button. The results will appear in the **Response** window.
   
-   > [!TIP] When reviewing [Microsoft Graph documentation](/graph/), you may notice example requests usually list `Content-type: application/json`. Specifying `content-type` typically isn't required for Graph Explorer, but you can add it to the request by selecting the **Headers** tab and adding the `content-type` to the **Request headers** field as the **Key** and `application/json` as the **Value**.
+   > [!TIP]
+   > When reviewing [Microsoft Graph documentation](/graph/), you may notice example requests usually list `Content-type: application/json`. Specifying `content-type` typically isn't required for Graph Explorer, but you can add it to the request by selecting the **Headers** tab and adding the `content-type` to the **Request headers** field as the **Key** and `application/json` as the **Value**.

windows/deployment/update/includes/wufb-deployment-tutorial-permissions.md

@@ -0,0 +1,16 @@
+---
+author: mestew
+ms.author: mstewart
+manager: aaroncz
+ms.technology: itpro-updates
+ms.prod: windows-client
+ms.topic: include
+ms.date: 02/14/2023
+ms.localizationpriority: medium
+---
+<!--This file is shared by deployment-service-drivers.md, deployment-service-expedited-updates.md, and the deployment-service-feature-updates.md articles. Headings may be driven by article context. 7512398 -->
+
+The following permissions are needed for the tutorial: 
+
+- [WindowsUpdates.ReadWrite.All](/graph/permissions-reference#windows-updates-permissions) for [Windows Update for Business deployment service](/graph/api/resources/windowsupdates) operations.
+- At least [Device.Read.All](/graph/permissions-reference#device-permissions) permission to display [device](/graph/api/resources/device) information.