Add SQL Server 2022+ granular permissions to 21 catalog view articles (#36563)

* docs: Add SQL Server 2022+ granular permissions to 21 catalog views

Add VIEW SERVER PERFORMANCE STATE and VIEW SERVER SECURITY STATE permissions
to system catalog view documentation based on source code investigation.

Permission changes verified against SQL Server source code (secrules.h,
mdview.cpp FHasAccess function).

* docs: Apply editorial review to catalog view documentation

- Update ms.date to 02/05/2026 for modernized files
- Improve description metadata (not just repeating title)
- Modernize table formatting with backticks for column names
- Use contractions and active voice per Style Guide
- Convert Related content sections to bullet list format
- Remove HTML entities and fix spacing issues
- Fix typo 'Name pipes' to 'Named pipes' in sys.endpoints

* docs: Apply comprehensive contraction fixes per Style Guide

- Fix 'does not' → 'doesn't' throughout
- Fix 'is not' → 'isn't' in table descriptions
- Fix 'are not' → 'aren't' in method descriptions
- Fix 'was not' → 'wasn't' and 'will not' → 'won't'
- Fix 'have not' → 'haven't' in query context

* docs: Fix 'may' → 'might' per Style Guide

- sys-configurations-transact-sql.md (3 occurrences)
- sys-master-key-passwords-transact-sql.md (1 occurrence)

Author: VanMSFT

docs/relational-databases/system-catalog-views/sys-availability-databases-cluster-transact-sql.md

@@ -1,9 +1,9 @@
 ---
 title: "sys.availability_databases_cluster (Transact-SQL)"
-description: sys.availability_databases_cluster (Transact-SQL)
+description: sys.availability_databases_cluster returns a row for each availability database in the WSFC cluster.
 author: rwestMSFT
 ms.author: randolphwest
-ms.date: "06/10/2016"
+ms.date: 02/05/2026
 ms.service: sql
 ms.subservice: system-objects
 ms.topic: "reference"
@@ -21,27 +21,32 @@ dev_langs:
   - "TSQL"
 ---
 # sys.availability_databases_cluster (Transact-SQL)
+
 [!INCLUDE [SQL Server](../../includes/applies-to-version/sqlserver.md)]
 
-  Contains one row for each availability database on the instance of [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] that is hosting an availability replica for any Always On availability group in the Windows Server Failover Clustering (WSFC) cluster, regardless of whether the local copy database has been joined to the availability group yet.  
-  
-> [!NOTE]  
->  When a database is added to an availability group, the primary database is automatically joined to the group. Secondary databases must be prepared on each secondary replica before they can be joined to the availability group.   
-  
-|Column name|Data type|Description|  
-|-----------------|---------------|-----------------|  
-|**group_id**|**uniqueidentifier**|Unique identifier of the availability group in which the availability group, if any, in which the database is participating.<br /><br /> NULL = database is not part of an availability replica of in availability group.|  
-|**group_database_id**|**uniqueidentifier**|Unique identifier of the database within the availability group, if any, in which the database is participating. **group_database_id** is the same for this database on the primary replica and on every secondary replica on which the database has been joined to the availability group.<br /><br /> NULL = database is not part of an availability replica in any availability group.|  
-|**database_name**|**sysname**|Name of the database that was added to the availability group.|  
-  
-## Permissions  
- If the caller of **sys.availability_databases_cluster** is not the owner of the database, the minimum permissions required to see the corresponding row are ALTER ANY DATABASE or VIEW ANY DATABASE server-level permission, or CREATE DATABASE permission in the **master** database.  
-  
-## See Also  
- [sys.availability_groups &#40;Transact-SQL&#41;](../../relational-databases/system-catalog-views/sys-availability-groups-transact-sql.md)   
- [sys.databases &#40;Transact-SQL&#41;](../../relational-databases/system-catalog-views/sys-databases-transact-sql.md)   
- [sys.dm_hadr_database_replica_states &#40;Transact-SQL&#41;](../../relational-databases/system-dynamic-management-views/sys-dm-hadr-database-replica-states-transact-sql.md)   
- [sys.dm_hadr_database_replica_cluster_states &#40;Transact-SQL&#41;](../../relational-databases/system-dynamic-management-views/sys-dm-hadr-database-replica-cluster-states-transact-sql.md)   
- [Overview of Always On Availability Groups &#40;SQL Server&#41;](../../database-engine/availability-groups/windows/overview-of-always-on-availability-groups-sql-server.md)  
-  
+Returns one row for each availability database on the instance of [!INCLUDE [ssNoVersion](../../includes/ssnoversion-md.md)] that hosts an availability replica for any Always On availability group in the Windows Server Failover Clustering (WSFC) cluster, regardless of whether the local copy database has been joined to the availability group yet.
+
+> [!NOTE]
+> When a database is added to an availability group, the primary database is automatically joined to the group. Secondary databases must be prepared on each secondary replica before they can be joined to the availability group.
+
+| Column name | Data type | Description |
+| --- | --- | --- |
+| `group_id` | **uniqueidentifier** | Unique identifier of the availability group in which the database is participating.<br /><br />NULL = database isn't part of an availability replica in an availability group. |
+| `group_database_id` | **uniqueidentifier** | Unique identifier of the database within the availability group, if any, in which the database is participating. `group_database_id` is the same for this database on the primary replica and on every secondary replica on which the database has been joined to the availability group.<br /><br />NULL = database isn't part of an availability replica in any availability group. |
+| `database_name` | **sysname** | Name of the database that was added to the availability group. |  
 
+## Permissions
+
+If the caller of **sys.availability_databases_cluster** isn't the owner of the database, the minimum permissions required to see the corresponding row are ALTER ANY DATABASE or VIEW ANY DATABASE server-level permission, or CREATE DATABASE permission in the **master** database.
+
+### Permissions for SQL Server 2022 and later
+
+Requires VIEW SERVER PERFORMANCE STATE permission on the server.
+
+## Related content
+
+- [sys.availability_groups (Transact-SQL)](sys-availability-groups-transact-sql.md)
+- [sys.databases (Transact-SQL)](sys-databases-transact-sql.md)
+- [sys.dm_hadr_database_replica_states (Transact-SQL)](../system-dynamic-management-views/sys-dm-hadr-database-replica-states-transact-sql.md)
+- [sys.dm_hadr_database_replica_cluster_states (Transact-SQL)](../system-dynamic-management-views/sys-dm-hadr-database-replica-cluster-states-transact-sql.md)
+- [What is an Always On availability group?](../../database-engine/availability-groups/windows/overview-of-always-on-availability-groups-sql-server.md)

docs/relational-databases/system-catalog-views/sys-availability-group-listener-ip-addresses-transact-sql.md

@@ -1,9 +1,9 @@
 ---
 title: "sys.availability_group_listener_ip_addresses (Transact-SQL)"
-description: sys.availability_group_listener_ip_addresses (Transact-SQL)
+description: sys.availability_group_listener_ip_addresses returns a row for every IP address associated with any availability group listener.
 author: rwestMSFT
 ms.author: randolphwest
-ms.date: "06/10/2016"
+ms.date: 02/05/2026
 ms.service: sql
 ms.subservice: system-objects
 ms.topic: "reference"
@@ -20,32 +20,36 @@ dev_langs:
   - "TSQL"
 ---
 # sys.availability_group_listener_ip_addresses (Transact-SQL)
+
 [!INCLUDE [SQL Server](../../includes/applies-to-version/sqlserver.md)]
 
-  Returns a row for every IP address that is associated with any Always On availability group listener in the Windows Server Failover Clustering (WSFC) cluster.  
-  
- Primary key:  **listener_id** + **ip_address** + **ip_sub_mask**  
-  
-  
-|Column name|Data type|Description|  
-|-----------------|---------------|-----------------|  
-|**listener_id**|**nvarchar(36)**|Resource GUID from Windows Server Failover Clustering (WSFC) cluster.|  
-|**ip_address**|**nvarchar(48)**|Configured virtual IP address of the availability group listener. Returns a single IPv4 or IPv6 address.|  
-|**ip_subnet_mask**|**nvarchar(15)**|Configured IP subnet mask for the IPv4 address, if any, that is configured for the availability group listener.<br /><br /> NULL = IPv6 subnet|  
-|**is_dhcp**|**bit**|Whether the IP address is configured by DHCP, one of:<br /><br /> 0 = IP address is not configured by DHCP.<br /><br /> 1 = IP address is configured by DHCP|  
-|**network_subnet_ip**|**nvarchar(48)**|Network subnet IP address that specifies the subnet to which the IP address belongs.|  
-|**network_subnet_prefix_length**|**int**|Network subnet prefix length of the subnet to which the IP address belongs.|  
-|**network_subnet_ipv4_mask**|**nvarchar(45)**|Network subnet mask of the subnet to which the IP address belongs. **network_subnet_ipv4_mask** to specify the DHCP <network_subnet_option> options in a WITH DHCP clause of the [CREATE AVAILABILITY GROUP](../../t-sql/statements/create-availability-group-transact-sql.md) or [ALTER AVAILABILITY GROUP](../../t-sql/statements/alter-availability-group-transact-sql.md)[!INCLUDE[tsql](../../includes/tsql-md.md)] statement.<br /><br /> NULL = IPv6 subnet|  
-|**state**|**tinyint**|IP resource ONLINE/OFFLINE state from the WSFC cluster, one of:<br /><br /> 1 = Online. IP resource is online.<br /><br /> 0 = Offline. IP resource is offline.<br /><br /> 2 = Online Pending. IP resource is offline but is being brought online.<br /><br /> 3 = Failed. IP resource was being brought online but failed.|  
-|**state_desc**|**nvarchar(60)**|Description of **state**, one of:<br /><br /> ONLINE<br /><br /> OFFLINE<br /><br /> ONLINE_PENDING<br /><br /> FAILED|  
+Returns a row for every IP address that is associated with any Always On availability group listener in the Windows Server Failover Clustering (WSFC) cluster.
+
+Primary key: `listener_id` + `ip_address` + `ip_sub_mask`
+
+| Column name | Data type | Description |
+| --- | --- | --- |
+| `listener_id` | **nvarchar(36)** | Resource GUID from Windows Server Failover Clustering (WSFC) cluster. |
+| `ip_address` | **nvarchar(48)** | Configured virtual IP address of the availability group listener. Returns a single IPv4 or IPv6 address. |
+| `ip_subnet_mask` | **nvarchar(15)** | Configured IP subnet mask for the IPv4 address, if any, that is configured for the availability group listener.<br /><br />NULL = IPv6 subnet |
+| `is_dhcp` | **bit** | Whether the IP address is configured by DHCP, one of:<br /><br />0 = IP address isn't configured by DHCP.<br /><br />1 = IP address is configured by DHCP |
+| `network_subnet_ip` | **nvarchar(48)** | Network subnet IP address that specifies the subnet to which the IP address belongs. |
+| `network_subnet_prefix_length` | **int** | Network subnet prefix length of the subnet to which the IP address belongs. |
+| `network_subnet_ipv4_mask` | **nvarchar(45)** | Network subnet mask of the subnet to which the IP address belongs. Use `network_subnet_ipv4_mask` to specify the DHCP `<network_subnet_option>` options in a WITH DHCP clause of the [CREATE AVAILABILITY GROUP](../../t-sql/statements/create-availability-group-transact-sql.md) or [ALTER AVAILABILITY GROUP](../../t-sql/statements/alter-availability-group-transact-sql.md) [!INCLUDE [tsql](../../includes/tsql-md.md)] statement.<br /><br />NULL = IPv6 subnet |
+| `state` | **tinyint** | IP resource ONLINE/OFFLINE state from the WSFC cluster, one of:<br /><br />1 = Online. IP resource is online.<br /><br />0 = Offline. IP resource is offline.<br /><br />2 = Online Pending. IP resource is offline but is being brought online.<br /><br />3 = Failed. IP resource was being brought online but failed. |
+| `state_desc` | **nvarchar(60)** | Description of `state`, one of:<br /><br />ONLINE<br /><br />OFFLINE<br /><br />ONLINE_PENDING<br /><br />FAILED |  
 
 ## Security  
 
-### Permissions  
- [!INCLUDE[ssCatViewPerm](../../includes/sscatviewperm-md.md)] For more information, see [Metadata Visibility Configuration](../../relational-databases/security/metadata-visibility-configuration.md).  
-  
-## See Also  
- [Querying the SQL Server System Catalog FAQ](../../relational-databases/system-catalog-views/querying-the-sql-server-system-catalog-faq.yml)   
- [Catalog Views &#40;Transact-SQL&#41;](../../relational-databases/system-catalog-views/catalog-views-transact-sql.md)  
-  
-  
+### Permissions
+
+[!INCLUDE [ssCatViewPerm](../../includes/sscatviewperm-md.md)] For more information, see [Metadata Visibility Configuration](../../relational-databases/security/metadata-visibility-configuration.md).
+
+#### Permissions for SQL Server 2022 and later
+
+Requires VIEW SERVER PERFORMANCE STATE permission on the server.
+
+## Related content
+
+- [Querying the SQL Server System Catalog FAQ](querying-the-sql-server-system-catalog-faq.yml)
+- [Catalog Views (Transact-SQL)](catalog-views-transact-sql.md)

docs/relational-databases/system-catalog-views/sys-availability-group-listeners-transact-sql.md

@@ -1,9 +1,9 @@
 ---
 title: "sys.availability_group_listeners (Transact-SQL)"
-description: sys.availability_group_listeners (Transact-SQL)
+description: sys.availability_group_listeners returns a row for each availability group listener configuration in the WSFC cluster.
 author: rwestMSFT
 ms.author: randolphwest
-ms.date: 09/27/2023
+ms.date: 02/05/2026
 ms.service: sql
 ms.subservice: system-objects
 ms.topic: "reference"
@@ -26,7 +26,7 @@ dev_langs:
 For each Always On availability group, returns either zero rows indicating that no network name is associated with the availability group, or returns a row for each availability-group listener configuration in the Windows Server Failover Clustering (WSFC) cluster. This view displays the real-time configuration gathered from cluster.
 
 > [!NOTE]  
-> This catalog view does not describe details of an IP configuration, that was defined in the WSFC cluster.
+> This catalog view doesn't describe details of an IP configuration that was defined in the WSFC cluster.
 
 | Column name | Data type | Description |
 | --- | --- | --- |
@@ -44,7 +44,11 @@ For each Always On availability group, returns either zero rows indicating that
 
 [!INCLUDE [ssCatViewPerm](../../includes/sscatviewperm-md.md)] For more information, see [Metadata Visibility Configuration](../../relational-databases/security/metadata-visibility-configuration.md).
 
-## See also
+#### Permissions for SQL Server 2022 and later
+
+Requires VIEW SERVER PERFORMANCE STATE permission on the server.
+
+## Related content
 
 - [Always On Availability Groups Dynamic Management Views and Functions (Transact-SQL)](../../relational-databases/system-dynamic-management-views/always-on-availability-groups-dynamic-management-views-functions.md)
 - [Always On Availability Groups Catalog Views (Transact-SQL)](../../relational-databases/system-catalog-views/always-on-availability-groups-catalog-views-transact-sql.md)

docs/relational-databases/system-catalog-views/sys-availability-groups-cluster-transact-sql.md

@@ -44,6 +44,10 @@ Returns a row for each Always On availability group in Windows Server Failover C
 
 Requires VIEW ANY DEFINITION permission on the server instance.
 
+### Permissions for SQL Server 2022 and later
+
+Requires VIEW SERVER PERFORMANCE STATE permission on the server.
+
 ## Related content
 
 - [sys.availability_replicas (Transact-SQL)](sys-availability-replicas-transact-sql.md)

docs/relational-databases/system-catalog-views/sys-availability-groups-transact-sql.md

@@ -61,6 +61,10 @@ The following table describes the possible failure condition levels for the `fai
 
 Requires `VIEW ANY DEFINITION` permission on the server instance.
 
+### Permissions for SQL Server 2022 and later
+
+Requires `VIEW SERVER PERFORMANCE STATE` permission on the server.
+
 ## Related content
 
 - [sys.availability_replicas (Transact-SQL)](sys-availability-replicas-transact-sql.md)

docs/relational-databases/system-catalog-views/sys-availability-read-only-routing-lists-transact-sql.md

@@ -1,9 +1,9 @@
 ---
 title: "sys.availability_read_only_routing_lists (Transact-SQL)"
-description: sys.availability_read_only_routing_lists (Transact-SQL)
+description: sys.availability_read_only_routing_lists returns a row for the read-only routing list of each availability replica.
 author: rwestMSFT
 ms.author: randolphwest
-ms.date: "06/10/2016"
+ms.date: 02/05/2026
 ms.service: sql
 ms.subservice: system-objects
 ms.topic: "reference"
@@ -23,23 +23,28 @@ dev_langs:
   - "TSQL"
 ---
 # sys.availability_read_only_routing_lists (Transact-SQL)
+
 [!INCLUDE [SQL Server](../../includes/applies-to-version/sqlserver.md)]
 
-  Returns a row for the read only routing list of each availability replica in an Always On availability group in the WSFC failover cluster.  
-  
-|Column name|Data type|Description|  
-|-----------------|---------------|-----------------|  
-|**replica_id**|**uniqueidentifier**|Unique ID of the availability replica that owns the routing list.|  
-|**routing_priority**|**int**|Priority order for routing (1 is first, 2 is second, and so forth).|  
-|**read_only_replica_id**|**uniqueidentifier**|Unique ID of the availability replica to which a read-only workload will be routed.|  
-  
-## Permissions  
- [!INCLUDE[ssCatViewPerm](../../includes/sscatviewperm-md.md)] For more information, see [Metadata Visibility Configuration](../../relational-databases/security/metadata-visibility-configuration.md).  
-  
-## See Also  
- [Always On Availability Groups Dynamic Management Views and Functions (Transact-SQL)](../../relational-databases/system-dynamic-management-views/always-on-availability-groups-dynamic-management-views-functions.md)   
- [Always On Availability Groups Catalog Views (Transact-SQL)](../../relational-databases/system-catalog-views/always-on-availability-groups-catalog-views-transact-sql.md)   
- [Monitor Availability Groups (Transact-SQL)](../../database-engine/availability-groups/windows/monitor-availability-groups-transact-sql.md)   
- [Always On Availability Groups (SQL Server)](../../database-engine/availability-groups/windows/overview-of-always-on-availability-groups-sql-server.md)  
-  
+Returns a row for the read-only routing list of each availability replica in an Always On availability group in the WSFC failover cluster.
+
+| Column name | Data type | Description |
+| --- | --- | --- |
+| `replica_id` | **uniqueidentifier** | Unique ID of the availability replica that owns the routing list. |
+| `routing_priority` | **int** | Priority order for routing (1 is first, 2 is second, and so forth). |
+| `read_only_replica_id` | **uniqueidentifier** | Unique ID of the availability replica to which a read-only workload is routed. |  
 
+## Permissions
+
+[!INCLUDE [ssCatViewPerm](../../includes/sscatviewperm-md.md)] For more information, see [Metadata Visibility Configuration](../../relational-databases/security/metadata-visibility-configuration.md).
+
+### Permissions for SQL Server 2022 and later
+
+Requires VIEW SERVER PERFORMANCE STATE permission on the server.
+
+## Related content
+
+- [Always On Availability Groups Dynamic Management Views and Functions (Transact-SQL)](../system-dynamic-management-views/always-on-availability-groups-dynamic-management-views-functions.md)
+- [Always On Availability Groups Catalog Views (Transact-SQL)](always-on-availability-groups-catalog-views-transact-sql.md)
+- [Monitor Availability Groups (Transact-SQL)](../../database-engine/availability-groups/windows/monitor-availability-groups-transact-sql.md)
+- [What is an Always On availability group?](../../database-engine/availability-groups/windows/overview-of-always-on-availability-groups-sql-server.md)