To see Sentinel Alerts and Incidents onboard to Defender Portal

Author: EdB-MSFT

api-reference/v1.0/resources/security-api-overview.md

@@ -69,7 +69,10 @@ Alerts are detailed warnings about suspicious activities in a customer's tenant
 
 The security API offers two types of alerts that aggregate other alerts from security providers and make analyzing attacks and determining responses easier: 
 - [Alerts and incidents](#alerts-and-incidents) - these are the latest generation of alerts in the Microsoft Graph security API. They're represented by the [alert](security-alert.md) resource and its collection, [incident](security-incident.md) resource, defined in the `microsoft.graph.security` namespace.
-- [Legacy alerts](#legacy-alerts) - these are the first generation of alerts in the Microsoft Graph security API. They're represented by the [alert](alert.md) resource defined in the `microsoft.graph` namespace.
+- [Legacy alerts](#legacy-alerts) - these are the first generation of alerts in the Microsoft Graph security AI. They're represented by the [alert](alert.md) resource defined in the `microsoft.graph` namespace.
+
+> [!IMPORTANT]
+> To see Sentinel Alerts and Incidents you must onboard Sentinel to the Defender Portal. For more information see [Connect Microsoft Sentinel to the Microsoft Defender portal](/unified-secops/microsoft-sentinel-onboard)
 
 ### Alerts and incidents