docs: use root over ocpadmin

docs/deploy/create_server.rst

@@ -479,10 +479,6 @@ Configure reverse DNS
    -  If the environment is development, add a ``-dev`` suffix.
    -  Do not include an integer suffix in the target name.
 
-   .. warning::
-
-      On Azure, add ``user: ocpadmin`` and ``sudo: true`` to the `target's data <https://docs.saltproject.io/en/latest/topics/ssh/roster.html#targets-data>`__.
-
    .. tip::
 
       If DNS is not propagated, temporarily set ``host`` to the server's IP address instead of its FQDN.
@@ -503,6 +499,16 @@ Configure reverse DNS
 
       This step takes 3-4 minutes, so ``--log-level=trace`` is used to show activity.
 
+   .. warning::
+
+      On Azure, add ``--user=ocpadmin`` and ``--sudo``:
+
+      .. code-block:: bash
+
+         salt-ssh --log-level=trace TARGET state.apply 'onboarding,core*' --user=ocpadmin --sudo
+
+      These flags are not needed for subsequent deployments.
+
    .. tip::
 
       If you get the error message:

docs/develop/update/firewall.rst

@@ -308,7 +308,3 @@ Firewall
   -  :doc:`Connect to the server<../../use/ssh>` as the ``root`` user
   -  Run ``/home/sysadmin-tools/bin/firewall_reset.sh``
   -  Close port 8255 in the external firewall
-
-.. note::
-
-   On Azure, instead of the ``root`` user, use the ``ocpadmin`` user, and run commands with ``sudo``.