diff --git a/lib/ansible/modules/cloud/azure/azure_rm_securitygroup.py b/lib/ansible/modules/cloud/azure/azure_rm_securitygroup.py
index 9a4653f59f..b6008ef5e5 100644
--- a/lib/ansible/modules/cloud/azure/azure_rm_securitygroup.py
+++ b/lib/ansible/modules/cloud/azure/azure_rm_securitygroup.py
@@ -87,11 +87,17 @@ options:
                 default: "*"
             source_address_prefix:
                 description:
-                  - IP address or CIDR from which traffic originates.
+                  - The CIDR or source IP range.
+                  - Asterix C(*) can also be used to match all source IPs.
+                  - Default tags such as C(VirtualNetwork), C(AzureLoadBalancer) and C(Internet) can also be used.
+                  - If this is an ingress rule, specifies where network traffic originates from.
                 default: "*"
             destination_address_prefix:
                 description:
-                  - IP address or CIDR to which traffic is headed.
+                  - The destination address prefix.
+                  - CIDR or destination IP range.
+                  - Asterix C(*) can also be used to match all source IPs.
+                  - Default tags such as C(VirtualNetwork), C(AzureLoadBalancer) and C(Internet) can also be used.
                 default: "*"
             access:
                 description: