updates per PM

Author: Blackmist

articles/ai-studio/concepts/connections.md

@@ -50,7 +50,7 @@ A data connection offers these benefits:
 When you create a connection with an existing Azure storage account, you can choose between two different authentication methods:
 
 - **Credential-based**: Authenticate data access with a service principal, shared access signature (SAS) token, or account key. Users with *Reader* project permissions can access the credentials.
-- **Identity-based**: Use your Microsoft Entra ID or managed identity to authenticate data access.
+- **Identity-based**: Use your Microsoft Entra ID or managed identity to authenticate data access. When using this type of connection, Azure role-based access control (Azure RBAC) is used to determine who can access the connection. You must assign the correct Azure RBAC roles to your developers before they can use the connection. For more information, see [Scenario: Connections using Microsoft Entra ID](rbac-ai-studio.md#scenario-connections-using-microsoft-entra-id-authentication).
 
 
 The following table shows the supported Azure cloud-based storage services and authentication methods: