Merge pull request #4248 from MicrosoftDocs/main

Publish to live, Tuesday 4 AM PST, 4/22

Author: ttorble

articles/machine-learning/how-to-troubleshoot-online-endpoints.md

@@ -199,6 +199,7 @@ Deployment operation status can report the following common deployment errors:
   - [Subscription doesn't exist](#subscription-doesnt-exist)
   - [Startup task failed due to authorization error](#authorization-error)
   - [Startup task failed due to incorrect role assignments on resource](#authorization-error)
+  - [Startup task failed due to incorrect role assignments on storage account when mdc is enabled](#authorization-error)
   - [Invalid template function specification](#invalid-template-function-specification)
   - [Unable to download user container image](#unable-to-download-user-container-image)
   - [Unable to download user model](#unable-to-download-user-model)
@@ -371,6 +372,8 @@ After you provision the compute resource when you create a deployment, Azure pul
 
 If you create the associated endpoint with user-assigned identity, the user's managed identity must have **Storage blob data reader** permission on the workspace storage account and **AcrPull** permission on the workspace container registry. Make sure your user-assigned identity has the right permissions.
 
+When MDC is enabled, the user's managed identity must have **Storage Blob Data Contributor** permission on the workspace storage account. For more information, see [Storage Blob Authorization Error when MDC is enabled](how-to-collect-production-data.md#collect-data-to-a-custom-blob-storage-container).
+
 If you create the associated endpoint with system-assigned identity, Azure role-based access control (RBAC) permission is automatically granted and no further permissions are needed. For more information, see [Container registry authorization error](#container-registry-authorization-error).
 
 #### Invalid template function specification