Update virtual-networks.md

Author: fosteramanda

articles/ai-services/agents/how-to/virtual-networks.md

@@ -39,7 +39,10 @@ Azure AI Agent Service offers a standard agent configuration with private networ
 3. Ensure that the individual deploying the template has the [Azure AI Developer role](/azure/ai-studio/concepts/rbac-ai-studio) assigned at the resource group level where the template is being deployed.
 4. Additionally, to deploy the template, you need to have the preset [Role Based Access Administrator](/azure/role-based-access-control/built-in-roles/privileged#role-based-access-control-administrator) role at the subscription level.
     * The **Owner** role at the subscription level satisfies this requirement.
-    * The specific admin role that is needed is `Microsoft.Authorization/roleAssignments/write` 
+    * The specific admin role that is needed is `Microsoft.Authorization/roleAssignments/write`
+5. Ensure that each team member who wants to use the Agent Playground or Agent SDK to create or edit agents has been assigned the built-in **Azure AI Developer** [RBAC role](../../../ai-studio/concepts/rbac-ai-studio.md) for the project.
+    * **Note:** assign these roles after the template has been deployed
+    * The minimum set of permissions required is: **agents/*/read**, **agents/*/action**, **agents/*/delete**  
 5. Install [the Azure CLI and the machine learning extension](/azure/machine-learning/how-to-configure-cli). If you have the CLI already installed, make sure it's updated to the latest version.
 6. Register providers. The following providers must be registered:
     * `Microsoft.KeyVault`
@@ -286,4 +289,4 @@ with project_client:
 
 ## Next steps
 
-Once you've provisioned your agent, you can add tools such as [Grounding with Bing Search](./tools/bing-grounding.md) to enhance their capabilities.
+Once you've provisioned your agent, you can add tools such as [Grounding with Bing Search](./tools/bing-grounding.md) to enhance their capabilities.