add link and include

Author: sdgilley

articles/ai-studio/includes/assign-rbac.md

@@ -0,0 +1,28 @@
+---
+title: include file
+description: include file
+author: sdgilley
+ms.reviewer: sgilley
+ms.author: sgilley
+ms.service: azure-ai-studio
+ms.topic: include
+ms.date: 12/27/2024
+ms.custom: include
+---
+
+The general pattern for assigning RBAC for any resource is:
+
+1. Navigate to the Azure portal for the given resource. 
+1. From the left page in the Azure portal, select **Access control (IAM)**. 
+1. Select **+ Add** > **Add role assignment**.
+1. Search for the role you need to assign and select it. Then select **Next**.
+1. When assigning a role to yourself: 
+    1. Select **User, group, or service principal**. S
+    1. Select **Select members**.
+    1. Search for your name and select it.
+1. When assigning a role to another resource: 
+    1. Select **Managed identity**.  Then 
+    1. Select **Select members**.
+    1. Use the dropdown to find the type of resource you want to assign.  For example, Azure AI services or Search service.
+    1. Select the resource from the list that appears.  In many cases, there will only be one to select.
+1. Continue through the wizard and select **Review + assign** to add the role assignment.

articles/ai-studio/tutorials/deploy-chat-web-app.md

@@ -40,14 +40,26 @@ The steps in this tutorial are:
 
 - A local copy of product data. The [Azure-Samples/rag-data-openai-python-promptflow repository on GitHub](https://github.com/Azure-Samples/rag-data-openai-python-promptflow/) contains sample retail product information that's relevant for this tutorial scenario. Specifically, the `product_info_11.md` file contains product information about the TrailWalker hiking shoes that's relevant for this tutorial example. [Download the example Contoso Trek retail product data in a ZIP file](https://github.com/Azure-Samples/rag-data-openai-python-promptflow/raw/refs/heads/main/tutorial/data/product-info.zip) to your local machine.
 
-- A **Microsoft.Web** resource provider registered in the selected subscription, to be able to deploy to a web app.
+- A **Microsoft.Web** resource provider registered in the selected subscription, to be able to deploy to a web app. For more information on registering a resource provide, see [Register resource provider](/azure/azure-resource-manager/management/resource-providers-and-types#register-resource-provider-1).
 
 ## Add your data and try the chat model again
 
 In the [AI Foundry playground quickstart](../quickstarts/get-started-playground.md) (that's a prerequisite for this tutorial), observe how your model responds without your data. Now you add your data to the model to help it answer questions about your products.
 
 [!INCLUDE [Chat with your data](../includes/chat-with-data.md)] 
 
+## Configure resources
+
+> [!IMPORTANT]
+> You must have the necessary permissions to add role assignments in your Azure subscription. Granting permissions by role assignment is only allowed by the Owner of the specific Azure resources. You might need to ask your Azure subscription owner (who might be your IT admin) to complete this section for you.
+
+In order for the resources you're about to deploy to work correctly, you need to configure them with the correct permissions. This work is done in the Azure portal.  
+
+You'll configure three separate resources: the Azure AI Search service, the Azure OpenAI service, and the Azure Blob storage for your workspaceblobstore.  
+
+Find each of these services:
+
+1. In the 
 ## Deploy your web app
 
 Once you're satisfied with the experience in Azure AI Foundry portal, you can deploy the model as a standalone web application.