fix the include file

Author: mumian

articles/azure-resource-manager/templates/deploy-cli.md

@@ -24,6 +24,7 @@ If you don't have Azure CLI installed, you can use Azure Cloud Shell. For more i
 > [!TIP]
 > We recommend [Bicep](../bicep/overview.md) because it offers the same capabilities as ARM templates and the syntax is easier to use. To learn more, see [How to deploy resources with Bicep and Azure CLI](../bicep/deploy-cli.md).
 
+## Prerequisites
 
 [!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
 

articles/azure-resource-manager/templates/deploy-cloud-shell.md

@@ -12,6 +12,8 @@ You can use [Azure Cloud Shell](../../cloud-shell/overview.md) to deploy an Azur
 
 You can deploy to any scope. This article shows deploying to a resource group.
 
+## Prerequisites
+
 [!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
 
 ## Deploy remote template

articles/azure-resource-manager/templates/deploy-rest.md

@@ -12,6 +12,8 @@ This article explains how to use the Azure Resource Manager REST API with Azure
 
 You can either include your template in the request body or link to a file. When using a file, it can be a local file or an external file that is available through a URI. When your template is in a storage account, you can restrict access to the template and provide a shared access signature (SAS) token during deployment.
 
+## Prerequisites
+
 [!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
 
 ## Deployment scope

articles/azure-resource-manager/templates/deploy-to-azure-button.md

@@ -17,6 +17,8 @@ The deployment scope is determined by the template schema. For more information,
 - [management groups](deploy-to-management-group.md)
 - [tenants](deploy-to-tenant.md)
 
+## Prerequisites
+
 [!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
 
 ## Use common image

articles/azure-resource-manager/templates/deploy-what-if.md

@@ -17,6 +17,8 @@ You can use the what-if operation with Azure PowerShell, Azure CLI, or REST API
 
 To learn more about what-if, and for hands-on guidance, see [Preview Azure deployment changes by using what-if](/training/modules/arm-template-whatif).
 
+## Prerequisites
+
 [!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
 
 ## What-if limits

includes/template-deploy-permissions.md

@@ -1,13 +1,13 @@
 ---
 
-ms.author: daphnemamsft
+ms.author: mumian
 ms.service: bicep, arm-templates
 ms.topic: include
-ms.date: 7/11/2022
+ms.date: 08/04/2025
 
 ---
 
-## Required permissions
+### Required permissions
 
 To deploy a Bicep file or ARM template, you need write access on the resources you're deploying and access to all operations on the Microsoft.Resources/deployments resource type. For example, to deploy a virtual machine, you need `Microsoft.Compute/virtualMachines/write` and `Microsoft.Resources/deployments/*` permissions.  The what-if operation has the same permission requirements.