Merge branch '246730-update-entra-id-authentication-studio' of https://github.com/laujan/azure-docs-pr into 246730-update-entra-id-authentication-studio

Author: laujan

articles/ai-services/document-intelligence/faq.yml

@@ -199,7 +199,8 @@ sections:
 
           - Basic
 
-            - **Cognitive Services User**: You need this role for a [Document Intelligence](https://portal.azure.com/#create/Microsoft.CognitiveServicesFormRecognizer) or [Cognitive Services multiple-service](https://portal.azure.com/#create/Microsoft.CognitiveServicesAllInOne) resource to train a custom model or analyze with trained models.
+            - **Cognitive Services User**: You need this role for a [Document Intelligence](https://portal.azure.com/#create/Microsoft.CognitiveServicesFormRecognizer) or [Cognitive Services multiple-service](https://portal.azure.com/#create/Microsoft.CognitiveServicesAllInOne) resource to read/write data and is 
+              **required to call the API**.  This role is also the minimum necessary to train a custom model or analyze with trained models. 
 
             - **Storage Blob Data Contributor**: You need this role for a storage account to create project and label data.
 
@@ -209,7 +210,7 @@ sections:
 
               The Contributor role doesn't allow you to access data in your blob. To use Document Intelligence Studio, you still need the Storage Blob Data Contributor role.
 
-            - **Contributor**: You need this role to create a resource group and resources. The Contributor role doesn't give you access to use the created resources or storage. To use Document Intelligence Studio, you still need basic roles.
+            - **Contributor**: You need this role to create a resource group and resources. The Contributor role doesn't give you access to use the created resources or storage it only allow a user to read/write the resource itself. To use Document Intelligence Studio, you still need basic roles.
 
           For more information, see [Microsoft Entra built-in roles](../../role-based-access-control/built-in-roles.md) and the sections about Azure role assignments in the [Document Intelligence Studio quickstart](quickstarts/try-document-intelligence-studio.md).