Merge pull request #197284 from Blackmist/managed-identity-note-mir

limitations

Author: PRMerger4

articles/machine-learning/how-to-access-resources-from-endpoints-managed-identities.md

@@ -55,6 +55,10 @@ This guide assumes you don't have a managed identity, a storage account or an on
     cd azureml-examples/cli
     ```
 
+## Limitations
+
+* The identity for an endpoint is immutable. During endpoint creation, you can associate it with a system-assigned identity (default) or a user-assigned identity. You can't change the identity after the endpoint has been created.
+
 ## Define configuration YAML file for deployment
 
 To deploy an online endpoint with the CLI, you need to define the configuration in a YAML file. For more information on the YAML schema, see [online endpoint YAML reference](reference-yaml-endpoint-online.md) document.
@@ -192,12 +196,12 @@ Then, upload file in container.
 
 The following code creates an online endpoint without specifying a deployment. 
 
+> [!WARNING]
+> The identity for an endpoint is immutable. During endpoint creation, you can associate it with a system-assigned identity (default) or a user-assigned identity. You can't change the identity after the endpoint has been created.
+
 # [System-assigned managed identity](#tab/system-identity)
 When you create an online endpoint, a system-assigned managed identity is created for the endpoint by default.
 
->[!IMPORTANT]
-> System assigned managed identities are immutable and can't be changed once created.
-
 ::: code language="azurecli" source="~/azureml-examples-main/cli/deploy-managed-online-endpoint-access-resource-sai.sh" id="create_endpoint" :::
 
 Check the status of the endpoint with the following.