Merge pull request #272180 from cherylmc/Bastion-write

write-permissions

Author: prmerger-automator[bot]

articles/bastion/bastion-faq.md

@@ -68,6 +68,10 @@ No, Azure Bastion doesn't currently support Azure Private Link.
 
 At this time, for most address spaces, you must add a subnet named **AzureBastionSubnet** to your virtual network before you select **Deploy Bastion**.
 
+### <a name="write-permissions"></a>Are special permissions required to deploy Bastion to the AzureBastionSubnet?
+
+To deploy Bastion to the AzureBastionSubnet, write permissions are required. Example: **Microsoft.Network/virtualNetworks/write**.
+
 ### <a name="subnet"></a>Can I have an Azure Bastion subnet of size /27 or smaller (/28, /29, etc.)?
 
 For Azure Bastion resources deployed on or after November 2, 2021, the minimum AzureBastionSubnet size is /26 or larger (/25, /24, etc.). All Azure Bastion resources deployed in subnets of size /27 before this date are unaffected by this change and will continue to work. However, we highly recommend increasing the size of any existing AzureBastionSubnet to /26 in case you choose to take advantage of [host scaling](./configure-host-scaling.md) in the future.