Merge pull request #295541 from isamorris99/patch-11

Update bastion-faq.md

Author: prmerger-automator[bot]

articles/bastion/bastion-faq.md

@@ -68,7 +68,8 @@ At this time, for most address spaces, you must add a subnet named **AzureBastio
 
 ### <a name="write-permissions"></a>Are special permissions required to deploy Bastion to the AzureBastionSubnet?
 
-To deploy Bastion to the AzureBastionSubnet, write permissions are required. Example: **Microsoft.Network/virtualNetworks/write**.
+To deploy Bastion to the AzureBastionSubnet, the following RBAC permissions are required: **Microsoft.Network/virtualNetworks/write**,**Microsoft.Network/virtualNetworks/subnets/join/action**, and
+**Microsoft.Network/publicIPAddresses**
 
 ### <a name="subnet"></a>Can I have an Azure Bastion subnet of size /27 or smaller (/28, /29, etc.)?