Update managed identity troubleshooting.

Author: dominicbetts

articles/iot-central/core/howto-export-to-azure-data-explorer.md

@@ -178,6 +178,8 @@ To create the Azure Data Explorer destination in IoT Central on the **Data expor
 
     :::image type="content" source="media/howto-export-data/export-destination-managed.png" alt-text="Screenshot of Azure Data Explorer export destination that uses a managed identity.":::
 
+If you don't see data arriving in your destination service, see [Troubleshoot issues with data exports from your Azure IoT Central application](troubleshoot-data-export.md).
+
 ---
 
 [!INCLUDE [iot-central-data-export-setup](../../../includes/iot-central-data-export-setup.md)]

articles/iot-central/core/howto-export-to-blob-storage.md

@@ -135,6 +135,8 @@ To create the Blob Storage destination in IoT Central on the **Data export** pag
 
 1. Select **Save**.
 
+If you don't see data arriving in your destination service, see [Troubleshoot issues with data exports from your Azure IoT Central application](troubleshoot-data-export.md).
+
 ---
 
 [!INCLUDE [iot-central-data-export-setup](../../../includes/iot-central-data-export-setup.md)]

articles/iot-central/core/howto-export-to-event-hubs.md

@@ -32,8 +32,6 @@ Event Hubs destinations let you configure the connection with a *connection stri
 
 # [Connection string](#tab/connection-string)
 
-
-
 If you don't have an existing Event Hubs namespace to export to, run the following script in the Azure Cloud Shell bash environment. The script creates a resource group, Event Hubs namespace, and event hub. It then prints the connection string to use when you configure the data export in IoT Central:
 
 ```azurecli-interactive
@@ -114,6 +112,8 @@ To create the Event Hubs destination in IoT Central on the **Data export** page:
 
 1. Select **Save**.
 
+If you don't see data arriving in your destination service, see [Troubleshoot issues with data exports from your Azure IoT Central application](troubleshoot-data-export.md).
+
 ---
 
 [!INCLUDE [iot-central-data-export-setup](../../../includes/iot-central-data-export-setup.md)]

articles/iot-central/core/howto-export-to-service-bus.md

@@ -116,6 +116,8 @@ To create the Service Bus destination in IoT Central on the **Data export** page
 
 1. Select **Save**.
 
+If you don't see data arriving in your destination service, see [Troubleshoot issues with data exports from your Azure IoT Central application](troubleshoot-data-export.md).
+
 ---
 
 [!INCLUDE [iot-central-data-export-setup](../../../includes/iot-central-data-export-setup.md)]

articles/iot-central/core/troubleshoot-data-export.md

@@ -20,8 +20,23 @@ You're using a managed identity to authorize the connection to an export destina
 
 Before you configure or enable the export destination, make sure that you complete the following steps:
 
-- Enable the managed identity for the application.
-- Configure the permissions for the managed identity.
+- Enable the managed identity for the IoT Central application. To verify that the managed identity is enabled, go to the **Identity** page for your application in the Azure portal or use the following CLI command:
+
+    ```azurecli
+    az iot central app identity show --name {your app name} --resource-group {your resource group name}
+    ```
+
+- Configure the permissions for the managed identity. To view the assigned permissions, select **Azure role assignments** on the **Identity** page for your app in the Azure portal or use the `az role assignment list` CLI command. The required permissions are:
+
+    | Destination | Permission |
+    |-------------|------------|
+    | Azure Blob storage | Storage Blob Data Contributor |
+    | Azure Service Bus | Azure Service Bus Data Sender |
+    | Azure Event Hubs | Azure Event Hubs Data Sender |
+    | Azure Data Explorer | Admin |
+
+    If the permissions were not set correctly before you created the destination in your IoT Central application, try removing the destination and then adding it again.
+
 - Configure any virtual networks, private endpoints, and firewall policies.
 
 To learn more, see [Export data](howto-export-data.md?tabs=managed-identity).