Merge pull request #247540 from greg-lindsay/dns-design

add detail

Author: prmerger-automator[bot]

articles/dns/private-resolver-endpoints-rulesets.md

@@ -6,7 +6,7 @@ author: greg-lindsay
 ms.service: dns
 ms.custom: ignite-2022
 ms.topic: conceptual
-ms.date: 07/19/2023
+ms.date: 08/07/2023
 ms.author: greglin
 #Customer intent: As an administrator, I want to understand components of the Azure DNS Private Resolver.
 ---
@@ -72,6 +72,9 @@ For example, resources in the vnet `myeastspoke` can resolve records in the priv
 - The ruleset provisioned in `myeastvnet` is linked to `myeastspoke`
 - A ruleset rule is configured and enabled in the linked ruleset to resolve `azure.contoso.com` using the inbound endpoint in `myeastvnet`
 
+> [!NOTE]
+> You can also link a ruleset to a virtual network in another Azure subscription.  However, the resource group specified must be in the same region as the private resolver. 
+
 ### Rules
 
 DNS forwarding rules (ruleset rules) have the following properties: