Fixes MicrosoftDocs/azure-docs#97633

Author: JnHs

articles/lighthouse/concepts/architecture.md

@@ -1,7 +1,7 @@
 ---
 title: Azure Lighthouse architecture
 description: Learn about the relationship between tenants in Azure Lighthouse, and the resources created in the customer's tenant that enable that relationship.
-ms.date: 06/09/2022
+ms.date: 08/26/2022
 ms.topic: conceptual
 ---
 
@@ -16,6 +16,9 @@ Azure Lighthouse helps service providers simplify customer engagement and onboar
 
 This topic discusses the relationship between tenants in Azure Lighthouse, and the resources created in the customer's tenant that enable that relationship.
 
+> [!NOTE]
+> Onboarding a customer to Azure Lighthouse requires a deployment by a non-guest account in the customer's tenant who has a role with the `Microsoft.Authorization/roleAssignments/write` permission, such as [Owner](../../role-based-access-control/built-in-roles.md#owner), for the subscription being onboarded (or which contains the resource groups that are being onboarded).
+
 ## Delegation resources created in the customer tenant
 
 When a customer’s subscription or resource group is onboarded to Azure Lighthouse, two resources are created: the **registration definition** and the **registration assignment**. You can use [APIs and management tools](cross-tenant-management-experience.md#apis-and-management-tool-support) to access these resources, or work with them [in the Azure portal](../how-to/view-manage-customers.md).