Merge pull request #239425 from charlesoxyer/patch-7

Update enable-pull-request-annotations.md

Author: prmerger-automator[bot]

articles/defender-for-cloud/enable-pull-request-annotations.md

@@ -27,6 +27,7 @@ With Microsoft Defender for Cloud, you can configure PR annotations in Azure Dev
 **For Azure DevOps**:
 
 - An Azure account. If you don't already have an Azure account, you can [create your Azure free account today](https://azure.microsoft.com/free/).
+- [Have write access (owner/contributer) to the Azure subscription](https://learn.microsoft.com/azure/active-directory/privileged-identity-management/pim-how-to-activate-role). 
 - [Connect your Azure DevOps repositories to Microsoft Defender for Cloud](quickstart-onboard-devops.md).
 - [Configure the Microsoft Security DevOps Azure DevOps extension](azure-devops-extension.md).
 - [Setup secret scanning in Azure DevOps](detect-exposed-secrets.md#setup-secret-scanning-in-azure-devops).