Merge pull request #295782 from juliamwang6/patch-2

Update get-resource-changes.md

Author: prmerger-automator[bot]

articles/governance/resource-graph/changes/get-resource-changes.md

@@ -22,7 +22,7 @@ In this article, you learn:
 - Change analysis uses _Change Actor_ functionality:
   - `changedBy`: Who initiated a change in your resource, like an app ID or authorized person's email address.
   - `clientType`: Which client made the change, like _Azure portal_.
-  - `operation`: Which [operation](../../../role-based-access-control/resource-provider-operations.md) was called, like `Microsoft.Compute/virtualmachines/write`.
+  - `operation`: Which [operation](../../../role-based-access-control/resource-provider-operations.md) was called, like `Microsoft.Compute/virtualmachines/write`. The `operation` field in the resource changes data represents the [Azure role-based access control permissions](../../../role-based-access-control/resource-provider-operations.md) used to initiate the change.
 
 ## Prerequisites
 
@@ -64,8 +64,14 @@ When a resource is created, updated, or deleted, a new change resource (`Microso
 ```
 
 [See the full reference guide for change resource properties.](/rest/api/resources/changes)
+
+The `operation` field in the resource changes data represents the [Azure role-based access control permissions](../../../role-based-access-control/resource-provider-operations.md) used to initiate the change. This field does not always describe the actual operation performed but rather the permission (authorization action) that was used. For example, `Microsoft.Compute/virtualmachines/write` corresponds to the permission for the operation `PUT/providers/Microsoft.Compute/virtualmachines`.
+
+For understanding the type of change that was captured in the resource (i.e. Create, Delete, Update), we recommend that you use the `changeType` field rather than the `operation` field, which instead represents the [Azure role-based access control permissions](../../../role-based-access-control/resource-provider-operations.md) used to initiate the change.
+
 > [!NOTE]
 > Snapshots are not currently supported for deleted resources.
+> For records with `changeType`: Delete, the `changesCount` is shown as 0 because the resource itself gets deleted, and there are no properties remaining.
 
 ## Run a query