fixed wording in pre-reqs

Author: JimacoMS3

articles/iot-hub/iot-hub-python-python-module-twin-getstarted.md

@@ -38,7 +38,7 @@ At the end of this tutorial, you have three Python apps:
 
 ## Get the IoT hub connection string
 
-In this article, you create a back-end service that adds a device in the identity registry and then adds a module to that device. This service requires the **registry write** permission. You also create a service that adds desired properties to the module twin for the newly created module. This service needs the **service connect** permission. Although there are default shared access policies that grant these permissions individually, in this section, you create a custom shared access policy that contains both of these permissions. (The **registry read** permission is included with **registry write**.)
+In this article, you create a back-end service that adds a device in the identity registry and then adds a module to that device. This service requires the **registry write** permission (which also includes **registry read**). You also create a service that adds desired properties to the module twin for the newly created module. This service needs the **service connect** permission. Although there are default shared access policies that grant these permissions individually, in this section, you create a custom shared access policy that contains both of these permissions.
 
 [!INCLUDE [iot-hub-include-find-service-regrw-connection-string](../../includes/iot-hub-include-find-service-regrw-connection-string.md)]
 

includes/iot-hub-include-find-service-regrw-connection-string.md

@@ -11,15 +11,15 @@ ms.custom: include file
 ---
 <!-- This tells how to create a custom shared access policy that has service connect and registry RW permissions for your IoT hub and get the connection string for it-->
 
-To create a shared access policy that grants **service connect**, **registry read**, and **registry write** permissions and to get a connection string for this policy, follow these steps:
+To create a shared access policy that grants **service connect** and **registry write** permissions and to get a connection string for this policy, follow these steps:
 
 1. In the [Azure portal](https://portal.azure.com), select **Resource groups**. Select the resource group where your hub is located, and then select your hub from the list of resources.
 
 1. On the left-side pane of your hub, select **Shared access policies**.
 
 1. From the top menu above the list of policies, select **Add**.
 
-1. Under **Add a shared access policy**, enter a descriptive name for your policy, such as *serviceAndRegistryReadWrite*. Under **Permissions**, select **Registry write** and **Service connect**, and then select **Create**.
+1. Under **Add a shared access policy**, enter a descriptive name for your policy, such as *serviceAndRegistryReadWrite*. Under **Permissions**, select **Registry write** and **Service connect**, and then select **Create**. (The **Registry read** permission is included automatically when you select **Registry write**.)
 
     ![Show how to add a new shared access policy](./media/iot-hub-include-find-service-regrw-connection-string/iot-hub-add-svc-regrw-policy.png)