Added note regarding SP role.

Author: johnmarco

articles/openshift/openshift-service-definitions.md

@@ -5,7 +5,7 @@ ms.service: azure-redhat-openshift
 ms.topic: article
 author: johnmarco
 ms.author: johnmarc
-ms.date: 08/24/2023
+ms.date: 04/15/2024
 keywords: azure, openshift, aro, red hat, service, definition
 #Customer intent: I need to understand Azure Red Hat OpenShift service definitions to manage my subscription.
 ---
@@ -38,6 +38,10 @@ An Azure Red Hat OpenShift deployment requires two resource groups within an Azu
 
 The second resource group is created by the Azure Red Hat OpenShift resource provider. It contains Azure Red Hat OpenShift cluster components, including virtual machines, network security groups, and load balancers. Azure Red Hat OpenShift cluster components located within this resource group aren't modifiable by the customer. Cluster configuration must be performed via interactions with the OpenShift API using the OpenShift web console or OpenShift CLI or similar tools.
 
+> [!NOTE]
+> The service principal for the ARO resource provider requires the Network Contributor role on the VNet of the ARO cluster. This is required for the ARO resource provider to create resources such as the ARO Private Link service and load balancers.
+> 
+
 ## Red Hat operators
 
 It's recommended that a customer provides a Red Hat pull secret to the Azure Red Hat OpenShift cluster during cluster creation. The Red Hat pull secret enables your cluster to access Red Hat container registries, along with other content from the OpenShift Operator Hub.