Merge pull request #294150 from dhruvchand/image-definition-role-assignments

clarify role assignments for dev center imaging

Author: prmerger-automator[bot]

articles/dev-box/how-to-configure-customization-imaging.md

@@ -7,7 +7,7 @@ ms.service: dev-box
 ms.custom:
   - ignite-2024
 ms.topic: how-to
-ms.date: 11/05/2024
+ms.date: 02/05/2025
 
 #customer intent: As a Dev Center Admin or Project Admin, I want to configure dev box pools to use image definition files so that my development teams can create customized dev boxes.
 ---
@@ -102,10 +102,25 @@ To verify that customizations from the image definition file are applied, create
 
 You can make adjustments to the customization file and create a new dev box to test the changes. When you're happy that the customizations are correct, you can build a reusable image.
 
-### Build a reusable image
+## Build a reusable image
 
 To optimize customizations and create a reusable image for your team, you can use the following steps to build an image from the customization file. This image applies to all dev boxes created from the pool.
-The DevCenter service creates a Dev Box behind the scenes to create an image, and exports the image to an Azure Compute Gallery in a resource group managed by the DevCenter service. In order to generate an image, you need to assign the DevCenter service the requisite roles to publish an image. Go to the Azure Portal, and select Resource Groups. Search for the managed by resource group with the name DevCenter(yourProjectName)(a random ID). Under that resource group, navigate to Access Control, and give the “Windows 365” application the roles “Storage Account Contributor”, “Storage Blob Data Contributor” and “Reader”.
+The DevCenter service creates a Dev Box behind the scenes to create an image, and exports the image to an Azure Compute Gallery in a resource group managed by the DevCenter service. 
+
+### Assign roles to the DevCenter service
+
+In order to generate an image, you need to assign the DevCenter service the requisite roles to publish an image. 
+
+1. Sign in to the [Azure portal](https://portal.azure.com).
+
+1. Select **Resource Groups**. 
+
+1. Search for the managed by resource group with the name *DevCenter(yourProjectName)(a random ID)*. 
+
+1. Under that resource group, navigate to Access Control, and give the **Windows 365** and **Project Fidalgo** applications the roles **Storage Account Contributor**, **Storage Blob Data Contributor**, and **Reader**.
+
+### Build the image
+ 
 
 1. On the **Image definitions** pane, select the image that you want to build.