Merge pull request #279041 from edburns/edburns-msft-2100358-clarify-subscription

On branch edburns-msft-2100358-clarify-subscription

Author: prmerger-automator[bot]

articles/aks/howto-deploy-java-wls-app.md

@@ -39,6 +39,8 @@ If you're interested in providing feedback or working closely on your migration
 
 - [!INCLUDE [quickstarts-free-trial-note](../../includes/quickstarts-free-trial-note.md)]
 - Ensure the Azure identity you use to sign in and complete this article has either the [Owner](/azure/role-based-access-control/built-in-roles#owner) role in the current subscription or the [Contributor](/azure/role-based-access-control/built-in-roles#contributor) and [User Access Administrator](/azure/role-based-access-control/built-in-roles#user-access-administrator) roles in the current subscription. For an overview of Azure roles, see [What is Azure role-based access control (Azure RBAC)?](/azure/role-based-access-control/overview) For details on the specific roles required by WLS on AKS, see [Azure built-in roles](/azure/role-based-access-control/built-in-roles).
+    > [!NOTE]
+    > These roles must be granted at the subscription level, not the resource group level.
 - Have the credentials for an Oracle single sign-on (SSO) account. To create one, see [Create Your Oracle Account](https://aka.ms/wls-aks-create-sso-account).
 - Accept the license terms for WebLogic Server.
   - Visit the [Oracle Container Registry](https://container-registry.oracle.com/) and sign in.