Merge pull request #48731 from v-viinde/approle

 PRODUCT BACKLOG ITEM 520956 SaaS App Tutorial: App Role Management Update

Author: PRMerger12

articles/active-directory/active-directory-enterprise-app-role-management.md

@@ -13,7 +13,7 @@ ms.workload: identity
 ms.tgt_pltfrm: na
 ms.devlang: na
 ms.topic: article
-ms.date: 07/09/2018
+ms.date: 08/10/2018
 ms.author: jeedes
 ms.custom: aaddev
 
@@ -64,6 +64,9 @@ If your application expects custom roles to be passed in a SAML response, you ne
 
 	  ![List of permissions and "Modify Permissions" button](./media/active-directory-enterprise-app-role-management/graph-explorer-new10.png)
 
+	> [!Note]
+	> Cloud App Administrator and App Administrator role will not work in this scenario as we need the Global Admin permissions for Directory Read and Write.
+
     d. Accept the consent. You're logged in to the system again.
 
     e. Change the version to **beta**, and fetch the list of service principals from your tenant by using the following query: