Merge pull request #124188 from FreddyAyala/patch-3

Update roles-for-resource-and-storage.md to prevent 403 error

Author: Court72

articles/ai-services/language-service/custom-named-entity-recognition/includes/roles-for-resource-and-storage.md

@@ -37,5 +37,16 @@ Use the following steps to set the required roles for your Language resource and
 5. Select **Select members**
 6. Select your subscription, and **Language** as the managed identity. You can search for user names in the **Select** field. 
 
+### Roles for your user
+> [!IMPORTANT]
+> If you skip this step, you'll have a 403 error when trying to connect to your custom project. It's important that your current user has this role to access storage account blob data, even if you're the owner of the storage account.
+> 
+1. Go to your storage account page in the [Azure portal](https://portal.azure.com/).
+2. Select **Access Control (IAM)** in the left navigation menu.
+3. Select **Add** to **Add Role Assignments**, and choose the **Storage blob data contributor** role on the storage account.
+4. Within **Assign access to**, select **User, group, or service principal**. 
+5. Select **Select members**
+6. Select your User. You can search for user names in the **Select** field. 
+
 > [!IMPORTANT]
 > If you have a virtual network or private endpoint, be sure to select **Allow Azure services on the trusted services list to access this storage account** in the Azure portal.