update code sample to reflect managed identity

Author: laujan

articles/cognitive-services/Translator/document-translation/how-to-guides/create-use-managed-identities.md

@@ -13,15 +13,6 @@ ms.author: lajanuar
 
 # Managed identities for Document Translation
 
-:::image type="content" source="../media/managed-identity-rbac-flow.png" alt-text="Screenshot of managed identity flow (RBAC).":::
-
-> [!IMPORTANT]
->
-> * Currently, Document Translation doesn't support managed identity in the global region. If you intend to use managed identities for Document Translation operations, [create your Translator resource](https://portal.azure.com/#create/Microsoft.CognitiveServicesTextTranslation) in a non-global Azure region.
->
-> * Document Translation is **only** available in the S1 Standard Service Plan (Pay-as-you-go) or in the D3 Volume Discount Plan. _See_ [Cognitive Services pricing—Translator](https://azure.microsoft.com/pricing/details/cognitive-services/translator/).
->
-
 Managed identities for Azure resources are service principals that create an Azure Active Directory (Azure AD) identity and specific permissions for Azure managed resources:
 
 * You can use managed identities to grant access to any resource that supports Azure AD authentication, including your own applications. Managed identities eliminate the need for you to include shared access signature tokens (SAS) with your HTTP requests.
@@ -30,13 +21,20 @@ Managed identities for Azure resources are service principals that create an Azu
 
 * There's no added cost to use managed identities in Azure.
 
-> [!TIP]
+   **Create a managed identity for storage access**
+
+   :::image type="content" source="../media/managed-identity-rbac-flow.png" alt-text="Screenshot of managed identity flow (RBAC).":::
+
+> [!IMPORTANT]
 >
 > * When using managed identities, don't include a SAS token URL with your HTTP requests—your requests will fail.
 >
+> * Currently, Document Translation doesn't support managed identity in the global region. If you intend to use managed identities for Document Translation operations, [create your Translator resource](https://portal.azure.com/#create/Microsoft.CognitiveServicesTextTranslation) in a non-global Azure region.
+>
+> * Document Translation is **only** available in the S1 Standard Service Plan (Pay-as-you-go) or in the D3 Volume Discount Plan. _See_ [Cognitive Services pricing—Translator](https://azure.microsoft.com/pricing/details/cognitive-services/translator/).
+>
 > * Managed identities are a safer way to grant access to data without having SAS tokens included with your HTTP requests.
 
-
 ## Prerequisites
 
 To get started, you need:
@@ -130,7 +128,7 @@ The **Storage Blob Data Contributor** role gives Translator (represented by the
 
 * With managed identity and `Azure RBAC`, you no longer need to include SAS URLs.
 
-* If successful, the POST method returns a `202 Accepted`  response code and the batch request is created by the service. 
+* If successful, the POST method returns a `202 Accepted`  response code and the batch request is created by the service.
 
 * The translated documents appear in your target container.