Update file-sync-resource-move.md

adding move resource with MI enabled.

Author: rladbsal

articles/storage/file-sync/file-sync-resource-move.md

@@ -4,7 +4,7 @@ description: Learn how to move sync resources across resource groups, subscripti
 author: khdownie
 ms.service: azure-file-storage
 ms.topic: how-to
-ms.date: 08/08/2024
+ms.date: 06/05/2025
 ms.author: kendownie
 ---
 
@@ -88,6 +88,23 @@ Once all related Azure File Sync resources have been sequestered into their own
     :::column-end:::
 :::row-end:::
 
+## Restoring Access for Managed Identity Topology
+
+If Managed Identities is enabled and storage resources are moved to a different tenant, sync will stop. Managed Identities and RBAC roles do not transfer. Once the resource transfer is complete, you can re-enable Managed Identities and then reassign the RBAC roles. 
+
+> [!IMPORTANT]
+>Even when you move resources within the same Microsoft Entra tenant, RBAC role assignments do not move with the resources. You must recreate them manually after the move to restore sync access. Although the system automatically removes the orphaned role assignments, we recommend that you remove them before the move to maintain a clean configuration.
+
+Once you have moved your Storage Sync Service, you can perform the following with PowerShell to assign new managed identities. 
+
+```powershell
+Set-AzStorageSyncService -ResourceGroupName <ResourceGroupName> -Name <ManagedIdentityName> -IdentityType <IdentityType>
+```
+When you see the new SPN, you can navigate to portal to create the role assignments on Storage Accounts and Storage Account File Shares. 
+
+To learn more about how to manage role assignments, see [List Azure role assignments](/azure/role-based-access-control/role-assignments-list-portal#list-role-assignments-at-a-scope.md) and [Assign Azure roles](/azure/role-based-access-control/role-assignments-portal).
+
+
 ## Azure File Sync storage access authorization
 
 When storage accounts are moved to either a new subscription or are moved within a subscription to a new Microsoft Entra tenant, sync will stop. Role-based access control (RBAC) is used to authorize Azure File Sync to access a storage account, and these role assignments aren't migrated with the resources.