Merge pull request #296696 from ameyaiam3/patch-2

Update create-policy-definition.md

Author: prmerger-automator[bot]

articles/governance/machine-configuration/how-to/create-policy-definition.md

@@ -188,6 +188,9 @@ $PolicyConfig3      = @{
 New-GuestConfigurationPolicy @PolicyConfig3 -ExcludeArcMachines
 ```
 
+For this scenario, you need to disable the **Allow Blob anonymous access** setting and assign the
+role **Storage Blob Data Reader** on the storage account to the identity.
+
 > [!NOTE]
 > You can retrieve the resourceId of a managed identity using the `Get-AzUserAssignedIdentity`
 > PowerShell cmdlet.