add what-if permissions

Author: mumian

articles/azure-resource-manager/bicep/deploy-what-if.md

@@ -3,7 +3,7 @@ title: Bicep deployment what-if
 description: Determine what changes will happen to your resources before deploying a Bicep file.
 author: tfitzmac
 ms.topic: conceptual
-ms.date: 09/02/2021
+ms.date: 07/11/2022
 ms.author: tomfitz
 ---
 # Bicep deployment what-if operation
@@ -12,6 +12,8 @@ Before deploying a Bicep file, you can preview the changes that will happen. Azu
 
 You can use the what-if operation with Azure PowerShell, Azure CLI, or REST API operations. What-if is supported for resource group, subscription, management group, and tenant level deployments.
 
+[!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
+
 ### Microsoft Learn
 
 If you would rather learn about the what-if operation through step-by-step guidance, see [Preview Azure deployment changes by using what-if](/learn/modules/arm-template-whatif/) on **Microsoft Learn**.

articles/azure-resource-manager/templates/deploy-what-if.md

@@ -3,9 +3,9 @@ title: Template deployment what-if
 description: Determine what changes will happen to your resources before deploying an Azure Resource Manager template.
 author: tfitzmac
 ms.topic: conceptual
-ms.date: 03/09/2021
+ms.date: 07/11/2022
 ms.author: tomfitz
-ms.custom: devx-track-azurepowershell, devx-track-azurecli 
+ms.custom: devx-track-azurepowershell, devx-track-azurecli
 ms.devlang: azurecli
 ---
 # ARM template deployment what-if operation
@@ -14,6 +14,8 @@ Before deploying an Azure Resource Manager template (ARM template), you can prev
 
 You can use the what-if operation with Azure PowerShell, Azure CLI, or REST API operations. What-if is supported for resource group, subscription, management group, and tenant level deployments.
 
+[!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
+
 ### Microsoft Learn
 
 To learn more about what-if, and for hands-on guidance, see [Preview Azure deployment changes by using what-if](/learn/modules/arm-template-whatif) on **Microsoft Learn**.

includes/template-deploy-permissions.md

@@ -3,12 +3,12 @@
 ms.author: daphnemamsft
 ms.service: bicep, arm-templates
 ms.topic: include
-ms.date: 1/07/2022
+ms.date: 7/11/2022
 
 ---
 
-## Required permissions 
+## Required permissions
 
-To deploy a Bicep file or ARM template, you need write access on the resources you're deploying and access to all operations on the Microsoft.Resources/deployments resource type. For example, to deploy a virtual machine, you need `Microsoft.Compute/virtualMachines/write` and `Microsoft.Resources/deployments/*` permissions.
+To deploy a Bicep file or ARM template, you need write access on the resources you're deploying and access to all operations on the Microsoft.Resources/deployments resource type. For example, to deploy a virtual machine, you need `Microsoft.Compute/virtualMachines/write` and `Microsoft.Resources/deployments/*` permissions.  The what-if operation has the same permission requirements.
 
 For a list of roles and permissions, see [Azure built-in roles](../articles/role-based-access-control/built-in-roles.md).