Merge pull request #94622 from MaryanneNjeri/patch-4

Update azure-app-configuration-role-assignment.md

Author: Jak-MS

includes/azure-app-configuration-role-assignment.md

@@ -18,3 +18,5 @@ Assign the proper App Configuration role assignments to the credentials being us
 1. Select the service principal associated with the service connection that you created in the previous section.
 
     :::image type="content" source="./media/azure-app-configuration-role-assignment/add-role-assignment.png" alt-text="Screenshot shows the Add role assignment dialog.":::
+
+1. If the store contains Key Vault references, go to relevant Key Vault and assign **Key Vault Secret User** role to the service principal created in the previous step. From the Key Vault menu, select **Access policies** and ensure [Azure role-based access control](../articles/key-vault/general/rbac-guide.md) is selected as the permission model.