Merge pull request #203792 from timwarner-msft/timwarner-rbac2

Resolve reviewer comments

Author: PRMerger19

articles/governance/policy/overview.md

@@ -1,7 +1,7 @@
 ---
 title: Overview of Azure Policy
 description: Azure Policy is a service in Azure, that you use to create, assign and, manage policy definitions in your Azure environment.
-ms.date: 06/22/2022
+ms.date: 07/05/2022
 ms.topic: overview
 ms.author: timwarner
 author: timwarner-msft
@@ -147,15 +147,11 @@ to users who do not need them.
 
 ### Special permissions requirement for Azure Policy with Azure Virtual Network Manager (preview)
 
-[Azure Virtual Network Manager (preview)](../../virtual-network-manager/overview.md) enables you to apply consistent management and security policies to multiple Azure virtual networks (VNets) throughout your cloud infrastructure. Azure Virtual Network Manager dynamic groups use read-only Azure Policy definitions to evaluate VNet membership in those groups.
+[Azure Virtual Network Manager (preview)](../../virtual-network-manager/overview.md) enables you to apply consistent management and security policies to multiple Azure virtual networks (VNets) throughout your cloud infrastructure. Azure Virtual Network Manager dynamic groups use Azure Policy definitions to evaluate VNet membership in those groups.
 
-To create, edit, or delete Azure Virtual Network Manager dynamic group policies, you need not only appropriate read and write Azure Policy RBAC permissions as described previously, but also permissions to write on the network group.
+To create, edit, or delete Azure Virtual Network Manager dynamic group policies, you need not only appropriate read and write Azure Policy RBAC permissions as described previously, but also permissions to join the network group.
 
-Specifically, the required resource provider permissions are:
-
-- Microsoft.Network/networkManagerConnections/write
-- Microsoft.Network/networkManagers/networkGroups/write
-- Microsoft.Authorization/policyAssignments/write
+Specifically, the required resource provider permission is `Microsoft.Network/networkManagers/networkGroups/join/action`.
 
 ### Resources covered by Azure Policy