Update faq.yml to make note for permissions

Add notes for permissions as some users thought the advanced access roles are sufficient to use DI Studio.

Author: esther-tsai

articles/ai-services/document-intelligence/faq.yml

@@ -468,7 +468,7 @@ sections:
 
             - Advanced
 
-              - **Contributor**: you need this role to create resource group or Document Intelligence resource.
+              - **Contributor**: you need this role to create resource group or Document Intelligence resource.  Please note that having Contributor role does not allow you to list keys for Cognitive Services.  You will still need Cognitive Services User role to use Document Intelligence Studio.
 
           - For custom model projects, here are the role requirements for user scenarios.
 
@@ -480,10 +480,9 @@ sections:
 
             - Advanced
 
-              - **Storage Account Contributor**: you need this role to the storage account to set up CORS settings (it's a one time effort if the same storage account is reused).
-
-              - **Contributor**: you need this role to create resource group and resources.
+              - **Storage Account Contributor**: you need this role to the storage account to set up CORS settings (it's a one time effort if the same storage account is reused). Please note that having Contributor role does not allow you to access data in your blob.  You will still need Storage Blob Data Contributor role to use Document Intelligence Studio.
 
+              - **Contributor**: you need this role to create resource group and resources.  Please note that having Contributor role does not give you access to use the created resources/storage.  You will still need basice roles to use Document Intelligence Studio.
 
           - For more information, *see* [Microsoft Entra built-in roles](../../role-based-access-control/built-in-roles.md) and Azure role assignments sections in [Document Intelligence Studio](quickstarts/try-document-intelligence-studio.md) page.