Merge pull request #176158 from mattchenderson/rolescope

adding role assignment scope note

Author: laurabren

includes/functions-event-hubs-permissions.md

@@ -6,7 +6,7 @@ ms.date: 10/08/2021
 ms.author: mahender
 ---
 
-You will need to create a role assignment that provides access to your event hub at runtime. Management roles like [Owner](../articles/role-based-access-control/built-in-roles.md#owner) are not sufficient. The following table shows built-in roles that are recommended when using the Event Hubs extension in normal operation. Your application may require additional permissions based on the code you write.
+You will need to create a role assignment that provides access to your event hub at runtime. The scope of the role assignment must be for an Event Hubs namespace, not the event hub itself. Management roles like [Owner](../articles/role-based-access-control/built-in-roles.md#owner) are not sufficient. The following table shows built-in roles that are recommended when using the Event Hubs extension in normal operation. Your application may require additional permissions based on the code you write.
 
 | Binding type   | Example built-in roles                                          |
 |----------------|-----------------------------------------------------------------|

includes/functions-service-bus-permissions.md

@@ -6,7 +6,7 @@ ms.date: 10/08/2021
 ms.author: mahender
 ---
 
-You will need to create a role assignment that provides access to your topics and queues at runtime. Management roles like [Owner](../articles/role-based-access-control/built-in-roles.md#owner) are not sufficient. The following table shows built-in roles that are recommended when using the Service Bus extension in normal operation. Your application may require additional permissions based on the code you write.
+You will need to create a role assignment that provides access to your topics and queues at runtime. The scope of the role assignment must be for a Service Bus namespace, not limited to a specific queue or topic. Management roles like [Owner](../articles/role-based-access-control/built-in-roles.md#owner) are not sufficient. The following table shows built-in roles that are recommended when using the Service Bus extension in normal operation. Your application may require additional permissions based on the code you write.
 
 | Binding type   | Example built-in roles                                            |
 |----------------|-------------------------------------------------------------------|