Update dns-faq-private.yml

Addressing ANPask: https://msazure.visualstudio.com/One/_workitems/edit/27621791

Author: cogran

articles/dns/dns-faq-private.yml

@@ -42,6 +42,11 @@ sections:
         answer: |
           Yes. You must have write operation permission on the virtual networks and the private DNS zone. The write permission can be granted to several Azure roles. For example, the Classic Network Contributor Azure role has write permissions to virtual networks and Private DNS zones Contributor role has write permissions on the private DNS zones. For more information on Azure roles, see [Azure role-based access control (Azure RBAC)](../role-based-access-control/overview.md).
 
+      - question: |
+          Can a virtual network that belongs to a different tenant be linked to a private zone?
+        answer: |
+          Yes. You must have write operation permission on the virtual networks and the private DNS zone in both tenants. The write permission can be granted to several Azure roles. For example, the Classic Network Contributor Azure role has write permissions to virtual networks and Private DNS zones Contributor role has write permissions on the private DNS zones. For more information on Azure roles, see [Azure role-based access control (Azure RBAC)](../role-based-access-control/overview.md).
+
       - question: |
           What causes the automatically registered virtual machine DNS records in a private zone be created or deleted?
         answer: |