Update azure-portal-safelist-urls.md

Author: tsubasaxZZZ

articles/azure-portal/azure-portal-safelist-urls.md

@@ -22,6 +22,10 @@ The URL endpoints to allow for the Azure portal are specific to the Azure cloud
 
 ### [Public Cloud](#tab/public-cloud)
 
+> [!TIP]
+> The service tags required to access(including authentication and  resource listing) Azure portal are **AzureActiveDirectory**, **AzureResourceManager**, and **AzureFrontDoor.Frontend**. Access to other services may require additional permissions as described below.  
+> However, there is a possibility that unnecessary communication other than communication to access the portal may also be allowed. If granular control is required, FQDN-based access control such as Azure Firewall is required.
+
 #### Azure portal authentication
 
 ```