Merge pull request #274552 from b-ahibbard/anf-subnet-create

subnet permission alert

Author: v-shils

articles/azure-netapp-files/azure-netapp-files-create-volumes-smb.md

@@ -16,6 +16,8 @@ This article shows you how to create an SMB3 volume. For NFS volumes, see [Creat
 
 ## Before you begin 
 
+[!INCLUDE [Delegated subnet permission](includes/create-volume-permission.md)]
+
 * You must have already set up a capacity pool. See [Create a capacity pool](azure-netapp-files-set-up-capacity-pool.md).     
 * A subnet must be delegated to Azure NetApp Files. See [Delegate a subnet to Azure NetApp Files](azure-netapp-files-delegate-subnet.md).
 * The [non-browsable shares](#non-browsable-share) and [access-based enumeration](#access-based-enumeration) features are currently in preview. You must register each feature before you can use it:

articles/azure-netapp-files/azure-netapp-files-create-volumes.md

@@ -15,6 +15,9 @@ Azure NetApp Files supports creating volumes using NFS (NFSv3 or NFSv4.1), SMB3,
 This article shows you how to create an NFS volume. For SMB volumes, see [Create an SMB volume](azure-netapp-files-create-volumes-smb.md). For dual-protocol volumes, see [Create a dual-protocol volume](create-volumes-dual-protocol.md).
 
 ## Before you begin 
+
+[!INCLUDE [Delegated subnet permission](includes/create-volume-permission.md)]
+
 * You must have already set up a capacity pool.  
     See [Create a capacity pool](azure-netapp-files-set-up-capacity-pool.md).   
 * A subnet must be delegated to Azure NetApp Files.  

articles/azure-netapp-files/create-volumes-dual-protocol.md

@@ -16,6 +16,8 @@ To create NFS volumes, see [Create an NFS volume](azure-netapp-files-create-volu
 
 ## Before you begin 
 
+[!INCLUDE [Delegated subnet permission](includes/create-volume-permission.md)]
+
 * You must have already created a capacity pool.  
     See [Create a capacity pool](azure-netapp-files-set-up-capacity-pool.md).   
 * A subnet must be delegated to Azure NetApp Files.  

articles/azure-netapp-files/includes/create-volume-permission.md

@@ -0,0 +1,17 @@
+---
+author: b-ahibbard
+ms.service: azure-netapp-files
+ms.topic: include
+ms.date: 05/07/2024
+ms.author: anfdocs
+
+# azure-netapp-files-create-volumes.md
+# azure-netapp-files-create-volumes-smb.md
+# create-volumes-dual-protocol.md
+
+---
+
+>[!IMPORTANT]
+>If you're using a custom RBAC/IAM role, you must have the `Microsoft.Network/virtualNetworks/subnets/read` permission configured to create or update a volume. 
+>
+> For more information about permissions and to confirm permissions configuration, see [Create or update Azure custom roles using the Azure portal](../../role-based-access-control/custom-roles-portal.md).