Update articles/active-directory/governance/entitlement-management-access-package-resources.md

clarify actor

Co-authored-by: Ajane Burnley <[email protected]>

Author: markwahl-msft

articles/active-directory/governance/entitlement-management-access-package-resources.md

@@ -197,7 +197,7 @@ In entitlement management, Azure AD will process bulk changes for assignment and
 
 When you remove a member of a team, they are removed from the Microsoft 365 Group as well. Removal from the team's chat functionality might be delayed. For more information, see [Group membership](/microsoftteams/office-365-groups#group-membership).
 
-When a resource role is added to an access package, users who are in that resource role, but do not have assignments to the access package, will remain in the resource role, but will not be assigned to the access package. For example, if a user is a member of a group, and then an access package is created and that group's member role is added to an access package, the user will not automatically receive an assignment to the access package.
+When a resource role is added to an access package by an admin, users who are in that resource role, but do not have assignments to the access package, will remain in the resource role, but won't be assigned to the access package. For example, if a user is a member of a group and then an access package is created and that group's member role is added to an access package, the user won't automatically receive an assignment to the access package.
 
 If you want the users to also be assigned to the access package, you can [directly assign users](entitlement-management-access-package-assignments.md#directly-assign-a-user) to an access package using the Azure portal, or in bulk via Graph or PowerShell. The users will then also receive access to the other resource roles in the access package.  However, as those users already have access prior to being added to the access package, when their access package assignment is removed, they will remain in the resource role.  For example, if a user was a member of a group, and was assigned to an access package that included group membership for that group as a resource role, and then that user's access package assignment was removed, the user would retain their group membership.