Merge pull request #229691 from tsubasaxZZZ/patch-4

Update azure-portal-safelist-urls.md

Author: prmerger-automator[bot]

articles/azure-portal/azure-portal-safelist-urls.md

@@ -22,6 +22,10 @@ The URL endpoints to allow for the Azure portal are specific to the Azure cloud
 
 ### [Public Cloud](#tab/public-cloud)
 
+> [!TIP]
+> The service tags required to access the Azure portal (including authentication and resource listing) are **AzureActiveDirectory**, **AzureResourceManager**, and **AzureFrontDoor.Frontend**. Access to other services may require additional permissions, as described below.  
+> However, there is a possibility that unnecessary communication other than communication to access the portal may also be allowed. If granular control is required, FQDN-based access control such as Azure Firewall is required.
+
 #### Azure portal authentication
 
 ```