Merge pull request #92897 from luleonpla/userassignment

User assignment

Author: PRMerger12

articles/active-directory/manage-apps/assign-user-or-group-access-portal.md

@@ -4,20 +4,19 @@ description: How to select an enterprise app to assign a user or group to it in
 services: active-directory
 author: msmimart
 manager: CelesteDG
-
 ms.service: active-directory
 ms.subservice: app-mgmt
 ms.workload: identity
 ms.topic: conceptual
-ms.date: 04/11/2019
+ms.date: 10/24/2019
 ms.author: mimart
 ms.reviewer: luleon
 ms.collection: M365-identity-device-management
 ---
 
 # Assign a user or group to an enterprise app in Azure Active Directory
 
-To assign a user or group to an enterprise app, you must have the appropriate permissions to manage the enterprise app, and you must be global admin for the directory. For Microsoft Applications (such as Office 365 apps), use PowerShell to assign users to an enterprise app.
+To assign a user or group to an enterprise app, you should have assigned any of these admin roles: global administrator, application administrator, cloud application administrator or be assigned as the owner of the enterprise app.  For Microsoft Applications (such as Office 365 apps), use PowerShell to assign users to an enterprise app.
 
 > [!NOTE]
 > For licensing requirements for the features discussed in this article, see the [Azure Active Directory pricing page](https://azure.microsoft.com/pricing/details/active-directory).