Update groups-assign-sensitivity-labels.md

Discussed with SCC engineering team after multiple issues the need to clarify the troubleshooting section to include the above updates.

Author: jasonfritts

articles/active-directory/enterprise-users/groups-assign-sensitivity-labels.md

@@ -126,10 +126,12 @@ The sensitivity label option is only displayed for groups when all the following
 
 1. Labels are published in the Microsoft 365 Compliance Center for this Azure AD organization.
 1. The feature is enabled, EnableMIPLabels is set to True in from the Azure AD PowerShell module.
-1. Labels are synchronized to Azure AD with the Execute-AzureAdLabelSync cmdlet in the Security & Compliance PowerShell module.
+1. Labels are synchronized to Azure AD with the Execute-AzureAdLabelSync cmdlet in the Security & Compliance PowerShell module. It can take up to 24 hours after synchronization for the label to be available to Azure AD.
 1. The group is a Microsoft 365 group.
 1. The organization has an active Azure Active Directory Premium P1 license.
-1. The current signed-in user has sufficient privileges to assign labels. The user must be either a Global Administrator, Group Administrator, or the group owner.
+1. The [sensitivity label scope](https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide#label-scopes) must be configured for Groups & Sites.
+3. The current signed-in user has sufficient privileges to assign labels. The user must be either a Global Administrator, Group Administrator, or the group owner.
+4. The current signed-in user must be within the scope of the [sensitivity label publishing policy](https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide#what-label-policies-can-do)
 
 Please make sure all the conditions are met in order to assign labels to a group.