Update howto-deploy-iot-operations.md

Add deeplink to specify app id, object id when user encouters AKV/SP permission issue.

Author: konichi3

articles/iot-operations/deploy-iot-ops/howto-deploy-iot-operations.md

@@ -88,9 +88,12 @@ az iot ops init --cluster <CLUSTER_NAME> -g <RESOURCE_GROUP> --kv-id $(az keyvau
 
 If you don't have **Microsoft.Authorization/roleAssignment/write** permissions in your Azure subscription, include the `--disable-rsync-rules` feature flag.
 
-Use optional flags to customize the `az iot ops init` command. To learn more, see [az iot ops init](/cli/azure/iot/ops#az-iot-ops-init).
+If you encounter an issue with the KeyVault access policy and the Service Principal (SP) permissions, [pass service principal and KeyVault arguments](https://learn.microsoft.com/en-us/azure/iot-operations/deploy-iot-ops/howto-manage-secrets#pass-service-principal-and-key-vault-arguments-to-azure-iot-operations-deployment).
 
+Use optional flags to customize the `az iot ops init` command. To learn more, see [az iot ops init](/cli/azure/iot/ops#az-iot-ops-init).
 
+> [!TIP]
+> You can check the configurations of topic maps, QoS, message routes with the [CLI extension](https://learn.microsoft.com/en-us/cli/azure/iot/ops?view=azure-cli-latest#az-iot-ops-check-examples) `az iot ops check --detail-level 2`.
 
 ### Configure cluster network (AKS EE)