additional permissions

Author: b-ahibbard

articles/azure-netapp-files/includes/create-volume-permission.md

@@ -12,4 +12,8 @@ ms.author: anfdocs
 ---
 
 >[!IMPORTANT]
->To create a volume or write a volume resource, you must have the `Microsoft.Network/virtualNetworks/subnets/read` permission configured on your IAM role. For more information about permissions, see [Create or update Azure custom roles using the Azure portal](../../role-based-access-control/custom-roles-portal.md).
+>To create a volume or write a volume resource, you must have the following permissions configured on the IAM role:
+> * `Microsoft.Network/virtualNetworks/subnets/read`
+> * `Microsoft.Network/virtualNetworks/read`
+> * `Microsoft.Network/virtualNetworks/subnets/join/action`
+> For more information about permissions and to confirm what permissions are configured, see [Create or update Azure custom roles using the Azure portal](../../role-based-access-control/custom-roles-portal.md).