Update device-update-control-access.md

Author: eshashah-msft

articles/iot-hub-device-update/device-update-control-access.md

@@ -112,6 +112,21 @@ $Scope = 'https://api.adu.microsoft.com/.default'
 Get-MsalToken -ClientId $clientId -TenantId $tenantId -Authority $authority -Scopes $Scope -ClientCertificate $cert
 ```
 
-## Next steps
+## Support for managed identities
 
-[Create device update resources and configure access control roles](create-device-update-account.md)
+Managed identities provide Azure services with an automatically managed identity in Azure AD in a secure manner. This eliminates the needs for developers having to manage credentials by providing an identity. Device Update for IoT Hub supports system-assigned managed identities.
+
+### System-assigned managed identity
+
+To add and remove a system-assigned managed identity in Azure portal:
+1. Sign in to the Azure portal and navigate to your desired Device Update for IoT Hub account.
+2. Navigate to Identity in your Device Update for IoT Hub portal
+3. Navigate to Identity in your IoT Hub portal
+4. Under System-assigned tab, select On and click Save.
+
+To remove system-assigned managed identity from an Device Update for IoT hub account, select Off and click Save.
+
+
+
+## Next Steps
+* [Create device update resources and configure access control roles](./create-device-update-account.md)