Update m365d-autoir-actions.md

Disclosing that admin permissions are necessary for undo operations.

Author: pohlmann-gui

defender-xdr/m365d-autoir-actions.md

@@ -69,6 +69,9 @@ If you've determined that a device or a file is not a threat, you can undo remed
 |:---|:---|
 | - Automated investigation <br/>- Microsoft Defender Antivirus <br/>- Manual response actions | - Isolate device <br/>- Contain device <br/>- Contain user <br/>- Restrict code execution <br/>- Quarantine a file <br/>- Remove a registry key <br/>- Stop a service <br/>- Disable a driver <br/>- Remove a scheduled task |
 
+> [!NOTE]
+> Only Security Administrators and Global Administrators are allowed access to undo operations such as File Quarantine.
+
 ### Undo one remediation action
 
 1. Go to the Action center ([https://security.microsoft.com/action-center](https://security.microsoft.com/action-center)) and sign in.