Add note about cloud app security admin role

Author: AbbyMSFT

defender-for-cloud-apps/app-governance-get-started.md

@@ -64,6 +64,8 @@ You must have at least one of these roles to turn on app governance:
 - Compliance Admin  
 - Compliance Data Admin
 - Cloud App Security Admin
+  > [!NOTE]
+  > The Cloud App Security Admin role grants permissions turn on app governance for Microsoft Defender for Cloud Apps. However, this role doesn't grant access to view or manage app governance capabilities. To view or manage app governance capabilities, you must also have one of the other roles listed in the table  below.
 
 The following table lists the app governance capabilities for each role.