Update mdo-portal-permissions.md

We need to add more details which I have already suggested  to continue this phrase to mention "so you have to configure or import your custom roles BEFORE activating Defender XDR RBAC" and to add a picture for better understanding.

Author: Chirouette

defender-office-365/mdo-portal-permissions.md

@@ -38,7 +38,8 @@ You need to be member of the **Global Administrator**<sup>\*</sup> role in Micro
 
 - Some Defender for Office 365 features require additional permissions in Exchange Online. For more information, see [Permissions in Exchange Online](/exchange/permissions-exo/permissions-exo).
 - Microsoft Defender XDR has its own Unified role-based access control (RBAC). This model provides a single permissions management experience in one central location where admins can control permissions across different security solutions. These permissions are different from the permissions described in this article. For more information, see [Microsoft Defender XDR role-based access control (RBAC)](/defender-xdr/manage-rbac).
-- **If you activate Defender XDR RBAC for Email & collaboration, the permissions page at <https://security.microsoft.com/emailandcollabpermissions> is no longer available in the Defender portal**.
+- **If you activate Defender XDR RBAC for Email & collaboration, the permissions page at <https://security.microsoft.com/emailandcollabpermissions> is no longer available in the Defender portal, so you have to ensure that you have configured or imported your roles BEFORE activating Defender XDR Unified RBAC![image](https://github.com/user-attachments/assets/51f1cf8f-569d-4d23-8de5-f3c793782420)
+**.
 - For information about permissions in the Microsoft Purview compliance portal, see [Permissions in the Microsoft Purview compliance portal](/purview/microsoft-365-compliance-center-permissions).
 
 > [!IMPORTANT]