Merge pull request #34672 from MikeRayMSFT/250710-from-public

Update openrowset

Author: prmerger-automator[bot]

docs/t-sql/functions/openrowset-bulk-transact-sql.md

@@ -12,6 +12,7 @@ dev_langs:
   - "TSQL"
 monikerRange: "=azuresqldb-mi-current || >=sql-server-2016 || =azuresqldb-current || >=sql-server-linux-2017 || =fabric"
 ---
+
 # OPENROWSET BULK (Transact-SQL)
 
 ::: moniker range="=azuresqldb-mi-current||=azuresqldb-current||>=sql-server-2016||>=sql-server-linux-2017"
@@ -281,7 +282,21 @@ To bulk export or import SQLXML data, use one of the following data types in you
 
 ## Permissions
 
-`OPENROWSET` permissions are determined by the permissions of the user name that is being passed to the data provider. To use the `BULK` option requires `ADMINISTER BULK OPERATIONS` or `ADMINISTER DATABASE BULK OPERATIONS` permission.
+`OPENROWSET` with external data sources, requires the following permissions:
+
+- `ADMINISTER DATABASE BULK OPERATIONS`
+
+  or
+
+- `ADMINISTER BULK OPERATIONS`
+
+The following example grants `ADMINISTEER DATABASE BULK OPERATIONS` to a principal.
+
+```sql
+GRANT ADMINISTER DATABASE BULK OPERATIONS TO [<principal_name>];
+```
+
+If the target storage account is private, the principal must also have the **Storage Blob Data Reader** role (or higher) assigned at the container or storage account level.
 
 ## Examples