Merge pull request #643 from NHSDigital/DTOSS-11282-enable-http-probes

Amend documentation to explicity inform the required rbac permissions

Author: malcolmbaig

docs/infrastructure/create-environment.md

@@ -29,6 +29,9 @@ The environment requires a shared Azure front door profile created in the hub. T
 
 ## Bicep
 
+> [!IMPORTANT]
+> **Required permissions**: Owner role on both the hub and resource subscriptions
+
 - From AVD:
   - Login with Microsoft Graph scope: `az login --scope https://graph.microsoft.com//.default -t HSCIC365.onmicrosoft.com`
   - Run bicep: `make [environment] resource-group-init`