Add Service Auth requirement documentation for auth_client_id service tokens.

Author: lifers5555

src/content/docs/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters.mdx

@@ -50,6 +50,8 @@ You can use the following parameters to configure a specific Zero Trust organiza
 Enrolls the device in your Zero Trust organization using a [service token](/cloudflare-one/connections/connect-devices/warp/deployment/device-enrollment/#check-for-service-token).
 Requires the `auth_client_secret` parameter.
 
+Note: The service token must have `Service Auth` [WARP enrollment permissions](/cloudflare-one/connections/connect-devices/warp/deployment/device-enrollment/#example-policies). Allow permissions will not work for service tokens.
+
 **Value Type:** `string`
 
 **Value:** Client ID of the service token.
@@ -282,4 +284,4 @@ An optional property. `is_browser` will help the Cloudflare One Agent applicatio
 
 **Value Type**: `boolean`
 
-**Value**: If the value is `true`, identifies the application defined in `app_identifier` as a browser. The default value is `false` and `is_browser` is an optional property.
+**Value**: If the value is `true`, identifies the application defined in `app_identifier` as a browser. The default value is `false` and `is_browser` is an optional property.