Revert "Revert "[Email Security] Add note to ZT doc""

This reverts commit f421929.

Author: Maddy-Cloudflare

src/content/docs/cloudflare-one/roles-permissions.mdx

@@ -9,6 +9,8 @@ When creating a Cloudflare Zero Trust account, you will be given the Super Admin
 
 To check the list of members in your account, or to manage roles and permissions, refer to our [Account setup](/fundamentals/setup/manage-members/) documentation.
 
+
+
 ## Zero Trust roles
 
 Only Super Administrators will be able to assign or remove the following roles from users in their account. Scroll to the right to see a full list of permissions for each role.
@@ -22,6 +24,10 @@ Only Super Administrators will be able to assign or remove the following roles f
 | Cloudflare Zero Trust Read Only | ✅          | ❌          | ✅           | ❌           | ✅             | ✅           | ❌           |
 | Cloudflare Zero Trust Reporting | ❌          | ❌          | ❌           | ❌           | ✅             | ✅           | ❌           |
 
+:::note
+The Cloudflare Zero Trust role grants administrator access to all Zero Trust products including Access, Gateway, WARP, Tunnel, Browser Isolation, CASB, DLP, DEX, and Email Security.
+:::
+
 ### Cloudflare Zero Trust PII
 
 By default, only Super Administrators can view end users' PII in the Gateway activity logs, such as Device IDs, Source IPs, or user emails. No other roles will have the ability to read PII unless Super Administrators explicitly assign the **Cloudflare Zero Trust PII** role to them.