Add changelog entry for #3904 (#3910)

Author: denik

NEXT_CHANGELOG.md

@@ -11,5 +11,6 @@
 ### Bundles
 * Add `default-minimal` template for users who want a clean slate without sample code ([#3885](https://github.com/databricks/cli/pull/3885))
 * Add validation that served_models and served_entities are not used at the same time. Add client side translation logic. ([#3880](https://github.com/databricks/cli/pull/3880))
+* Filter out provided permissions, to select a single permissions level per principal (([#3904](https://github.com/databricks/cli/pull/3904))).
 
 ### API Changes