Merge pull request #35513 from abhims14/patch-10

Update custom roles documentation and permissions note

Author: prmerger-automator[bot]

data-migration/sql-server/managed-instance/custom-roles.md

@@ -1,10 +1,10 @@
 ---
-title: "Custom roles: Online SQL Server to SQL Managed Instance migrations using ADS"
+title: "Custom Roles: Online SQL Server to SQL Managed Instance Migrations Using ADS"
 titleSuffix: Azure Database Migration Service
 description: Learn to use the custom roles for SQL Server to Azure SQL Managed Instance migrations.
 author: rwestMSFT
 ms.author: randolphwest
-ms.date: 06/11/2025
+ms.date: 10/08/2025
 ms.service: azure-database-migration-service
 ms.topic: conceptual
 ms.collection:
@@ -74,6 +74,9 @@ You can use either the Azure portal, Azure PowerShell, Azure CLI, or Azure REST
 
 For more information, see [Create or update Azure custom roles using the Azure portal](/azure/role-based-access-control/custom-roles-portal) and [Azure custom roles](/azure/role-based-access-control/custom-roles).
 
+> [!NOTE]  
+> When migrating to SQL Managed Instance via **Azure portal** using **Managed Identity**, make sure the signed in user has **Storage Blob Data Reader** access on the storage account. This permission is needed to list folders and files in the blob container during migration setup via Azure portal. For more information, see [DMS - Support for Managed Identity for Azure SQL Managed Instance migration](https://techcommunity.microsoft.com/blog/microsoftdatamigration/dms---support-for-managed-identity-for-azure-sql-managed-instance-migration/4411274).
+
 ## Description of permissions needed to migrate to Azure SQL Managed Instance
 
 | Permission action | Description |

data-migration/sql-server/managed-instance/database-migration-service.md

@@ -5,7 +5,7 @@ description: Learn how to migrate on-premises SQL Server to Azure SQL Managed In
 author: abhims14
 ms.author: abhishekum
 ms.reviewer: randolphwest
-ms.date: 10/06/2025
+ms.date: 10/08/2025
 ms.service: azure-database-migration-service
 ms.topic: tutorial
 ms.collection:
@@ -88,7 +88,7 @@ To complete this tutorial, you need to:
     1. In the Azure portal, go to **Storage account** (used for the migration for keeping backup files), and navigate to **IAM roles** > **Assign role**, and assign Storage Blob Data Reader to the associated managed identity.
 
        > [!NOTE]  
-       > The Storage account should have the **Allow storage account key access** option enabled. For more information, see [DMS - Support for Managed Identity for Azure SQL Managed Instance migration](https://techcommunity.microsoft.com/blog/microsoftdatamigration/dms---support-for-managed-identity-for-azure-sql-managed-instance-migration/4411274).
+       > When migrating to SQL Managed Instance via **Azure portal** using **Managed Identity**, make sure the signed in user has **Storage Blob Data Reader** access on the storage account. This permission is needed to list folders and files in the blob container during migration setup via Azure portal. For more information, see [DMS - Support for Managed Identity for Azure SQL Managed Instance migration](https://techcommunity.microsoft.com/blog/microsoftdatamigration/dms---support-for-managed-identity-for-azure-sql-managed-instance-migration/4411274).
 
   As an alternative to using one of these built-in roles, you can [assign custom roles](custom-roles.md).