Merge pull request #134327 from julieMSFT/20201016_accesscontrol

update to add resource group permissions

articles/synapse-analytics/security/how-to-set-up-access-control.md

@@ -10,7 +10,7 @@ ms.date: 04/15/2020
 ms.author: mahi
 ms.reviewer: jrasnick
 ---
-# Secure your Synapse workspace (preview)
+# Secure your Synapse workspace (preview) 
 
 This article will teach you how to use roles and access control to control activities and access to data. By following these instructions, access control in Azure Synapse Analytics is simplified. You only need to add and remove users to one of three security groups.
 
@@ -25,7 +25,7 @@ To secure a Synapse workspace (preview), you'll follow a pattern of configuring
   - Apache Spark for Azure Synapse Analytics admin
 - Access control for data in Azure Data Lake Storage Gen 2 (ADLSGEN2).
 - Access control for Synapse SQL and Spark databases
-
+- 
 ## Steps to secure a Synapse workspace
 
 This document uses standard names to simplify the instructions. Replace them with any names of your choice.
@@ -65,11 +65,13 @@ Identify this information about your storage:
 
 ## STEP 3: Create and configure your Synapse Workspace
 
-In the Azure portal, create a Synapse workspace:
+ In the Azure portal, create a Synapse workspace:
 
+- Select your subscription
+- Select your resource group - You need to have access to a resource group for which you have been assigned the **Owner** role.
 - Name the workspace WS1
 - Choose STG1 for the Storage account
-- Choose CNT1 for the container that is being used as the "filesystem".
+-. Choose CNT1 for the container that is being used as the "filesystem".
 - Open WS1 in Synapse Studio
 - Select **Manage** > **Access Control** assign the security groups to the following Synapse roles.
   - Assign **WS1\_WSAdmins** to Synapse Workspace admins