Merge pull request #307488 from jkpravinkumar/docs-editor/configure-azure-elastic-san-1761693608

Update configure-azure-elastic-san.md

Author: prmerger-automator[bot]

articles/azure-vmware/configure-azure-elastic-san.md

@@ -25,6 +25,23 @@ To accompany the steps below, you can use this [interactive demo](https://regale
 
 The following prerequisites are required to continue.
 
+> [!IMPORTANT]
+> As of November 2025, creating and deleting an Azure Elastic SAN based datastore in Azure VMware Solution requires appropriate permissions. If you're using built-in roles such as Owner and Contributor across the these two services, no changes are necessary. If you're using custom roles, ensure you have the correct permissions configured.
+> <details><summary>For a complete list of required permissions, expand this section.</summary>
+> > To create an Elastic SAN datastore, you must have the following permissions:
+- `Microsoft.AVS/privateClouds/clusters/datastores/write`
+- `Microsoft.ElasticSan/elasticSans/volumeGroups/volumes/write`
+- `Microsoft.ElasticSan/elasticSans/volumeGroups/volumes/read`
+
+> To delete an Elastic SAN datastore, you must have the following permissions:
+- `Microsoft.AVS/privateClouds/clusters/datastores/write`
+- `Microsoft.ElasticSan/elasticSans/volumeGroups/volumes/write`
+- `Microsoft.ElasticSan/elasticSans/volumeGroups/volumes/read`
+
+> For information about creating and modifying custom roles, see [create or update Azure custom roles using the Azure portal](../role-based-access-control/custom-roles-portal.md).
+
+</details>
+
 - Have a fully configured Azure VMware solution private cloud in a [region that Elastic SAN is available in](../storage/elastic-san/elastic-san-create.md).
     - Size your ExpressRoute gateways to handle your elastic SAN's bandwidth capabilities. For example, a single ultra performance ExpressRoute gateway supports a bandwidth of 1,280 mbps. An individual elastic SAN datastore used to its full potential would use the entirety of that bandwidth. Multiple gateways might be required depending on your needs.
 - Know the availability zone your private cloud is in.