added Global Admin rights

Author: beigor1337

memdocs/intune/includes/win10-automatic-enrollment-aad.md

@@ -6,6 +6,7 @@ Automatic enrollment lets users enroll their Windows devices in Intune. To enrol
 
 - Azure Active Directory Premium subscription ([trial subscription](https://go.microsoft.com/fwlink/?LinkID=816845))
 - Microsoft Intune subscription
+- Global Administrator rights
 
 ### Configure automatic MDM enrollment
 
@@ -38,4 +39,4 @@ Automatic enrollment lets users enroll their Windows devices in Intune. To enrol
 
 6. Select **Save**.
 
-By default, two-factor authentication is not enabled for the service. However, two-factor authentication is recommended when registering a device. To enable two-factor authentication, configure a two-factor authentication provider in Azure AD and configure your user accounts for multi-factor authentication. See [Getting started with the Azure Active Directory Multi-Factor Authentication Server](/azure/multi-factor-authentication/multi-factor-authentication-get-started-cloud).
+By default, two-factor authentication is not enabled for the service. However, two-factor authentication is recommended when registering a device. To enable two-factor authentication, configure a two-factor authentication provider in Azure AD and configure your user accounts for multi-factor authentication. See [Getting started with the Azure Active Directory Multi-Factor Authentication Server](/azure/multi-factor-authentication/multi-factor-authentication-get-started-cloud).