diff --git a/powerbi-docs/transform-model/dataflows/dataflows-azure-data-lake-storage-integration.md b/powerbi-docs/transform-model/dataflows/dataflows-azure-data-lake-storage-integration.md
index bf8a89f9c6..0ee924858f 100644
--- a/powerbi-docs/transform-model/dataflows/dataflows-azure-data-lake-storage-integration.md
+++ b/powerbi-docs/transform-model/dataflows/dataflows-azure-data-lake-storage-integration.md
@@ -28,7 +28,7 @@ There are two ways to configure which ADLS Gen 2 store to use: you can use a ten
 
 - The storage account must be created in the same Azure Active Directory tenant as the [Power BI tenant](/power-bi/admin/service-admin-where-is-my-tenant-located#how-to-find-the-default-region-for-your-organization).
 
-- The user must have Storage Blob Data Contributor role, and a Owner role at the storage account level.
+- The user must have Azure Blob Data Owner role, Azure Blob Data Reader role, and a Owner role at the storage account level (scope should be *this resource* and not inherited).  Any applied role changes may take a few minutes to sync, and must sync before the following steps can be completed in the Power BI service. 
 
 - The Power BI workspace tenant region should be the same as the storage account region.