Minor updates + ms.date

Author: FaithOmbongi

concepts/tutorial-entra-private-access.md

@@ -29,7 +29,9 @@ In this tutorial, you learn how to configure Microsoft Entra Private Access prog
 To complete the steps in this tutorial:
 
 - Install and configure the Private Network Access connector. For more information, see [Add an on-premises application for remote access through application proxy in Microsoft Entra ID](/entra/identity/app-proxy/application-proxy-add-on-premises-application).
-- Sign in to an API client such as [Graph Explorer](https://aka.ms/ge) with an account that has at least the *Application Administrator* and *Global Secure Access Administrator* [Microsoft Entra roles](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json).
+- Sign in to an API client such as [Graph Explorer](https://aka.ms/ge) with an account that has supported administrator roles. The following [Microsoft Entra roles](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) are the least pivileged for the operations in this tutorial:
+  - Application Administrator for creating the app
+  - Global Secure Access Administrator for configuring the Global Secure Access-related settings on the app
 - Grant consent to the app for the *Directory.ReadWrite.All* and *NetworkAccess.ReadWrite.All* delegated permissions.
 - Have a test user to assign to the application.