diff --git a/exchange/exchange-ps/exchange/Export-ContentExplorerData.md b/exchange/exchange-ps/exchange/Export-ContentExplorerData.md
index 85f8802e21..ca44354a41 100644
--- a/exchange/exchange-ps/exchange/Export-ContentExplorerData.md
+++ b/exchange/exchange-ps/exchange/Export-ContentExplorerData.md
@@ -48,6 +48,8 @@ The following list describes best practices for scripts using this cmdlet:
 
   > [!TIP]
   > To support unattended scripts that run for a long time, you can use [certificate-based authentication (CBA)](https://learn.microsoft.com/powershell/exchange/app-only-auth-powershell-v2).
+  >
+  > To use the Azure app, add the Content Explorer List Viewer` role group to the Service Principal Identity.
 
 To use this cmdlet in Security & Compliance PowerShell, you need to be assigned permissions. For more information, see [Permissions in the Microsoft Purview compliance portal](https://learn.microsoft.com/purview/microsoft-365-compliance-center-permissions).