Merge pull request #732 from MicrosoftDocs/master

Publish: updated permissions info in share-app.md

Author: AFTOwen

powerapps-docs/maker/canvas-apps/share-app.md

@@ -76,7 +76,11 @@ Before you share an app, you must save it to the cloud (not locally) and then pu
 
 ### Common Data Service for Apps
 
-If you create an app based on Common Data Service for Apps, you must also ensure that the users who will run it have the appropriate permissions for the entity or entities on which the app relies. Specifically, those users must belong to a security role that can perform tasks such as creating, reading, writing, and/or deleting relevant records. If you have **System administrator** or **System customizer** permissions for the database in this environment, you can create a custom role and then add users to it.
+If you create an app based on Common Data Service (CDS) for Apps, you must also ensure that the users who will run it have the appropriate permissions for the entity or entities on which the app relies. Specifically, those users must belong to a security role that can perform tasks such as creating, reading, writing, and/or deleting relevant records. In many cases, you'll want to create one or more custom security roles with the exact permissions that users need to use your apps. You can then add users to that role or roles as appropriate. 
+
+#### Prerequisite
+
+To perform the next two procedures, you must have **System administrator** permissions for a CDS for Apps database.
 
 #### Create a security role
 
@@ -122,4 +126,4 @@ If you create an app based on Common Data Service for Apps, you must also ensure
 
 ### Common Data Service (previous version)
 
-When you share an app that's based on an older version of the Common Data Service, you must share the runtime permission to the service separately. If you don’t have permission to do this, see your environment admin.
+When you share an app that's based on an older version of the Common Data Service, you must share the runtime permission to the service separately. If you don’t have permission to do this, see your environment admin.