Clarify read replica Entra admin permissions banner

[MXClyde]

Summary

Improves documentation banner clarity for the Direct Database Access (read replica) feature to prevent confusion about Entra admin permissions.

Problem

Partners and customers were confused about why Service Principals need to be added as Entra Admin on the primary database just to get read-only access to the read replica. It appeared as though everyone needed full admin rights on production.

Solution

Adds an explicit clarifying sentence to the existing banner stating that network access to the primary database is blocked by NSG rules, ensuring only the read replica can be accessed despite having admin rights in the database.

Changes

File: content/en/docs/deployment/mx-azure/configuration/mx-azure-direct-database-access.md

Before:

Users added here only have full Read access to the database, as network access is restricted to the read replica only using Network Security Group rules.

After:

Users added here only have full Read access to the database, as network access is restricted using Network Security Group rules. This means that access to the primary database is blocked and only the read replica can be accessed.

Context

• Use case: Setting up read replica access during POC

Testing

Documentation change only - no code changes.

[MXClyde]

@katarzyna-koltun-mx Could you please merge this when you're back at the helm? No rush....

[MarkvanMents]

Thanks for the PR - and the comprehensive description of why it is needed.
Rewording looks good. I'll approve and merge as Kasia is away today.
@katarzyna-koltun-mx FYI