workload-identity-federation-create-trust.md: roles allowed

[cnotin]

• "Application Owner" is not an Entra role (cf. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference), even though indeed the "owner" of an app is indeed authorized. So i've written it separately
• "Application Developer" role does not allow to update federated credentials (try: you'll get an access denied)
• on the contrary, "Global Admin", and "Hybrid Identity Administrator" allow it

[prmerger-automator]

@cnotin : Thanks for your contribution! The author(s) have been notified to review your proposed change.

[learn-build-service-prod]

Learn Build status updates of commit 109a559:

✅ Validation status: passed

File	Status	Preview URL	Details
docs/workload-id/workload-identity-federation-create-trust.md	✅Succeeded

For more details, please refer to the build report.

For any questions, please:

• Try searching the learn.microsoft.com contributor guides
• Post your question in the Learn support channel

[learn-build-service-prod]

Learn Build status updates of commit 9da0c86:

✅ Validation status: passed

File	Status	Preview URL	Details
docs/workload-id/workload-identity-federation-create-trust.md	✅Succeeded

For more details, please refer to the build report.

For any questions, please:

• Try searching the learn.microsoft.com contributor guides
• Post your question in the Learn support channel

[learn-build-service-prod]

Learn Build status updates of commit d9b1780:

✅ Validation status: passed

File	Status	Preview URL	Details
docs/workload-id/workload-identity-federation-create-trust.md	✅Succeeded

For more details, please refer to the build report.

For any questions, please:

• Try searching the learn.microsoft.com contributor guides
• Post your question in the Learn support channel

[Court72]

@rwike77

Can you review the proposed changes?

Important: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

[github-actions]

This pull request has been inactive for 90 days. If you are finished with your changes, don't forget to sign off. See the contributor guide for instructions.

If this PR is inactive for 1 more day, it will be closed automatically. Thank you!

Microsoft Entra Content Team Contact Us

[cnotin]

Still valid!