diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md
index 2ab2f3ba03..4e989318b6 100644
--- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md
+++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md
@@ -48,7 +48,6 @@ Before you can use non-destructive PIN reset, you must register two applications
 - Microsoft Pin Reset Service Production
 - Microsoft Pin Reset Client Production
 
-
 To register the applications, follow these steps:
 
 :::row:::
@@ -68,6 +67,14 @@ To register the applications, follow these steps:
     :::image type="content" alt-text="Screenshot showing the PIN reset service permissions final page." source="images/pinreset/pin-reset-service-prompt-2.png" lightbox="images/pinreset/pin-reset-service-prompt-2.png":::
   :::column-end:::
 :::row-end:::
+:::row:::
+  :::column span="3":::
+  3. Review the permissions requested by the *Microsoft Pin Reset Service Production* application and select **Accept** to give consent to both applications to access your organization.
+  :::column-end:::
+  :::column span="1":::
+    :::image type="content" alt-text="Screenshot showing the PIN reset service permissions final page." source="images/pinreset/pin-reset-service-prompt-2.png" lightbox="images/pinreset/pin-reset-service-prompt-2.png":::
+  :::column-end:::
+:::row-end:::
 
 ### Confirm that the two PIN Reset service principals are registered in your tenant