Update README.md

Author: jamesyang-lucid

modules/org-read-delegation/README.md

@@ -5,7 +5,7 @@ This module should be set up in the management/root account in the organization.
 
 This module will create a bastion account with the provided account email and account name if no account id is provided. If an account id is provided, we will use that account as the bastion account.
 
-It will then delegate administrator access to the bastion account.
+It will then delegate administrator access to the bastion account. This account will receive organization-level permissions to scan your organization structure and configure permissions for member accounts.
 
 ## Usage
 
@@ -52,4 +52,4 @@ module "org_read_delegation" {
 |------|-------------|
 | <a name="output_bastion_account_id"></a> [bastion\_account\_id](#output\_bastion\_account\_id) | The ID of the bastion account |
 | <a name="output_bastion_account_email"></a> [bastion\_account\_email](#output\_bastion\_account\_email) | The email of the bastion account |
-| <a name="output_bastion_account_name"></a> [bastion\_account\_name](#output\_bastion\_account\_name) | The name of the bastion account |
+| <a name="output_bastion_account_name"></a> [bastion\_account\_name](#output\_bastion\_account\_name) | The name of the bastion account |