[SSL] Add API Access warning for origin CA certificate

Updated warning note regarding API Access requirements for creating or revoking origin CA certificates.

Author: ngayerie

src/content/docs/ssl/origin-configuration/origin-ca/index.mdx

@@ -19,6 +19,11 @@ For more background information on origin CA certificates, refer to the [introdu
 Using Cloudflare origin CA certificates does not prevent you from using [delegated DCV](/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv/).
 :::
 
+:::warning[API Access required]
+Users who do not have [**API Access**](https://dash.cloudflare.com/?to=/:account/members) will receive an error while trying to create or revoke an origin CA certificate. 
+Refer to [Troubleshooting](/ssl/origin-configuration/origin-ca/troubleshooting/#this-zone-is-either-not-part-of-your-account-or-you-do-not-have-access-to-it) for guidance.
+:::
+
 ## Availability
 
 <FeatureTable id="ssl.origin_certificates" />
@@ -36,9 +41,7 @@ To create an Origin CA certificate in the dashboard:
    <DashButton url="/?to=/:account/:zone/ssl-tls/origin" />
 
 2. Select **Create Certificate**.
-   :::note[API Access required]
-   Users who do not have [**API Access**](https://dash.cloudflare.com/?to=/:account/members) will receive an error while trying to perform this action. Refer to [Troubleshooting](/ssl/origin-configuration/origin-ca/troubleshooting/#this-zone-is-either-not-part-of-your-account-or-you-do-not-have-access-to-it) for guidance.
-   :::
+
 3. Choose either:
    - **Generate private key and CSR with Cloudflare**: Private key type can be RSA or ECC.
    - **Use my private key and CSR**: Paste the Certificate Signing Request into the text field.