reorder argument in doc

Author: sreallymatt

docs/resources/conditional_access_policy.md

@@ -184,11 +184,12 @@ The following arguments are supported:
 `client_applications` block supports the following:
 
 * `excluded_service_principals` - (Optional) A list of service principal IDs explicitly excluded in the policy.
-* `included_service_principals` - (Optional) A list of service principal IDs explicitly included in the policy. Can be set to `ServicePrincipalsInMyTenant` to include all service principals. This is mandatory value when at least one `excluded_service_principals` is set.
 * `filter` - (Optional) A `filter` block as documented below.
 
 ~> **Note:** Specifying `filter` requires the `Attribute Definition Reader` role, this is not included in the `Global Administrator` or other administrator roles and must be separately assigned.
 
+* `included_service_principals` - (Optional) A list of service principal IDs explicitly included in the policy. Can be set to `ServicePrincipalsInMyTenant` to include all service principals. This is mandatory value when at least one `excluded_service_principals` is set.
+
 ---
 
 `devices` block supports the following: