diff --git a/modules/installation-gcp-permissions.adoc b/modules/installation-gcp-permissions.adoc
index 0757bc1db5..e0f52654da 100644
--- a/modules/installation-gcp-permissions.adoc
+++ b/modules/installation-gcp-permissions.adoc
@@ -34,6 +34,7 @@ When you attach the `Owner` role to the service account that you create, you gra
 
 .Required roles for using the Cloud Credential Operator in passthrough mode
 * Compute Load Balancer Admin
+* Tag User
 
 ifdef::template[]
 .Required roles for user-provisioned GCP infrastructure