From e7cc5390d3e487812b36e728415885ce96ed22ec Mon Sep 17 00:00:00 2001
From: Wildan Gunawan <35158077+wildangunawan@users.noreply.github.com>
Date: Sun, 12 Sep 2021 15:49:31 +0800
Subject: [PATCH] Add list of the minimum required service account role

---
 README.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/README.md b/README.md
index 27cdd2a..02efafa 100644
--- a/README.md
+++ b/README.md
@@ -101,6 +101,14 @@ Set the `GOOGLE_APPLICATION_CREDENTIALS` environment variable with a path to the
 
 More info: https://cloud.google.com/docs/authentication/production
 
+## Service Account Roles
+
+If you're not using your master service account (which have all of the abilities), you must add the following roles to make it works:
+1. App Engine Viewer
+2. Cloud Tasks Enqueuer
+3. Cloud Tasks Viewer
+4. Service Account User
+
 # Configuring the queue
 
 When you first create a queue using `gcloud tasks queues create`, the default settings will look something like this: