diff --git a/google/cloud/sql/connector/instance.py b/google/cloud/sql/connector/instance.py
index f244b8cf3..3473f40cf 100644
--- a/google/cloud/sql/connector/instance.py
+++ b/google/cloud/sql/connector/instance.py
@@ -134,7 +134,7 @@ async def _perform_refresh(self) -> ConnectionInfo:
                 f"refresh operation failed: {str(e)}"
             )
             if e.status == 403:
-                e.message = "Forbidden: Authenticated IAM principal does not seem authorized to make API request. Verify 'Cloud SQL Admin API' is enabled within your GCP project and 'Cloud SQL Client' role has been granted to IAM principal."
+                e.message = "Forbidden: Authenticated IAM principal does not seem authorized to make API request. Verify 'Cloud SQL Admin API' is enabled within your GCP project and 'Cloud SQL Client', 'Service Usage Consumer' roles have been granted to IAM principal."
             raise
 
         except Exception as e: