added roles (#20703)

Author: marciocloudflare

src/content/docs/magic-cloud-networking/get-started.mdx

@@ -122,7 +122,9 @@ The first discovery of resources may not succeed in all regions, while the IAM p
 ### 2. Authorize access to your Google account
 
 1. Create a new [GCP service account](https://cloud.google.com/iam/docs/service-accounts-create) in your **Google account** > **GCP Console** > **IAM & Admin** > **Service Accounts**.
-2. Grant the new service account the **Compute Network Admin** role.
+2. Grant the new service account these roles:
+	- `Compute Network Admin`
+	- `Compute Viewer`
 3. Grant the **Service Account Token Creator** role to our bot account to allow it to impersonate this service account. Learn how to grant a specific role [in Google's documentation](https://cloud.google.com/iam/docs/manage-access-service-accounts#grant-single-role):
    - `[email protected]`
 4. In **Provide the new service account email**, enter the email account that you used to create the GCP service account.