Merge pull request #1 from asplulski/patch-2

Fix docs about needed permissions for GDI from SaaS GCP services

Author: asplulski

gdi/get-data-in/connect/gcp/gcp.rst

@@ -55,57 +55,65 @@ For more information, refer to Google's official announcement :new-page:`Introdu
       <h3>Select a role for your GCP service account<a name="gcp-one" class="headerlink" href="#gcp-one" title="Permalink to this headline">¶</a></h3>
    </embed>
 
-If you use GCP's :strong:`Project Viewer` role, you won't require any changes to your GCP setup to use Splunk Observability Cloud, and any update will be applied automatically. 
-
-If you want to use a more restrictive role than Project Viewer, make sure your selected role has sufficient permissions to connect to Splunk Observability Cloud, otherwise you'll get an error message when trying to connect. Review and activate any missing permissions, or change the role to Project Viewer.
+You can use GCP's :strong:`Viewer` role, it has all/most of the permissions you need. You can also create a more restrictive role with the permissions in the table.
 
 The following table specifies the permissions required for GCP integrations:
 
 .. list-table::
    :header-rows: 1
-   :widths: 40 60
+   :widths: 40 60 20
 
    *  - :strong:`Permission`
       - :strong:`Required?`
+      - :strong:`Included in GCP's Viewer role?`
 
    *  - ``compute.instances.list``
       - Yes, if the Compute Engine service is activated
+      - Yes
 
    *  - ``compute.machineTypes.list``
       - Yes, if the Compute Engine service is activated
+      - Yes
 
    *  - ``container.clusters.list``
       - Yes, if the Kubernetes (GKE) service is activated
+      - Yes
 
    *  - ``container.nodes.list``
       - Yes, if the Kubernetes (GKE) service is activated
+      - Yes
 
    *  - ``container.pods.list``
       - Yes, if the Kubernetes (GKE) service is activated
+      - Yes
 
    *  - ``monitoring.metricDescriptors.get``
       - Yes
+      - Yes
 
    *  - ``monitoring.metricDescriptors.list``
       - Yes
+      - Yes
 
    *  - ``monitoring.timeSeries.list``
       - Yes
+      - Yes
 
    *  - ``resourcemanager.projects.get``
       - Yes, if you want to sync project metadata (such as labels)
+      - Yes
 
    *  - ``serviceusage.services.use``
       - Yes, if you want to activate the use of a quota from the project where metrics are stored
-
-   *  - ``serviceusage.serviceUsageConsumer``
-      - Yes, for SQL services
+      - No, but included in ``roles/serviceusage.serviceUsageConsumer``
 
    *  - ``spanner.instances.list``
       - Yes, if the Spanner service is activated
+      - Yes
 
    *  - ``storage.buckets.list``
       - Yes, if the Spanner service is activated
+      - Yes
 
 .. _gcp-two: