From 084df2bcdd47221cffb69627f8d0de3490061e6a Mon Sep 17 00:00:00 2001
From: pataquets <amontero@tinet.org>
Date: Tue, 7 Nov 2023 14:39:02 +0100
Subject: [PATCH] Readme: recommend less broad GCP User Role for permissions.

---
 README.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.rst b/README.rst
index b12456c..31a88d2 100644
--- a/README.rst
+++ b/README.rst
@@ -147,7 +147,7 @@ make sure to set up a `Service Account <https://cloud.google.com/iam/docs/servic
 - storage.objects.update
 - storage.objects.delete
 
-All five permissions listed above are e.g. included in the `predefined Cloud Storage IAM Role <https://cloud.google.com/storage/docs/access-control/iam-roles>`__ ``roles/storage.objectAdmin``.
+All five permissions listed above are e.g. included in the `predefined Cloud Storage IAM Role <https://cloud.google.com/storage/docs/access-control/iam-roles>`__ ``roles/storage.objectUser``.
 
 Expose your bucket name as an environment variable ``$TEST_BUCKET`` and run the tests via::