diff --git a/README.md b/README.md
index 542b029..bebcb11 100644
--- a/README.md
+++ b/README.md
@@ -37,6 +37,8 @@ First, navigate to https://console.cloud.google.com, then IAM from the menu and
 
 The name of the service account you will need to assign permissions to is as following:`<YOUR_PROJECT_ID>@appspot.gserviceaccount.com` and will have been automatically created by Google App Engine. *NOTE:* this is done under *IAM*, selecting the account, choosing *Permissions* and then adding the role **Compute Instance Admin (v1)** to it; not under *Service Accounts*.
 
+If you would like to have a more least privileage permission please see the following [issue](https://github.com/doitintl/zorya/issues/96#issuecomment-723955407)
+
 ## Flow
 
 * Every hour on the hour a cron job calls `/tasks/schedule` which loop over all the policies