diff --git a/docs/integrations/cloud/gcp-secret-manager.mdx b/docs/integrations/cloud/gcp-secret-manager.mdx
index 0f21a6a9d..6425acff6 100644
--- a/docs/integrations/cloud/gcp-secret-manager.mdx
+++ b/docs/integrations/cloud/gcp-secret-manager.mdx
@@ -51,6 +51,8 @@ description: "How to sync secrets from Infisical to GCP Secret Manager"
Using Infisical to sync secrets to GCP Secret Manager requires that you enable
the Service Usage API and Cloud Resource Manager API in the Google Cloud project you want to sync secrets to. More on that [here](https://cloud.google.com/service-usage/docs/set-up-development-environment).
+
+ Additionally, ensure that your GCP account has the right roles for the selected project (Secrets Manager Admin and Service Usage Admin)
@@ -115,6 +117,7 @@ description: "How to sync secrets from Infisical to GCP Secret Manager"
+
Using the GCP Secret Manager integration (via the OAuth2 method) on a self-hosted instance of Infisical requires configuring an OAuth2 application in GCP
@@ -123,27 +126,27 @@ description: "How to sync secrets from Infisical to GCP Secret Manager"
Navigate to your project API & Services > Credentials to create a new OAuth2 application.
-
- 
- 
-
+
+ 
+ 
+
Create the application. As part of the form, add to **Authorized redirect URIs**: `https://your-domain.com/integrations/gcp-secret-manager/oauth2/callback`.
-
- 
+
+ 
Obtain the **Client ID** and **Client Secret** for your GCP OAuth2 application.
-
- 
-
+
+ 
+
Back in your Infisical instance, add two new environment variables for the credentials of your GCP OAuth2 application:
- `CLIENT_ID_GCP_SECRET_MANAGER`: The **Client ID** of your GCP OAuth2 application.
- `CLIENT_SECRET_GCP_SECRET_MANAGER`: The **Client Secret** of your GCP OAuth2 application.
-
+
Once added, restart your Infisical instance and use the GCP Secret Manager integration.
+
-