diff --git a/google.tf b/google.tf
index 45f76d3..b981cc7 100644
--- a/google.tf
+++ b/google.tf
@@ -202,6 +202,7 @@ resource "google_project_iam_custom_role" "automq_byoc_gke_role" {
     "container.auditSinks.delete",
     "container.auditSinks.get",
     "container.nodes.list",
+    "container.networkPolicies.get",
     "container.clusters.connect",
     "container.clusters.create",
     "container.clusters.createTagBinding",