Update docs re necessary permission

docs/jupiterone.md

@@ -149,6 +149,7 @@ integration by configuring a custom role with the following permissions:
 appengine.applications.get
 binaryauthorization.policy.get
 compute.projects.get
+orgpolicy.policies.get
 ```
 
 See the
@@ -206,6 +207,15 @@ resourcemanager.organizations.getIamPolicy
 cloudasset.assets.searchAllIamPolicies
 ```
 
+The integration will also try to ingest organization policy for
+"storage.publicAccessPrevention" to precisely calculate storage buckets public
+access, it is therefore recommended that the following permission is also
+included in the custom role above:
+
+```
+orgpolicy.policies.get
+```
+
 1. Navigate to the Cloud Resource Manager for that organization and
    [add a new member to the organization](https://cloud.google.com/resource-manager/docs/access-control-org#grant-access).
    The new member email address is the email address of the service account that