diff --git a/cli/internal/cloudcmd/iamupgrade.go b/cli/internal/cloudcmd/iamupgrade.go
index 642903294..729af5d29 100644
--- a/cli/internal/cloudcmd/iamupgrade.go
+++ b/cli/internal/cloudcmd/iamupgrade.go
@@ -22,9 +22,6 @@ import (
 // UpgradeRequiresIAMMigration returns true if the given cloud provider requires an IAM migration.
 func UpgradeRequiresIAMMigration(provider cloudprovider.Provider) bool {
 	switch provider {
-	case cloudprovider.GCP:
-		// TODO(@3u13r): remove this case after the v2.22.0 release
-		return true
 	default:
 		return false
 	}
diff --git a/docs/docs/getting-started/install.md b/docs/docs/getting-started/install.md
index f120b865a..f072407d8 100644
--- a/docs/docs/getting-started/install.md
+++ b/docs/docs/getting-started/install.md
@@ -263,6 +263,11 @@ To [create a Constellation cluster](../workflows/create.md), you need the follow
 * `compute.firewalls.delete`
 * `compute.firewalls.get`
 * `compute.firewalls.update`
+* `compute.forwardingRules.create`
+* `compute.forwardingRules.delete`
+* `compute.forwardingRules.get`
+* `compute.forwardingRules.setLabels`
+* `compute.forwardingRules.list`
 * `compute.globalAddresses.create`
 * `compute.globalAddresses.delete`
 * `compute.globalAddresses.get`
diff --git a/docs/docs/reference/migration.md b/docs/docs/reference/migration.md
index 36bfb1462..eb55d650b 100644
--- a/docs/docs/reference/migration.md
+++ b/docs/docs/reference/migration.md
@@ -3,6 +3,12 @@
 This document describes breaking changes and migrations between Constellation releases.
 Use [`constellation config migrate`](./cli.md#constellation-config-migrate) to automatically update an old config file to a new format.
 
+## Migrations to v2.23.0
+
+### GCP
+
+GCP will require the additional permission `compute.forwardingRules.list`. Please update your IAM roles using `constellation iam upgrade apply`.
+
 ## Migrations to v2.19.1
 
 ### Azure
diff --git a/docs/versioned_docs/version-2.23/getting-started/install.md b/docs/versioned_docs/version-2.23/getting-started/install.md
index f120b865a..f072407d8 100644
--- a/docs/versioned_docs/version-2.23/getting-started/install.md
+++ b/docs/versioned_docs/version-2.23/getting-started/install.md
@@ -263,6 +263,11 @@ To [create a Constellation cluster](../workflows/create.md), you need the follow
 * `compute.firewalls.delete`
 * `compute.firewalls.get`
 * `compute.firewalls.update`
+* `compute.forwardingRules.create`
+* `compute.forwardingRules.delete`
+* `compute.forwardingRules.get`
+* `compute.forwardingRules.setLabels`
+* `compute.forwardingRules.list`
 * `compute.globalAddresses.create`
 * `compute.globalAddresses.delete`
 * `compute.globalAddresses.get`
diff --git a/docs/versioned_docs/version-2.23/reference/migration.md b/docs/versioned_docs/version-2.23/reference/migration.md
index 36bfb1462..eb55d650b 100644
--- a/docs/versioned_docs/version-2.23/reference/migration.md
+++ b/docs/versioned_docs/version-2.23/reference/migration.md
@@ -3,6 +3,12 @@
 This document describes breaking changes and migrations between Constellation releases.
 Use [`constellation config migrate`](./cli.md#constellation-config-migrate) to automatically update an old config file to a new format.
 
+## Migrations to v2.23.0
+
+### GCP
+
+GCP will require the additional permission `compute.forwardingRules.list`. Please update your IAM roles using `constellation iam upgrade apply`.
+
 ## Migrations to v2.19.1
 
 ### Azure