diff --git a/.github/.OwlBot.lock.yaml b/.github/.OwlBot.lock.yaml
index 98f19efe..419ccb9a 100644
--- a/.github/.OwlBot.lock.yaml
+++ b/.github/.OwlBot.lock.yaml
@@ -1,3 +1,3 @@
 docker:
   image: gcr.io/repo-automation-bots/owlbot-java:latest
-  digest: sha256:b3f8a219abf58ed4a775da5b90934b34f477b74f6f4e5d15781694dcc67b6f41
+  digest: sha256:2904b9ad921ecc1343d1cf815bfaafbcc1115c1f39593aef9f8e333ffda552f7
diff --git a/README.md b/README.md
index 5057c6a8..9ced44e5 100644
--- a/README.md
+++ b/README.md
@@ -11,11 +11,13 @@ Java idiomatic client for [Artifact Registry][product-docs].
 > Note: This client is a work-in-progress, and may occasionally
 > make backwards-incompatible changes.
 
+
 ## Quickstart
 
 
 If you are using Maven, add this to your pom.xml file:
 
+
 ```xml
 <dependency>
   <groupId>com.google.cloud</groupId>
@@ -25,11 +27,13 @@ If you are using Maven, add this to your pom.xml file:
 ```
 
 If you are using Gradle without BOM, add this to your dependencies
+
 ```Groovy
 compile 'com.google.cloud:google-cloud-artifact-registry:0.2.1'
 ```
 
 If you are using SBT, add this to your dependencies
+
 ```Scala
 libraryDependencies += "com.google.cloud" % "google-cloud-artifact-registry" % "0.2.1"
 ```
@@ -38,6 +42,10 @@ libraryDependencies += "com.google.cloud" % "google-cloud-artifact-registry" % "
 
 See the [Authentication][authentication] section in the base directory's README.
 
+## Authorization
+
+The client application making API calls must be granted [authorization scopes][auth-scopes] required for the desired Artifact Registry APIs, and the authenticated principal must have the [IAM role(s)][predefined-iam-roles] required to access GCP resources using the Artifact Registry API calls.
+
 ## Getting Started
 
 ### Prerequisites
@@ -127,6 +135,7 @@ This library follows [Semantic Versioning](http://semver.org/).
 It is currently in major version zero (``0.y.z``), which means that anything may change at any time
 and the public API should not be considered stable.
 
+
 ## Contributing
 
 
@@ -138,6 +147,7 @@ Please note that this project is released with a Contributor Code of Conduct. By
 this project you agree to abide by its terms. See [Code of Conduct][code-of-conduct] for more
 information.
 
+
 ## License
 
 Apache 2.0 - See [LICENSE][license] for more information.
@@ -170,6 +180,9 @@ Java is a registered trademark of Oracle and/or its affiliates.
 [maven-version-image]: https://img.shields.io/maven-central/v/com.google.cloud/google-cloud-artifact-registry.svg
 [maven-version-link]: https://search.maven.org/search?q=g:com.google.cloud%20AND%20a:google-cloud-artifact-registry&core=gav
 [authentication]: https://github.com/googleapis/google-cloud-java#authentication
+[auth-scopes]: https://developers.google.com/identity/protocols/oauth2/scopes
+[predefined-iam-roles]: https://cloud.google.com/iam/docs/understanding-roles#predefined_roles
+[iam-policy]: https://cloud.google.com/iam/docs/overview#cloud-iam-policy
 [developer-console]: https://console.developers.google.com/
 [create-project]: https://cloud.google.com/resource-manager/docs/creating-managing-projects
 [cloud-sdk]: https://cloud.google.com/sdk/