diff --git a/python/ee/blob.py b/python/ee/blob.py
index c5694949c..09a28c208 100644
--- a/python/ee/blob.py
+++ b/python/ee/blob.py
@@ -37,8 +37,11 @@ def __init__(self, url: _arg_types.String):
     Args:
       url: Where to fetch the blob on GCS. Must start with "gs://". This must be
         a python str or a ComputedObject that returns an ee.String. The bucket
-        metadata must be accessible (check the storage.buckets.get permission)
-        and the bucket must be located in the US multi-region, a dual-region
+        metadata must be accessible  (requires the `storage.buckets.get`
+        permission which is provided by the role "Storage Legacy Bucket Reader",
+        among others, see
+        https://cloud.google.com/storage/docs/access-control/iam-roles) and
+        the bucket must be located in the US multi-region, a dual-region
         including US-CENTRAL1, or the US-CENTRAL1 region.
     """
     self.initialize()
diff --git a/python/ee/image.py b/python/ee/image.py
index 2a5f1b85a..08e234307 100644
--- a/python/ee/image.py
+++ b/python/ee/image.py
@@ -2521,9 +2521,11 @@ def loadGeoTIFF(uri: _arg_types.String) -> Image:
 
     Args:
       uri: The Cloud Storage URI of the GeoTIFF to load. The bucket metadata
-        must be accessible (check the storage.buckets.get permission) and the
-        bucket metadata must be located in the US multi-region, a dual-region
-        including US-CENTRAL1, or the US-CENTRAL1 region.
+        must be accessible (requires the `storage.buckets.get` permission which
+        is provided by the role "Storage Legacy Bucket Reader" among others, see
+        https://cloud.google.com/storage/docs/access-control/iam-roles) and the
+          bucket metadata must be located in the US multi-region, a dual-region
+          including US-CENTRAL1, or the US-CENTRAL1 region.
     """
 
     return apifunction.ApiFunction.call_('Image.loadGeoTIFF', uri)