Require more roles for BigQuery connection #630
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
A prospect mentioned that: > EPPO document describes that the service account needs only roles/bigquery.jobUser . > Don't need permission to read data? > For example, roles/bigquery.user, roles/bigquery.dataViewer . > The reason I asked this question is because I was getting permission errors on my test connection. with a screen capture that reads: > Failed to add database connection: Access Denied: Dataset <…> > Permission bigquery.tables.create denied on dataset <…> (or it may not exist).
✅ Deploy Preview for eppo-data-docs ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
aarsilv
reviewed
Mar 17, 2025
| 7. Under **Service account permissions**, add the following roles: | ||
| - `BigQuery Job User (roles/bigquery.jobUser)` | ||
| - Required | ||
| - `BigQuery User (roles/bigquery.user)` |
There was a problem hiding this comment.
AI suggests roles/bigquery.dataEditor may accomplish what we need with less permissions than user
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
A prospect mentioned that:
with a screen capture that reads:
I don‘t have easy access to a BigQuery instance to validate that we need more, independently of step 2. and 3.