- Create a Service Account
- Give the Service Account BigQuery Data Viewer, BigQuery Job User, BigQuery Resource Viewer access
- Create a temporary dataset and give BiqQuery Data Editor access to the service account
- Generate a Service Account JSON key
- Configure your data connection in Datafold
Create a Service Account
To connect Datafold to your BigQuery project, you will need to create a service account for Datafold to use.- Navigate to the Google Developers Console, click on the drop-down to the left of the search bar, and select the project you want to connect to.
- Note: If you do not see your project, you may need to switch accounts.
- Click on the hamburger menu in the upper left, then select IAM & Admin followed by Service Accounts.
- Create a service account named
Datafold.
Service Account Access and Permissions
The Datafold service account requires the following roles and permissions:- BigQuery Data Viewer for read access on all the datasets in the project.
- BigQuery Job User to run queries.
- BigQuery Resource Viewer to fetch the query logs for parsing lineage.
