As a prerequisite for adding a BigQuery Credential, you’ll need to have a BigQuery Remote Host set up. Please refer to Add a New Database to do so.
You may add a BigQuery database credential using Google OAuth or a Service Account. In general, using OAuth is easier and more secure.
BigQuery OAuth Credentials
OAuth uses a short-lived, frequently updated credential connected to your Google user account.
Prerequisites
Before beginning, please ensure that you have a Google account which is authorized to access a BigQuery database. If you’re unsure of this, please contact your Google Cloud Platform administrator.
Steps
- Click “Credential” in the top navigation menu under “Admin”.
- Click the “Create Credential” button in the top right.
- Enter a Name for the credential, then in the Type dropdown select “Database”.
- After selecting “Database”, an OAuth checkbox will appear to the right of the dropdown. Select it.
- Select the “Remote Host” for this credential. This should be your BigQuery database.
- Click the “Update Google Authentication” button. This will cause a Google authentication prompt to pop up.
- Select the Google account that has access to your BigQuery database and confirm the prompts.
- Click “Save”.
You can now use this credential to connect to your BigQuery database!
BigQuery Service Account Credentials
Service account credentials are long-lived tokens associated with a service account. They require the existence of a service account which is shared on the appropriate data.
Follow these instructions to create a Platform database credential for connecting with BigQuery:
- Create a service account for BigQuery. We recommend creating this account in your BigQuery billing project.
- The service account should have the following minimum required permissions:
- dataEditor
- jobUser
- Create a JSON key for the service account.
- Follow these instructions to create a credential in Platform:
- Name: Whatever is useful to you, the service account name is a good option.
- Type: “Database”
- Username: The service account name.
- Password: The entire JSON blob of the service account key.
- Note: Please ensure that all values are present which includes the opening and closing curly braces. If the key is not included in its entirety, Civis Platform may fail to connect to your Google Service Account.
- Description: Optional. Whatever is useful to you; can be used to store the key ID.
- Remote Host: Select your BigQuery database .
- Default: “True”
- Note: This is important as it will tell Platform to automatically use this credential for all queries to your selected BigQuery remote host.
Comments
0 comments
Article is closed for comments.