yujunjun/OpenMetadata
1
0
Fork 0
mirror of https://github.com/open-metadata/OpenMetadata.git synced 2025-07-24 17:59:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
OpenMetadata/openmetadata-docs/content/connectors/database/bigquery/roles.md
Mayur Singal 9f99296ea0
Bigquery Docs Fix (#10692) 
* Bigquery Docs Fix

* typo fix

* keycloak sso

* GCP Create Custom Role
2023-03-21 16:55:57 +01:00

2.8 KiB
Raw Blame History

title slug
BigQuery /connectors/database/bigquery/roles

Create custom role in GCP

This documentation will guide you on how to create a custom role in GCP with the necessary permissions to ingest BigQuery in OpenMetadata.

Step 1: Navigate to Roles

Search for Roles in your GCP console and select the first result under IAM & Roles section.

Navigate to Roles

Step 2: Create Role & Add Permissions

Below the search bar you should see a Create Role button click on that & navigate to create role page.

Create Role Button

Once You are on the create role page, you can edit the description & title of the role and finally you can click on add permissions to grant permissions to role.

Create Role

You can search for the required permissions in the filter box and add them accordingly. To ingest metadata from BigQuery you need to grant the following permissions to the user.

# GCP Permission Required For
1 bigquery.datasets.get Metadata Ingestion
2 bigquery.tables.get Metadata Ingestion
3 bigquery.tables.getData Metadata Ingestion
4 bigquery.tables.list Metadata Ingestion
5 resourcemanager.projects.get Metadata Ingestion
6 bigquery.jobs.create Metadata Ingestion
7 bigquery.jobs.listAll Metadata Ingestion
8 datacatalog.taxonomies.get Fetch Policy Tags
9 datacatalog.taxonomies.list Fetch Policy Tags
10 bigquery.readsessions.create Bigquery Usage & Lineage Workflow
11 bigquery.readsessions.getData Bigquery Usage & Lineage Workflow

Add Permissions

Once you have added all the required permissions, you can create the role by clicking on the create button.

Add Permissions

Step 3: Assign Role to Service Account

To assign the created role, you can navigate to IAM and click on Grant Access and you can search your service account in the Add Principals section & Assign the created role to the service account.

Add Permissions