BigQuery

​

1. BigQuery Access Setup

​

Step 1: Create a New Service Account in the GCP project you want Pavo to access

​

Step 2: Grant BigQuery Permissions

• In the Google Cloud Console, switch to the project that contains the BigQuery data you want us to read.
• In the left navigation bar, go to IAM & Admin → IAM.
• Click Grant access
• In New principals, enter: name of the created sa <sa_name>@<project>.iam.gserviceaccount.com
• In Role, add the following roles (you may need to add multiple):

gcloud projects add-iam-policy-binding <CUSTOMER_PROJECT_ID> \
--member="serviceAccount:<sa_name>@<project>.iam.gserviceaccount.com" \
--role="roles/bigquery.metadataViewer"

gcloud projects add-iam-policy-binding <CUSTOMER_PROJECT_ID> \
--member="serviceAccount:<sa_name>@<project>.iam.gserviceaccount.com" \
--role="roles/bigquery.jobUser"

gcloud projects add-iam-policy-binding <CUSTOMER_PROJECT_ID> \
--member="serviceAccount:<sa_name>@<project>.iam.gserviceaccount.com" \
--role="roles/bigquery.resourceViewer"

• Click Save.

​

Step 3: Create Analysis Dataset [IMPORTANT]

1. Required: Create a new BigQuery dataset by the name ‘pavo_dataset’ (Use this specific name for the dataset, this will be used for temporary tables during analysis)
2. Required: Grant the Pavo service account the BigQuery Data Editor role for this dataset