Google BigQuery Authorization

If you haven't already done so, you will need to set up a Google BigQuery account before you begin the process described below. You can follow the Google quickstart guide and may also want to read the Google BigQuery documentation.

There are two different options for authorization with Google BigQuery: User Account and Service Account. See Google's authentication documentation for details on the differences between user and service accounts. See the end of this document for information on how to give 3rd parties access to export data in BigQuery.

If you are new to creating authorizations in Lytics, see the Authorizations Dashboard documentation for more information.

1. Select Google Cloud from the list of providers.
2. Select the authorization method. Note that different methods may support different job types. Google BigQuery supports the following authorization methods:
   • User Account
   • Service Account
3. Enter a Label to identify your authorization.
4. (Optional) Enter a Description for further context on your authorization.
5. Complete the configuration steps needed for your authorization. These steps will vary by method.
6. Click Save Authorization.

This option uses your Google user account to access your BigQuery data. Note that you must have projectEditor permissions on the project you are importing from in order for BigQuery exports and imports to run properly with User Account authorization.

1. Select Big Query OAuth.
2. From the user selection window, select the Google account you want to use from the list of accounts.
3. Click Allow.

This option uses a service account to access your Google BigQuery data.

1. You will need a service account credential file to use this authorization type. If you do not have one, follow the instructions in Google's documentation to create one.
   • For imports and exports, the service account must be able to list projects, create and write to tables, and create jobs. The combination of BigQuery Data Editor and BigQuery Job User permissions will satisfy the requirements. Learn more about the BigQuery permissions here.
2. In your Lytics account, select Big Query Service Account JWT. Note there are different options for Import and Export.
3. In Cert JSON textbox, copy the contents of the service account's credential file.

When exporting data from Lytics to BigQuery, you can specify email addresses that you would like to give access to. However, if you later decide that you would like to give access to another person, you can do this from within BigQuery. See Google's documentation regarding access controls for datasets.