Google BigQuery Authorization

If you haven't already done so, you will need to set up a Google BigQuery account before you begin the process described below. You can follow the Google quickstart guide and may also want to read the Google BigQuery documentation. If you are using an IP whitelist for your Google BigQuery account, contact your account administrator to configure your Lytics account to use our fixed IP, then add the Lytics fixed IP (104.154.89.25) to your IP whitelist.

There are two different options for authorization with Google BigQuery:

• User Account
• Service Account

See Google's authentication documentation for details on the differences between user and service accounts. See the end of this document for information on how to give 3rd parties access to export data in BigQuery.

This option uses your user account to access your Google BigQuery data. You must have permission to list projects, create and write to tables, and create jobs in order for BigQuery exports and imports to run properly.

1. Log into your Lytics account.
2. Click Data > Integrations and select Google from the Integrations list.
3. Select Authorizations from the menu on the left.
4. Click New Authorization and select Big Query OAuth.
5. From the user selection window, select the Google account you want to use from the list of accounts.
6. Click Allow.
7. In the Description textbox, enter a meaningful description for this authorization.

8. Click Authorize.

This option uses a service account to access your Google BigQuery data.

1. You will need a service account credential file to use this authorization type. If you do not have one, follow the instructions in Google's documentation to create one.
   • For imports and exports, the service account must be able to list projects, create and write to tables, and create jobs. The combination of BigQuery Data Editor and BigQuery Job User permissions will satisfy the requirements. Learn more about the BigQuery permissions here.
2. Log into your Lytics account.
3. Click Data > Integrations and select Google from the Integrations list.
4. Select Authorizations from the menu on the left.
5. Click New Authorization and select Big Query Service Account JWT.
6. In Cert JSON textbox, copy the contents of the service account's credential file.
7. In the Description textbox enter a meaningful description for this authorization.
8. Click Authorize.

When exporting data from Lytics to BigQuery, you can specify email addresses that you would like to give access to. However, if you later decide that you would like to give access to another person, you can do this from within BigQuery. See Google's documentation regarding access controls for datasets.