google-bigquerylooker-studiogoogle-cloud-iamidentity-management

How to give access to a single Bigquery Dataset for a user to access the data in Datalooker?


I am able to give access to a single dataset and access only that dataset in the console.

So it's a Bigquery Data Editor and he can create tables, run SQL's and so on.

enter image description here

But I need for this user to also have access only to this Dataset using DataLooker:

What I tried:

Any ideas?

enter image description here


Solution

  • You need to assign roles at two different levels:

    1. Assign the BigQuery Data Editor role at the Dataset level

    When applied to a dataset, this role provides permissions to:

    Read the dataset's metadata and list tables in the dataset. Create, update, get, and delete the dataset's tables.

    enter image description here

    1. At the project level, you need to assign a role with the resourcemanager.projects.list and resourcemanager.projects.get permissions. While I recommend the Browser role for general browsing access, if you want to run queries and jobs, you should assign the BigQuery Job User role instead. This role provides additional permissions needed for running queries and jobs, effectively replacing the Browser role.

      • Read access to browse the hierarchy for a project, including the folder, organization, and allow policy.
      • This role doesn't include permission to view resources in the project.