BigQuery

1. Create a Service Account

What: Create a service account to allow secure programmatic access to your BigQuery data.

How:

1. Go to Google Cloud Console > IAM & Admin > Service Accounts
2. Click + Create service account
3. Name it (e.g., "querio-data-access")
4. Add a description (optional): "Querio access to BigQuery data"
5. Click Create and continue

Google Documentation: Creating Service Accounts

2. Assign Required Roles

What: Add two specific roles to allow querying data in your project.

How:

1. Click Select a role dropdown

2. Add BigQuery Data Viewer role

   Important Note: When you assign roles in this step you are doing so at the project level, this means Querio would get access to all datasets in the project. If you do not wish to do so, please do no add this role here and add them only to the specific datasets as outlined in Step 5.

3. Click + Add another role

4. Add BigQuery Job User role

5. Click Continue then Done

Google Documentation: BigQuery IAM Roles

3. Create and Download Key File

What: Generate a JSON key file that contains the authentication credentials.

How:

1. Find the newly create service account in the list
2. Click the three dots (⋮) in the Actions column
3. Select Manage keys
4. Click Add Key dropdown -> select Create new key
5. Select JSON format
6. Click Create
7. Save the downloaded JSON file securely

Google Documentation: Creating Service Account Keys

4. Share Key File Securely

What: Share the key file you downloaded on Step 3 with Querio.

How:

1. Use a secure file transfer method to share the file with Querio.

5. [Optional] Specific Dataset Access

What: Ensure the service account can access the specific datasets needed.

How:

1. Go to BigQuery in Google Cloud Console

2. Locate the datasets you want Querio to access

   1. In the Explorer panel on the left side of the BigQuery interface
   2. Expand your project by clicking the arrow next to your project name
   3. You'll see a list of datasets under your project (they appear with a dataset icon next to their names)

3. Open each dataset, click Sharing, select Permissions and click on Add principal

4. Add the service account email created on Step 1

5. Select BigQuery Data Viewer role

6. Click Save

Google Documentation: Controlling Access to Datasets