BigQuery Setup Guide

Last updated: November 6, 2024

Step 1: Create a Service Account in Google Cloud Platform

  1. Log into the Google Cloud Console

  2. Navigate to IAM & Admin > Service Accounts

    • Go to the navigation menu (three horizontal lines in the top left corner).

    • Scroll down and find "IAM & Admin", then click on "Service Accounts".

  3. Create a New Service Account

    • Click on the "+ CREATE SERVICE ACCOUNT" button at the top.

    • Enter a service account name and description.

    • Click "CREATE".

  4. Grant the Service Account Access to the Project (Optional)

    • Choose a role that would allow querying in BigQuery (e.g., BigQuery Data Viewer).

    • Click "CONTINUE".

  5. Generate a JSON Key for the Service Account

    • Click on the newly created service account.

    • Go to the "KEYS" tab.

    • Click on "ADD KEY" and choose "Create new key".

    • Select "JSON" as the key type and click "CREATE".

    • A JSON file will be downloaded. Keep this file secure as it contains sensitive information.

Step 2: Grant the Service Account Access to BigQuery Dataset

  1. Navigate to BigQuery

    • In the Google Cloud Console, go to the navigation menu and click on "BigQuery".

  2. Select the Dataset

    • Find the dataset that contains the tables you want to query.

  3. Add the Service Account as a Member

    • Click on the dataset.

    • Go to "SHARE DATASET".

    • Add the service account by email under "Dataset permissions".

    • Assign a role that allows querying (e.g., BigQuery Data Viewer).

    • Click "SAVE".

Step 3: Share the Credentials Securely via Doppler

  1. Visit Doppler's Secure Sharing Site

  2. Upload the JSON Key File

    • Drag and drop or browse to upload the JSON key file you downloaded earlier.

  3. Set an Expiration for the Share Link

    • Choose an appropriate expiration time for the share link for security reasons.

  4. Share the Generated Link

    • Once the file is uploaded, Doppler will provide a secure link.

    • Share this link with the intended recipient (e.g., Aleph team).

Remember, the service account key file is sensitive. Ensure it is handled securely and shared only with authorized individuals.