If you can’t run queries yet, use this page to request the exact access your internal Google Cloud admin should grant.
Minimum required roles
For a read-only analyst workflow, request:
- Project-level role
- Dataset-level roles
roles/bigquery.dataViewer on sm_transformed_v2
roles/bigquery.dataViewer on sm_metadata
Optional:
roles/bigquery.dataViewer on sm_experimental (if querying MTA/experimental tables)
roles/bigquery.dataViewer on any custom tenant datasets you need
roles/bigquery.jobUser lets users create query jobs. roles/bigquery.dataViewer lets users read/query dataset data.
Copy/paste message to send your admin
Subject: BigQuery access request for SourceMedium analysis
Hi Admin Team,
Please grant BigQuery access for:
- Principal: <user-or-group-email>
- Project: <PROJECT_ID>
Required permissions:
1) Project-level role:
- roles/bigquery.jobUser
2) Dataset-level roles:
- roles/bigquery.dataViewer on <PROJECT_ID>.sm_transformed_v2
- roles/bigquery.dataViewer on <PROJECT_ID>.sm_metadata
Optional (if needed for MTA/experimental analysis):
- roles/bigquery.dataViewer on <PROJECT_ID>.sm_experimental
Success criteria after grant:
- `bq query --use_legacy_sql=false --dry_run 'SELECT 1 AS ok'` succeeds
- `bq query --use_legacy_sql=false "SELECT 1 FROM \`<PROJECT_ID>.sm_transformed_v2.obt_orders\` LIMIT 1"` succeeds
Thanks.
How admins grant this access
- Project role (
bigquery.jobUser):
- Go to IAM for the project and grant the role to the user/group.
- Dataset roles (
bigquery.dataViewer):
- In BigQuery, open dataset sharing/permissions and grant role on each required dataset.
Official references
- BigQuery IAM roles:
- Dataset/table/view IAM in BigQuery:
- Project IAM role management:
Related pages