Skip to main content
If you can’t run queries yet, use this page to request the exact access your internal Google Cloud admin should grant.

Minimum required roles

For a read-only analyst workflow, request:
  1. Project-level role
    • roles/bigquery.jobUser
  2. Dataset-level roles
    • roles/bigquery.dataViewer on sm_transformed_v2
    • roles/bigquery.dataViewer on sm_metadata
Optional:
  1. roles/bigquery.dataViewer on sm_experimental (if querying MTA/experimental tables)
  2. roles/bigquery.dataViewer on any custom tenant datasets you need
roles/bigquery.jobUser lets users create query jobs. roles/bigquery.dataViewer lets users read/query dataset data.

Copy/paste message to send your admin

Subject: BigQuery access request for SourceMedium analysis

Hi Admin Team,

Please grant BigQuery access for:
- Principal: <user-or-group-email>
- Project: <PROJECT_ID>

Required permissions:
1) Project-level role:
   - roles/bigquery.jobUser

2) Dataset-level roles:
   - roles/bigquery.dataViewer on <PROJECT_ID>.sm_transformed_v2
   - roles/bigquery.dataViewer on <PROJECT_ID>.sm_metadata

Optional (if needed for MTA/experimental analysis):
- roles/bigquery.dataViewer on <PROJECT_ID>.sm_experimental

Success criteria after grant:
- `bq query --use_legacy_sql=false --dry_run 'SELECT 1 AS ok'` succeeds
- `bq query --use_legacy_sql=false "SELECT 1 FROM \`<PROJECT_ID>.sm_transformed_v2.obt_orders\` LIMIT 1"` succeeds

Thanks.

How admins grant this access

  1. Project role (bigquery.jobUser):
    • Go to IAM for the project and grant the role to the user/group.
  2. Dataset roles (bigquery.dataViewer):
    • In BigQuery, open dataset sharing/permissions and grant role on each required dataset.

Official references

  1. BigQuery IAM roles:
  2. Dataset/table/view IAM in BigQuery:
  3. Project IAM role management: