Introduction

Google’s BigQuery allows you to share a dataset to Kubit securely through Service Account. Because BigQuery separates computing from storage, Kubit will cover the cost of querying and won’t impact your SLA.

Share a Dataset

  1. Kubit can create the service account for you and provide you with a Kubit Service Account Email, typically in the format of <YOUR_ORG>@kubit-oauth.iam.gserviceaccount.com

📘

Note

Alternatively, you can create the Service Account yourself and share the JSON key file with Kubit. Please make sure to add [email protected] to "Service account users role" in step 3 "Grant user access to this service account (Optional)".

  1. In the BigQuery console, select a dataset from Resources, then click SHARE DATASET near the right side of the window.
1560
  1. In the Share dataset panel, in the Dataset permissions tab, enter the previously created Kubit Service Account Email to the Add members field. Then select the role BigQuery Data Viewer, click Add, then click DONE.
1600
  1. If you need to share multiple datasets from different GCP projects, you can just use the same Kubit Service Account Email when sharing every dataset.
  2. Finally, please also share the project id(s) with Kubit.

That's it!

Create Service Account‍

Enable BigQuery API

412
  • Search for “BigQuery API
457
  • Select it and click ENABLE
372

Create Account

566
  • Click “CREATE CREDENTIALS” and choose “Service account
565
  • Enter “Kubit” as the name for the service account. Then click CREATE.
  • Note: "Service account email" shown on the screen (e.g. kubit-###@<GCP-PROJECT_NAME>.iam.gserviceaccount.com) is "Kubit Service Account Email"
573 534

Select the newly created Service account. Click Keys - ADD KEY - Create new key.

447
  • Select JSON in the popup window. Click CREATE.
366
  • A JSON private key file will be downloaded to your computer.

📘

Important

Please send this file to Kubit securely!

  • Click CLOSE.