Describe the minimum IAM permissions for BigQuery

[NDAT-802]: https://hasurahq.atlassian.net/browse/NDAT-802?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ

PR-URL: https://github.com/hasura/graphql-engine-mono/pull/10117
GitOrigin-RevId: 290406c5c44f4642d3a8a5b1e56dc894961a4e3e
This commit is contained in:
Tom Harding 2023-08-18 15:05:43 +02:00 committed by hasura-bot
parent 32ef306e99
commit e36985ed67

View File

@ -39,6 +39,15 @@ Here is how you can get started with Hasura and BigQuery:
-->
## Minimum required IAM permissions
* BigQuery queries through Hasura require the `bigquery.jobs.create` and `bigquery.jobs.get` permissions to send a job to the BigQuery servers.
* The `bigquery.tables.getData` permission allows Hasura to query your BigQuery data source. Note that mutations are not currently supported for BigQuery, and so no corresponding `updateData` permission is required.
* To use the Hasura Console to edit your data source, several different permissions may be required depending on your actions:
* `bigquery.datasets.create` and `bigquery.datasets.delete` for creating and deleting datasets.
* `bigquery.routines.create`, `bigquery.routines.update`, and `bigquery.routines.delete` for managing user-defined functions and stored procedures.
* `bigquery.table.create`, `bigquery.tables.list`, `bigquery.tables.get`, `bigquery.tables.delete`, and `bigquery.tables.update` to manage the dataset definition.
## Supported features
Hasura currently supports queries and relationships on BigQuery.