Set Up Google BigQuery

Prerequisites

• a Google Cloud project with BigQuery enabled;
• a dataset in the required location;
• authority to grant IAM access;
• a clear decision about whether Vendo needs read access, write access, or both.

Connect with Vendo’s Service Account

1. In Vendo, open Data → Apps and add Google BigQuery.
2. Choose Vendo Service Account.
3. Enter the GCP project ID.
4. Copy the service-account address displayed in the form.
5. In Google Cloud IAM, grant that principal the roles shown in the form for the agreed scope.
6. Return to Vendo and select Load Datasets.
7. Choose the intended dataset and verify access.
8. Save the app.

The form currently checks read and write access separately. A failed write check can be acceptable for a strictly read-only source, but it blocks workflows that need to create or update tables.

Connect with Your Own Service Account

1. In Google Cloud, create a dedicated service account for Vendo.
2. Grant the minimum roles on the intended project and dataset.
3. Create a JSON key only if your policy permits long-lived keys.
4. In Vendo’s BigQuery form, choose Bring your own service account.
5. Paste the complete JSON into Service Account JSON.
6. Enter the project and dataset IDs.
7. Save the app and run a narrow integration test.

Delete any local copy of the downloaded key after it is stored in the approved secret system.

Verify End to End

For a source connection, run a schema discovery or limited query and compare it with BigQuery. For a destination, send a small, identifiable batch and verify the target table, row count, schema, timestamps, and identifiers.

Troubleshooting

Related

• Grant service-account access
• BigQuery overview
• Destination troubleshooting