Client does not have permission error with BigQuery

[fizique]

Hi there!
I have an automation script for working with BigQuery data. It’s very simple — it just reads rows from datasets in my project. Everything was working fine for a long time (over a year) until June 25th. After that date, I started encountering a 403 Error:

Your client does not have permission to get URL <my-project-bigquery-url>. That’s all we know.

I’m using a service account and the official Google Python SDK to interact with BigQuery, and I’d like to emphasize that everything worked correctly before June 25th. I’m not using any VPN or proxy to access the API.

I tried:
- Created a new service account
- Make a request via HTTP without Python Google SDK
- Change locations for checking about regions restristrictions
- Make a queries from UI in Google Cloud (It's working fine)
- Add more roles to service account
- My script is running on my VPS server so I ran script locally (I thought that Google maybe banned my server IP) but have a similar response

Do somebody have any suggestions?

[mokit]

Hi, @fizique.

Could you please double-check the following?

• Are you using the correct service account?
• Does your account have the necessary roles (e.g., BigQuery Viewer, BigQuery User) assigned in the Google Cloud IAM settings?
• Is the project and dataset URL correctly formatted?

Regards,
Mokit

[fizique]

Hi @mokit,

Thanks for your reply!
I’ve double-checked everything:

• I’m using the correct service account.

• This service account has the following roles: Owner, BigQuery Admin, BigQuery Data Viewer, and BigQuery Job Viewer.
• The project and dataset are correctly formatted, and I haven’t changed anything in my automation — but it stopped working on June 25th.

Also, I found something strange: I can run queries in the BigQuery UI using my user account, but when I try to run the same queries via the gcloud CLI in the terminal, I get the same permission error.
However, my account is basically the owner of the project, and I don’t see this error in the BigQuery UI.

[mokit]

During local development with the gcloud CLI, we often use multiple user accounts. Have you checked whether the correct user account was active? And, the project ID also?

[fizique]

Yeah, sure!
Take a look to my terminal output:

And when I tried to request data from BQ I got an error:

[marckevin]

Hi @fizique,

Welcome to Google Cloud Community!

In addition to @mokit’s insights, I understand that you've already performed multiple troubleshooting steps to address the 403 error, which likely suggests a higher-level access issue. Try Cloud Logging first for detailed log analysis to further diagnose the issue by reviewing logs related to the 403 error. If you are using VPC Service Controls for BigQuery or there are Organization Policies in place, check if there are security parameters or policies that might have restricted your access after June 25, 2025. 

If the issue persists, I’d recommend reaching out to Google Cloud Support. When reaching out, include detailed information and relevant screenshots of the errors you’ve encountered. This will assist them in diagnosing and resolving your issue more efficiently.

Was this helpful? If so, please accept this answer as “Solution”. If you need additional assistance, reply here within 2 business days and I’ll be happy to help.

[fizique]

Hi Marckevin,

Thank you for your reply. If I understand correctly, I don’t have any Organization Policies or VPC Service Controls in place.

Could you please clarify whether Google Support offers a free plan that includes chat support or something similar? On the Google Cloud Support page, I see that my plan is “Basic Support,” and it doesn’t mention benefits like live chat—is that correct?
If so, how can I request help in my situation?

Thank you in advance for your assistance.