Granting Specific Permissions for BigQuery Datasets in Google Cloud

[rizwan_a8]

I have admin access to our company's Google Cloud account and have created two datasets in BigQuery. Now, I would like to assign specific permissions to one of our company's users for these datasets:

1. Dataset A: I want to give the user full access to Dataset A, including the ability to create, view, update, and delete any tables within this dataset.

2. Dataset B: For Dataset B, I’ve already created some tables, and I would like the user to only be able to upload data to the existing tables, without the ability to modify or delete the tables themselves.

Could someone guide me on how to configure these specific access controls in BigQuery for the user?

Thank you!

[Ramishka]

Hey there! It sounds like you’re diving into BigQuery permissions exciting stuff! Setting up these specific access controls is definitely doable and will let you tailor what each user can do. Here’s how you can give your colleague the right amount of access for each dataset. For Dataset A, where you want the user to have full control over tables (creating, viewing, updating, and even deleting), go to the BigQuery page in the Google Cloud Console, find Dataset A under Datasets, click the three dots next to it, and select Share Dataset. In the permissions panel, add the user’s email, and assign them the BigQuery Data Editor role, which allows full control of tables, along with the BigQuery Job User role to let them run queries. Save, and they’ll have full access to Dataset A! For Dataset B, where you want the user to be able to upload data but not modify tables, go back to the BigQuery page, locate Dataset B in the sidebar, click the three dots again, and choose Share Dataset. Add the user’s email, then assign them the BigQuery Data Viewer role, which lets them view tables but not alter them, along with the BigQuery Data Editor (limited) role to load or append data into existing tables without full editing rights. Save these changes, and that’s it! Your user will now have full access to Dataset A and restricted data-upload-only access to Dataset B, keeping your data secure and under control. Let me know if you have any other questions or need further assistance with BigQuery!