Solved: Unable to Execute Dataform Workflow due to "IAM pe... - Page 2

so0710 · 09-26-2023 08:46 PM

Hello

I've been facing an issue trying to execute a workflow in Dataform. Every time I attempt to run it, I'm met with an "IAM permission denied for service account your-service-account-name" error.

スクリーンショット 2023-09-27 12.36.57.png

Here's a summary of the steps I've taken to troubleshoot:

Ensured the following permissions have been granted: BigQuery Data Editor, BigQuery Data Viewer, BigQuery Job User, and BigQuery Data Owner. Still facing the issue.
Tried granting BigQuery Administrator and Dataform Administrator roles.
Attempted to run the default template provided during repository initialization post-creation, but the same error persisted.
Verified that I have Owner permissions on my own account, yet the problem remains.

I'm at a bit of a loss here, and would greatly appreciate any insights or advice from anyone who may have encountered a similar issue or has any suggestions to offer.

Thank you in advance for your assistance.

ms4446

It seems like you have done a thorough job checking the permissions and trying different browsers. Your steps for executing via the command line are correct, and it's good to see that it works with the service account when you revoke your personal credentials.

Regarding the error with the --debug flag, it seems there might be a version difference or it might not be supported in the command you are using. You can check the documentation or use dataform --help to see the available options for debugging.

For the issue with the dashboard, consider the following:

Dashboard Service Account Configuration:
- Double-check if the dashboard is configured to use the correct service account. Sometimes, the dashboard might use a different service account or credentials, leading to permission issues.
Project Settings in Dashboard:
- Review the project settings within the Dataform dashboard. Ensure that the project is linked to the correct Google Cloud project and that the service account configuration in the dashboard matches the one you are using in the command line.
Additional Permissions:
- There might be additional permissions or roles needed when executing from the dashboard. Check the documentation of Dataform to ensure all necessary permissions are granted.
Dataform Support:
- Since the issue is specific to the dashboard, reaching out to Dataform support might provide more insights. They can help verify the dashboard configuration and ensure it is set up correctly to use the service account.
Debugging in Dashboard:
- Look for any debugging or log options within the Dataform dashboard. It might provide more detailed error messages or information about the permission denied error.

By exploring these areas, you might be able to identify and resolve the issue with executing workflows from the Dataform dashboard.

View solution in original post

Unable to Execute Dataform Workflow due to "IAM permission denied for service account"