You can log in to Google BigQuery with service-to-service or end user credentials.
Use Service-to-service authentication over End user authentication whenever possible. Managing distinct keys for various applications authenticating for the same service account allows the revocation of access for a specific application without requiring the other applications to update their authentication credentials.
Contact your Google Cloud Administrator for help with your Google BigQuery credentials.
Service-to-service authentication
Service-to-service authentication requires a Google Service Account File, also known as a service account JSON key file.
You can obtain a service account JSON key file from the Google Cloud Console or you can create a new key for an existing service account. More information about Google BigQuery can be found on the Google Big Query Documentation site under Creating and Managing Service Account Keys.
- In Authentication mode, select Service-to-Service.
- Click Select a file to select your Google service account file.
- In Open File, browse to and select the JSON file that contains your Google service account key.
Selecting the file enters your Google Cloud Service account key ID and Service account email, and then displays the BigQuery Table Input Config window. If your key file is invalid, an error displays.
End user authentication
- In Authentication mode, select End user.
- Enter your Client ID and Client Secret.
- Click Log in.
- In Sign in with Google, enter your Google email and password then click Allow to approve the connector's permission to access Google BigQuery on your behalf.
- Click Next.