Skip to main content

OAuth 2.0 for Google BigQuery

Configure Alteryx Analytics Cloud (AAC) to integrate with your Google BigQuery deployment using OAuth 2.0 to authenticate.

Prerequisites

  • A Google Cloud Platform (GCP) project. If you don't have a GCP project, follow these steps.

  • A Google account with appropriate permissions for your project (Owner or Editor roles).

Create OAuth 2.0 Client App in Google BigQuery

In the GCP console, you must create a client app.

  1. Open the GCP Console in your web browser and then sign in with your Google account that has the required permissions.

  2. Go to the APIs & Services Section. On the left navigation panel, select APIs & Services.

  3. Select Credentials and then select Create Credentials.

  4. From the dropdown, select OAuth client ID.

  5. Configure the OAuth Client…

    1. Application type: Select the type of application that will use the OAuth client ID. Choose the appropriate option based on your application (for example, Web application for a web-based app or Desktop app for a desktop application).

    2. Name: Enter a descriptive name for your OAuth client ID (for example, My Documentation App OAuth Client). This name will help you identify the client later.

    3. Authorized redirect URIs (optional): If your application requires redirect URIs for the OAuth flow (for example, after user authorization), specify them here. Separate multiple URIs with commas. However, this step is optional for documentation purposes.

  6. Select Create.

  7. Save the Client ID and Client Secret in a secure location, you will use these values in the next step.

    重要

    The Client ID is a public value that you can share. It identifies your application to Google’s OAuth 2.0 server. The Client Secret is a sensitive value. Don't share it publicly. You use the Client Secret to generate access tokens and t should be kept confidential.

Create OAuth 2.0 Client for Google BigQuery in AACAAC

After you create the Google BigQuery client app, you must create an OAuth 2.0 client in AACAAC. The AACAAC client app integrates with the OAuth 2.0 Client app that you created in GCP.

  1. Sign in to AACAAC as a Workspace Admin工作区管理员.

  2. Select the Profile menu > Workspace Admin > OAuth 2.0 Clients.

  3. On the OAuth 2.0 Clients page, select Register OAuth 2.0 client.

  4. Configure these fields for the new client…

    1. From the Type dropdown, select biqquery.

    2. Under Name, enter a descriptive name for the client.

    3. Enter the Client ID value you created during the GCP client app setup.

    4. Enter the Client Secret value you created during the GCP client app setup.

    5. Under Authorization URL, enter https://accounts.google.com/o/oauth2/v2/auth.

    6. Under Token URL, enter https://oauth2.googleapis.com/token.

    7. Under Scopes, enter these listed values...

      注意

      You must separate each scope with a space.

      1. https://www.googleapis.com/auth/bigquery

      2. https://www.googleapis.com/auth/cloud-platform

    8. Under Access Token Expires In, enter 3599999.

    9. Under Refresh Token Expires In, enter 7775999999.

  5. Select Create.

For more information, go to Create OAuth2 Client.

本节内容如下: