From 94942c1b257e7652849c53a8df0093e57ec556ad Mon Sep 17 00:00:00 2001 From: stayseesong Date: Fri, 22 Aug 2025 12:10:03 -0700 Subject: [PATCH 1/3] BQ data graph permissions --- src/unify/data-graph/setup-guides/BigQuery-setup.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/unify/data-graph/setup-guides/BigQuery-setup.md b/src/unify/data-graph/setup-guides/BigQuery-setup.md index 3fc986648e..f43a2f7a9b 100644 --- a/src/unify/data-graph/setup-guides/BigQuery-setup.md +++ b/src/unify/data-graph/setup-guides/BigQuery-setup.md @@ -11,6 +11,8 @@ redirect_from: Set up your BigQuery data warehouse to Segment for the [Data Graph](/docs/unify/data-graph/data-graph/). +As long as the service account has been granted permissions to read tables from both projects, the customer should be good to go. + ## Step 1: Roles and permissions > warning "" > You need to be an account admin to set up the Segment BigQuery connector as well as write permissions for the `__segment_reverse_etl` dataset. @@ -52,6 +54,9 @@ To grant read-only access for the Data Graph: 5. Select the **BigQuery Data Viewer role**. 6. Click **Save**. +> info "" +> You can grant permissions to access data from multiple projects for the BigQuery service account you use. + ## *(Optional)* Step 4: Restrict read-only access If you want to restrict access to specific datasets, grant the BigQuery Data Viewer role on datasets to the service account. Make sure to grant read-only access to the Profiles Sync dataset. From 623211dc847e596db702f5abf5f06df56cab5ceb Mon Sep 17 00:00:00 2001 From: stayseesong Date: Fri, 22 Aug 2025 12:11:30 -0700 Subject: [PATCH 2/3] [netlify-build] --- src/unify/data-graph/setup-guides/BigQuery-setup.md | 1 + 1 file changed, 1 insertion(+) diff --git a/src/unify/data-graph/setup-guides/BigQuery-setup.md b/src/unify/data-graph/setup-guides/BigQuery-setup.md index f43a2f7a9b..6ed95c4ba6 100644 --- a/src/unify/data-graph/setup-guides/BigQuery-setup.md +++ b/src/unify/data-graph/setup-guides/BigQuery-setup.md @@ -57,6 +57,7 @@ To grant read-only access for the Data Graph: > info "" > You can grant permissions to access data from multiple projects for the BigQuery service account you use. + ## *(Optional)* Step 4: Restrict read-only access If you want to restrict access to specific datasets, grant the BigQuery Data Viewer role on datasets to the service account. Make sure to grant read-only access to the Profiles Sync dataset. From 5bc2340625e855a10ab1cdfe0fddbad0668a5614 Mon Sep 17 00:00:00 2001 From: stayseesong <83784848+stayseesong@users.noreply.github.com> Date: Mon, 25 Aug 2025 11:07:03 -0700 Subject: [PATCH 3/3] Update BigQuery-setup.md --- src/unify/data-graph/setup-guides/BigQuery-setup.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/src/unify/data-graph/setup-guides/BigQuery-setup.md b/src/unify/data-graph/setup-guides/BigQuery-setup.md index 6ed95c4ba6..f3d29e15b8 100644 --- a/src/unify/data-graph/setup-guides/BigQuery-setup.md +++ b/src/unify/data-graph/setup-guides/BigQuery-setup.md @@ -11,8 +11,6 @@ redirect_from: Set up your BigQuery data warehouse to Segment for the [Data Graph](/docs/unify/data-graph/data-graph/). -As long as the service account has been granted permissions to read tables from both projects, the customer should be good to go. - ## Step 1: Roles and permissions > warning "" > You need to be an account admin to set up the Segment BigQuery connector as well as write permissions for the `__segment_reverse_etl` dataset.