BigQuery

For organization discovery, grant the BigQuery roles to the Teleskope connector service account at the organization level. For manual project enrollment, grant them on each enrolled project. The complete role list and organization-level Terraform example are on the GCP organization discovery page.

Required roles:

• roles/bigquery.jobUser

• roles/bigquery.metadataViewer

• roles/bigquery.dataViewer

Also grant the shared project-dispatch custom role from GCP organization discovery. It contains resourcemanager.projects.get and compute.regions.list, both of which run before BigQuery dispatch.

The BigQuery roles cover bigquery.datasets.get, bigquery.tables.get, bigquery.tables.list, bigquery.tables.getData, and bigquery.jobs.create.

For BigQuery deletion or masking workflows, also grant roles/bigquery.dataEditor.

Organization reconciliation discovers which projects contain BigQuery datasets and verifies access independently for each project. Projects without BigQuery resources are not applicable and do not block other GCP connectors.