# BigQuery

## Grant Teleskope Access to BigQuery

Attach the following roles to the Teleskope service account you created:

* roles/bigquery.jobUser
* roles/bigquery.metadataViewer
* roles/bigquery.dataViewer

## Terraform

| Variable    | Description                    | Example         |
| ----------- | ------------------------------ | --------------- |
| project\_id | (Required) Your GCP Project ID | "my-project-id" |

```
resource "google_project_iam_member" "teleskope" {
  for_each = toset([
    "roles/bigquery.jobUser",
    "roles/bigquery.metadataViewer",
    "roles/bigquery.dataViewer",
    "roles/bigquery.dataEditor"  // only need for deletion/masking purposes
  ])
  project = "project_id"
  role    = each.key
  members = "serviceAccount:${google_service_account.teleskope.email}"
}
```