Grant Teleskope Access to BigQuery

Attach the following roles to the Teleskope service account you created:

• roles/bigquery.jobUser

• roles/bigquery.metadataViewer

• roles/bigquery.dataViewer

Terraform

Variable	Description	Example
project_id	(Required) Your GCP Project ID	"my-project-id"

resource "google_project_iam_member" "teleskope" {
  for_each = toset([
    "roles/bigquery.jobUser",
    "roles/bigquery.metadataViewer",
    "roles/bigquery.dataViewer",
    "roles/bigquery.dataEditor"  // only need for deletion/masking purposes
  ])
  project = "project_id"
  role    = each.key
  members = "serviceAccount:${google_service_account.teleskope.email}"
}