Assigned
Status Update
Comments
vi...@gmail.com <vi...@gmail.com> #2
+1
ro...@google.com <ro...@google.com>
bw...@google.com <bw...@google.com> #3
Thanks for the feedback. We will consider this for our future roadmap.
[Deleted User] <[Deleted User]> #4
+1
ta...@gmail.com <ta...@gmail.com> #5
Comment has been deleted.
Description
This is important when the Project Owner is not willing to give them any Dataset level access when in-fact their code only streams to a specific table.
Steps to reproduce:
1- Use a service account with BigQuery Data Editor at table level
2- Use this python code to try to insert data into your table:
table_ref = bigquery.DatasetReference(project = BQ_PROJECT, dataset_id = BQ_DATASET).table(table_id = BQ_TABLE)
table = client.get_table(table_ref)
rows_to_insert = [
{"col1": "streaming-r1", "col2": "A", "col3": "3"},
{"col1": "streaming-r2-", "col2": "B", "col4": 1},
]
stream_resp = client.insert_rows(table_ref,rows_to_insert,
selected_fields=table.schema)
3- Access Denied: Dataset PROJECT:DATASET: User does not have bigquery.datasets.get permission for dataset PROJECT:DATASET