Assigned
Status Update
No update yet.
Comments
se...@google.com
Hello,
Thank you for reaching out. I'm going to create an internal feature request. Please keep in mind that this feature request has to be analyzed and considered by the product team and I can't provide you ETA for it to be delivered. However, you can keep track of the status by following this thread.
Description
Currently, if a customer sets up a BigQuery Trace Sink, they are given a command to run manually to give the generated service account permissions to write to that BigQuery dataset.
However, if the customer is part of an Organization with restrictions on what domains can be given write permissions, there is no way for grant the correct IAM permissions without changing the Org policies, which may not be allowed in some Orgs. The Logs Router, which our export pipeline is based off of, does not have this problem.
This issue report has been forwarded to the product engineering team so that they may investigate it, but there is no ETA for a resolution at this time. Future updates regarding this issue will be provided here