Skip to content

update the BQ permission requirement section #5098

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Aug 1, 2023

Conversation

reneewang21
Copy link
Contributor

@reneewang21 reneewang21 commented Jul 31, 2023

Proposed changes

Updating the permissions required if a rETL BigQuery customer creates the __segment_reverse_etl dataset themselves.

Merge timing

ASAP once approved

Related issues (optional)

@reneewang21 reneewang21 requested a review from a team as a code owner July 31, 2023 19:27
@reneewang21 reneewang21 requested review from forstisabella and stayseesong and removed request for a team July 31, 2023 19:27
@@ -39,4 +39,11 @@ Permission | Details
`bigquery.datasets.get` | This allows Segment to determine if the aforementioned dataset exists
`bigquery.jobs.create` | This allows Segment to execute queries on any datasets/tables your model query references and manage tables that Segment uses for tracking

The `bigquery.datasets.*` permissions can be scoped only to the `__segment_reverse_etl` dataset. If you don't wish to grant `bigquery.datasets.create` access, you may create this dataset yourself, but Segment still needs `bigquery.datasets.get` access.
If you don't wish to grant `bigquery.datasets.create` access, you may create this dataset yourself, and Segment needs the following permissions:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
If you don't wish to grant `bigquery.datasets.create` access, you may create this dataset yourself, and Segment needs the following permissions:
If you don't want to grant Segment `bigquery.datasets.create` access, you can create your own `__segment_reverse_etl` dataset and give Segment the following permissions:

@@ -39,4 +39,11 @@ Permission | Details
`bigquery.datasets.get` | This allows Segment to determine if the aforementioned dataset exists
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
`bigquery.datasets.get` | This allows Segment to determine if the aforementioned dataset exists
`bigquery.datasets.get` | This allows Segment to determine if the aforementioned dataset exists.

@@ -39,4 +39,11 @@ Permission | Details
`bigquery.datasets.get` | This allows Segment to determine if the aforementioned dataset exists
`bigquery.jobs.create` | This allows Segment to execute queries on any datasets/tables your model query references and manage tables that Segment uses for tracking
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
`bigquery.jobs.create` | This allows Segment to execute queries on any datasets/tables your model query references and manage tables that Segment uses for tracking
`bigquery.jobs.create` | This allows Segment to execute queries on any datasets/tables your model query references and manage tables that Segment uses for tracking.

Comment on lines 45 to 47
`bigquery.datasets.get` | This allows Segment to determine if the `__segment_reverse_etl` dataset exists
`bigquery.tables.create` | This allows Segment to determine if the tables Segment uses to track state in `__segment_reverse_etl` dataset exists
`bigquery.jobs.create` | This allows Segment to execute queries on any datasets/tables your model query references and manage tables that Segment uses for tracking
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
`bigquery.datasets.get` | This allows Segment to determine if the `__segment_reverse_etl` dataset exists
`bigquery.tables.create` | This allows Segment to determine if the tables Segment uses to track state in `__segment_reverse_etl` dataset exists
`bigquery.jobs.create` | This allows Segment to execute queries on any datasets/tables your model query references and manage tables that Segment uses for tracking
`bigquery.datasets.get` | This allows Segment to determine if the `__segment_reverse_etl` dataset exists.
`bigquery.tables.create` | This allows Segment to determine if the tables Segment uses to track state in the `__segment_reverse_etl` dataset exists.
`bigquery.jobs.create` | This allows Segment to execute queries on any datasets or tables your model query references, and also allows Segment to manage tables used for tracking.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey @stayseesong, I assume the above suggested change for line 47 applies to line 40 as well?

@stayseesong stayseesong added the content-update updates to content that are not new features, includes grammar fixes, added notes label Aug 1, 2023
@stayseesong stayseesong merged commit c7bb8da into develop Aug 1, 2023
@stayseesong stayseesong deleted the retl-update-bq-permission-requirement branch August 1, 2023 16:16
@github-actions
Copy link
Contributor

github-actions bot commented Aug 1, 2023

Thank you for your contribution! Your pull request is merged, but may take a day or two to appear on the site.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
content-update updates to content that are not new features, includes grammar fixes, added notes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants