Updated website service account bigquery permissions (datacommonsorg#…

…4755) Reduced from roles/bigquery.admin to roles/bigquery.dataViewer
hqpho · Nov 22, 2024 · e38240c · e38240c
1 parent 85f4e06
commit e38240c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/gke/get_storage_permission.sh b/gke/get_storage_permission.sh
@@ -30,7 +30,7 @@ SERVICE_ACCOUNT="$NAME@$PROJECT_ID.iam.gserviceaccount.com"
 
 # Data store project roles
 declare -a store_roles=(
-    "roles/bigquery.admin"   # BigQuery
+    "roles/bigquery.dataViewer"   # BigQuery
     "roles/bigtable.reader" # Bigtable
     "roles/storage.objectViewer" # Branch Cache Read
     "roles/pubsub.editor" # Branch Cache Subscription