From e38240ce83c5afb1264d4ce37417ef98e190b76e Mon Sep 17 00:00:00 2001 From: Dan Noble Date: Fri, 22 Nov 2024 15:13:16 -0500 Subject: [PATCH] Updated website service account bigquery permissions (#4755) Reduced from roles/bigquery.admin to roles/bigquery.dataViewer --- gke/get_storage_permission.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gke/get_storage_permission.sh b/gke/get_storage_permission.sh index f9537e156c..5e8a38baa7 100755 --- a/gke/get_storage_permission.sh +++ b/gke/get_storage_permission.sh @@ -30,7 +30,7 @@ SERVICE_ACCOUNT="$NAME@$PROJECT_ID.iam.gserviceaccount.com" # Data store project roles declare -a store_roles=( - "roles/bigquery.admin" # BigQuery + "roles/bigquery.dataViewer" # BigQuery "roles/bigtable.reader" # Bigtable "roles/storage.objectViewer" # Branch Cache Read "roles/pubsub.editor" # Branch Cache Subscription