'Authorized views using external tables without granting access to GCS

We have 2 GCP projects project-a and project-b. And we want to give access to some external tables in the first project to users in second project using Authorized Views.

Here's what we've done so far:

  • create a couple of BigQuery tables in project-a (private dataset) as external tables from GCS parquet files
  • create a dataset (public dataset) in project project-b in which we created authorized views on the external tables from project project-a

enter image description here

However if we give access to users in the project project-b to query the public views they receive this error:

Access Denied: BigQuery BigQuery: Permission denied while globbing file pattern.

I know this means they should also have read permission on GCS buckets of project-a but we can't grant this permission in GCS.

Is there a way to achieve this? Or maybe another way of doing?



Solution 1:[1]

AFAIK, you must have the permission to access to the external data location to access the data (GCS, Google Sheet, or whatever are located the external data). There is no trick for that

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1 guillaume blaquiere