CENSUSdataset ('dataset' is what Google calls their equivalent of a 'schema' in standard database terminology).In order for the Census connection to work correctly, the account you provide to Census must have these permissions:
CENSUSdataset (including creating and deleting tables, and reading and writing to all tables).
bigquery.dataViewer- Allows Census read-only access to list the datasets and tables in the BigQuery instance, and to get data from the tables.
bigquery.dataEditor- Allows Census full-admin access to the tables in the
bigquery.jobUser- Allows Census to create jobs to unload data.
bigquery.dataVieweraccess on the dataset or specific table you'd like Census to read from.
bigquery.dataEditoraccess on the
bigquery.dataOwneraccess on the
CENSUSdataset if you would like to additionally grant Census permissions to delete the
bigquery.JobUserrole or specifically the
bigquery.jobs.createpermission (via a custom role).
CENSUSdataset and three copy and paste-able commands you can use to grant permissions for this account on this project. The second command grants dataEditor on the newly created
gs://sutrolabs-giza-unloads-productionin the allow list for BigQuery unloads.