1. Create a Service Account
- Go to the Google Cloud Console and select the project that contains your BigQuery instance
- Navigate to IAM & Admin > Service Accounts
- Click + Create service account
- Follow the prompts to fill out the form
2. Grant Required Permissions
When you get to the “Permissions” stage, select the following roles:
| Role | Description |
|---|
BigQuery Data Viewer (roles/bigquery.dataViewer) | Allows reading data from BigQuery tables |
BigQuery Job User (roles/bigquery.user) | Allows running queries and jobs |
BigQuery Read Session User (roles/bigquery.readSessionUser) | Required for efficient data transfer when reading large result sets |
Alternatively, you can create a custom role with read access to the specific datasets you would like Humm to access.
3. Generate a JSON Key
Once the service account is created, you need to create an access key for Humm to use:
- From the Service Accounts list view, find the service account you created
- Click Actions > Manage keys
- Click Add key > Create new key
- Select JSON as the key type
This will download a credentials file to your local machine.
Store this credentials file securely. Do not commit it to git or share it publicly. This file grants access to your BigQuery data.
4. Upload the Credentials to Humm
- Log into Humm and navigate to Integrations > Add Integration
- Locate BigQuery and click Configure
- Fill out the form as directed and paste the contents of the downloaded credentials file into the Service account credentials JSON field
Alternatively, you can provide the credentials file to your Humm account rep and we can configure the connection for you.