add read session user

kevinsunny1996 · Sep 29, 2024 · 84c3769 · 84c3769
1 parent 96ec937
commit 84c3769
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/terraform/service_accounts.tf b/terraform/service_accounts.tf
@@ -26,4 +26,10 @@ resource "google_project_iam_binding" "bq_data_viewer" {
   project = local.id
   role    = "roles/bigquery.dataViewer"
   members = ["serviceAccount:${google_service_account.airflow_user_sa.email}"]
+}
+
+resource "google_project_iam_binding" "bq_read_session" {
+  project = local.id
+  role    = "roles/bigquery.readSessionUser"
+  members = ["serviceAccount:${google_service_account.airflow_user_sa.email}"]
 }