From 84c3769d455e0bf0066a4a8fee290e59521d00fa Mon Sep 17 00:00:00 2001 From: Kevin Parasseril Date: Sun, 29 Sep 2024 19:08:52 +0530 Subject: [PATCH] add read session user --- terraform/service_accounts.tf | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/terraform/service_accounts.tf b/terraform/service_accounts.tf index 8fa59ea..93a3a8f 100644 --- a/terraform/service_accounts.tf +++ b/terraform/service_accounts.tf @@ -26,4 +26,10 @@ resource "google_project_iam_binding" "bq_data_viewer" { project = local.id role = "roles/bigquery.dataViewer" members = ["serviceAccount:${google_service_account.airflow_user_sa.email}"] +} + +resource "google_project_iam_binding" "bq_read_session" { + project = local.id + role = "roles/bigquery.readSessionUser" + members = ["serviceAccount:${google_service_account.airflow_user_sa.email}"] } \ No newline at end of file