Setting up access on Google Cloud Platform

1. Create new service account. Note the service account ID for use in the below instructions.

2. Assign roles to account:

   • BigQuery Job User

   • Compute Engine Viewer

3. Assign IAM policy to account: gcloud iam service-accounts get-iam-policy $SERVICE_ACCOUNT_ID > policy.yml

4. edit policy.yml to add:

   policy.yml

   bindings:
   - members:
   - serviceAccount:$SERVICE_ACCOUNT_ID
   role: roles/iam.serviceAccountTokenCreator

5. gcloud iam service-accounts set-iam-policy $SERVICE_ACCOUNT_ID policy.yml

6. In the Cloud API console enable the following APIs:

   • IAM Service Account Credentials API

   • Compute Engine API

   • BigQuery API

7. Create a service account key for the new account

   • Go to https://console.cloud.google.com/apis/credentials

   • Click on "create credentials"

   • Select "service account key"

   • Select the new service account and JSON key format

   • Save the resulting JSON

8. Set up billing

   • Go to https://console.cloud.google.com/billing

   • Select "Billing export"

   • Enable big query export

9. Enter the following details on the Infrastructure Provider settings page

   • The credentials JSON

   • The Google Cloud Project ID

   • The Google Cloud billing account ID

   • The name of the BigQuery dataset with the billing export