Document permissions for build service account

brabster · Jan 3, 2024 · 524785a · 524785a
1 parent 7fc50f8
commit 524785a
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/WIF_SETUP.md b/.github/WIF_SETUP.md
@@ -62,6 +62,12 @@ gcloud iam service-accounts add-iam-policy-binding "${WIF_SERVICE_ACCOUNT}@${DBT
   --member="serviceAccount:${WIF_SERVICE_ACCOUNT}@${DBT_PROJECT}.iam.gserviceaccount.com" 
 ```
 
+```console
+gcloud projects add-iam-policy-binding "${DBT_PROJECT}" \
+  --role="roles/bigquery.admin" \
+  --member="serviceAccount:${WIF_SERVICE_ACCOUNT}@${DBT_PROJECT}.iam.gserviceaccount.com" 
+```
+
 # Recover Secrets for GitHub
 
 ```console