You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/connections/storage/catalog/bigquery/index.md
+9-7Lines changed: 9 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -105,27 +105,29 @@ from <project-id>.<source-name>.<collection-name>_view
105
105
For early customers using BigQuery with Segment, rather than providing Segment
106
106
with credentials, access was granted to a shared Service Account
107
107
(`connector@segment-1119.iam.gserviceaccount.com`). While convenient for early
108
-
adopters, this presented potential security risks that Segment would prefer to address
109
-
proactively.
108
+
adopters, this presented potential security risks.
110
109
111
110
As of **March 2019**, Segment requires BigQuery customers to
112
111
create their own Service Accounts and provide the app with those credentials instead.
113
112
In addition, any attempts to update warehouse connection settings will also
114
113
require these credentials. This effectively deprecates the shared Service
115
114
Account.
116
115
117
-
To stay ahead of this change, migrate your warehouse by following
118
-
the instructions in the "Create a Service Account for Segment" section above.
116
+
Migrate your warehouse from a shared Service Account to a dedicated Service Account
117
+
by creating a new Service Account using the [Create a Service Account for Segment](#create-a-service-account-for-segment) section.
119
118
Then, head to your warehouse's connection settings and update with the
120
-
**Credentials** you created. Once you've verified that data is loading properly to your warehouse, [remove access to the shared Service Account](#remove-access-to-the-shared-service-account).
119
+
**Credentials** you created. Once you've verified that data is loading properly
120
+
to your warehouse, [remove access to the shared Service Account](#remove-access-to-the-shared-service-account).
121
121
122
122
### Remove access to the shared Service Account
123
-
After you've [created a new Service Account for Segment](#create-a-service-account-for-segment) and verified that the data is loading properly, remove access to the shared Service Account (`connector@segment-1119.iam.gserviceaccount.com`) using the following instructions:
123
+
After you've [created a new Service Account for Segment](#create-a-service-account-for-segment) and
124
+
verified that the data is loading into your warehouse properly, remove access to the shared Service Account
125
+
(`connector@segment-1119.iam.gserviceaccount.com`) using the following instructions:
124
126
125
127
1. Sign in to the [Google Developers Console](https://console.developers.google.com).
126
128
2. Open the IAM & Admin product, and select **IAM**.
127
129
3. From the list of projects, select the project that BigQuery is enabled for.
128
-
4. On the project's page, select the **Permissions** tab, and then select**view by PRINCIPALS**.
130
+
4. On the project's page, select the **Permissions** tab, and then click**view by PRINCIPALS**.
129
131
5. Select the checkbox for the `connector@segment-1119.iam.gserviceaccount.com`account and then click **Remove** to remove access to this shared Service Account.
0 commit comments