Permissions
The service account needs the BigQuery Data Viewer and Job User roles, plus BigQuery Connection User if you query through BigQuery Connections. The setup command grants all three.Read-only queries
Run read-only SQL during investigations and measure the impact of open issues.BigQuery Connections
Only if you query through BigQuery Connections (federated queries to Cloud SQL, Postgres and others). Granted by: BigQuery Connection User (roles/bigquery.connectionUser).
- Ordyn rejects project-level BigQuery write permissions when its connection check can verify them.
- The setup command grants BigQuery Data Viewer on the whole project. To limit Ordyn to the datasets you choose, grant Data Viewer on those datasets instead. Job User stays at the project level.
How to grant
Grant the roles
Grant the roles
2026-10-16.1. See permission changes.