On this page

Bigquery Connection

Connect Google BigQuery to Statsig Warehouse Native, including service account setup, dataset permissions, and required IAM roles.

How BigQuery connection works

To set up a connection with BigQuery, there are two supported methods:

  • Grant Permissions to a Statsig-owned Service Account
  • Provide Credentials for Your Own First-Party Service Account

In both cases, you need:

  • Your BigQuery Project ID
  • The dataset Statsig uses to save temporary tables and materialized results

After you choose your method, start by enabling the BigQuery source in your project settings.

Grant permissions to Statsig's service account

Grant Statsig access to your BigQuery data from your Google Cloud console.

  1. In your BigQuery's IAM & Admin settings, add the Statsig service account you copied in the Statsig Console as a new principal for your project and give it the following roles:
    • BigQuery User

BigQuery IAM permissions configuration

  1. Navigate to your BigQuery SQL Workspace, choose the dataset, click + Sharing > Permissions > Add Principal, and give the same Statsig service account the "BigQuery Data Viewer" role. Repeat for any datasets you want the service user to access.

    BigQuery dataset permissions interface

  2. Repeat step 2 to give the "BigQuery Data Editor" role on the dataset Statsig uses for staging data.

If your data warehouse is IP protected, you must include allowlisting of Statsig IP ranges in your setup steps.

The service account has the required permissions to run queries and materialize results.

Using a first-party service account

This method isn't recommended. Using service accounts is the preferred option for enhanced security.
  1. On the BQ service accounts page, click 'Manage Keys' for the service account you want to use

BQ 1st party service account

  1. Create a new JSON key (which will download a JSON file)

    BQ 1st party service account

    BQ 1st party service account

  2. In the Statsig Settings -> Data Connection tab, paste the above key into the Service Account Private Key field under the Advanced toggle.

Additional BigQuery resources

BigQuery project ID

Find your BigQuery Project ID:

  1. Click on your Project Dropdown inside your Cloud Console.

Frame 4

  1. Copy and paste relevant Project ID from the modal pop-up.

Frame 5

If your data warehouse is IP protected, you must include allowlisting of Statsig IP ranges in your setup steps.

Statsig Customer ID on BigQuery

C01d5f80s

IP addresses Statsig accesses data warehouses from

Go to FAQ

Additional setup for Warehouse Explorer

Warehouse Explorer lets you find and bring data from any table into Statsig for ad-hoc analysis.

Statsig reads from INFORMATION_SCHEMA.COLUMNS, which requires explicit permission to view table metadata. Grant access by repeating steps 1 and 2 from the Grant Permissions section for the "BigQuery Metadata Viewer" role.

Was this helpful?