Create a service account
In Google Cloud Console, switch to the target project and open IAM & Admin -> Service Accounts. Create a new service account for BaseDeck.
BigQuery Setup
Create a Google service account, grant the right BigQuery access, download a JSON key, then import it into BaseDeck.
4-step flow
The JSON file is only a transfer step. After import, BaseDeck stores the credential in Keychain and does not keep the original file path.
In Google Cloud Console, switch to the target project and open IAM & Admin -> Service Accounts. Create a new service account for BaseDeck.
Give the service account the permissions it needs. A common read-only setup is:
roles/bigquery.jobUserroles/bigquery.metadataViewerroles/bigquery.dataViewer
Open the service account, go to Keys, then click
Add key -> Create new key -> JSON. Your browser
will download a .json file.
In the BigQuery connection form, enter your projectId,
optionally set a defaultDataset, then click
Choose JSON Key and select the downloaded file.
Important
If the Create new key action is missing or disabled, you may not have permission to manage service account keys, or your Google Cloud organization may block key creation by policy.
Google Cloud reference: Create and delete service account keys
Security note
After importing, BaseDeck stores the credential in Keychain and does not keep the original file path. If this JSON key is only for BaseDeck, you can remove the downloaded file from your machine.
Next step
Once the JSON key is ready, open BaseDeck, create the BigQuery connection, and verify that the schema explorer loads with the expected datasets.