An organization is setting up detailed cost analytics and needs to export daily Cloud Billing data to a BigQuery dataset located in a central management project. A cloud engineer has already been granted the BigQuery Data Editor role on the destination project and dataset, but receives a permission denied error when attempting to configure the BigQuery export sink in the Google Cloud Console. Which Identity and Access Management (IAM) role must be assigned to the engineer on the Cloud Billing account to successfully complete this export setup?
- Billing Account Costs ManagerCevap
- BProject Owner on the destination Google Cloud project
- CService Usage Admin on the Organization resource
- DBilling Account Viewer paired with a Cloud Budget alert configured to auto-stop export job APIs
Cevap
The Billing Account Costs Manager role must be assigned on the Cloud Billing account.
Setting up BigQuery billing exports requires permissions across two separate resource levels. The user needs BigQuery dataset write access (such as BigQuery Data Editor) on the destination project AND billing administrative access (specifically Billing Account Administrator or Billing Account Costs Manager) on the Cloud Billing account.
Adım Adım Çözüm
Anahtar Kavram
Configuring Cloud Billing BigQuery export requires administrative or cost management roles on the Cloud Billing account resource in addition to dataset permissions on the target BigQuery project.