> ## Documentation Index
> Fetch the complete documentation index at: https://docs.paradime.io/llms.txt
> Use this file to discover all available pages before exploring further.

# BigQuery

> Connect BigQuery to Paradime to run dbt™ from the Code IDE, deploy production jobs with Bolt, and let DinoAI background agents work against your project.

[BigQuery](https://cloud.google.com/bigquery) is a fully managed, serverless data warehouse that enables scalable analysis over petabytes of data. Connect it to Paradime to run dbt™ from the Code IDE, deploy production jobs with Bolt, and let the DinoAI background agent work against your warehouse.

<Warning>
  **IP restrictions**

  Allow traffic from one of the Paradime IPs in your firewall, depending on the data location selected.

  See also: [Paradime IP addresses](/developers/ip-restrictions).
</Warning>

## Connection environments

Paradime connects to BigQuery separately for each environment. You configure one connection per environment in **Workspace Settings > Environments**.

| Environment | Used by                                        | Typical target | Authentication methods               |
| ----------- | ---------------------------------------------- | -------------- | ------------------------------------ |
| Code IDE    | Running dbt™ from the terminal in the Code IDE | `dev`          | Service account JSON, BigQuery OAuth |
| Bolt        | Production jobs run by Bolt                    | `prod`         | Service account JSON                 |
| Agent       | Background agent sessions                      | `dinoai`       | Service account JSON                 |

The connection fields are the same across environments. What differs is the **BigQuery permissions** you grant: the Code IDE connection typically reuses a developer's access, while the Bolt and Agent environments should each use a dedicated service account with the minimum permissions required.

## Suggested permissions

<Tabs>
  <Tab title="Code IDE">
    This set of permissions lets users read from your BigQuery project and create tables and views when running dbt™ from the Paradime terminal. Grant them to the account you connect in Paradime.

    ```text theme={"system"}
    BigQuery Data Editor
    BigQuery User
    ```
  </Tab>

  <Tab title="Bolt">
    We recommend creating a new BigQuery service account and granting the access required to create tables and views in your production BigQuery project. To create a service account in BigQuery, follow the detailed steps in [Google Cloud's Creating and managing service account keys](https://cloud.google.com/iam/docs/creating-managing-service-account-keys#iam-service-account-keys-delete-console).

    This set of permissions lets Paradime read from and create tables and views when running production jobs in your BigQuery project.

    ```text theme={"system"}
    BigQuery Data Editor
    BigQuery User
    ```
  </Tab>

  <Tab title="Agent">
    We recommend creating a dedicated BigQuery service account for the Agent environment, with the minimum permissions required to create tables and views in your BigQuery project. To create a service account in BigQuery, follow the detailed steps in [Google Cloud's Creating and managing service account keys](https://cloud.google.com/iam/docs/creating-managing-service-account-keys#iam-service-account-keys-delete-console).

    This set of permissions lets DinoAI read from and create tables and views during background agent sessions in your BigQuery project.

    ```text theme={"system"}
    BigQuery Data Editor
    BigQuery User
    ```
  </Tab>
</Tabs>

## Add a connection

1. Click **Settings** in the top menu bar of the Paradime interface to access **Workspace Settings**.
2. In the left sidebar, click **Environments**.
3. Click **Add New** next to the section for the environment you are configuring:
   * **Code IDE** for the Code IDE connection
   * **Bolt** for the Bolt connection
   * **Agent** for the Agent connection
4. Select **BigQuery** and choose an authentication method.

## Authentication methods

<CardGroup cols={2}>
  <Card title="Service account JSON" href="/integrations/bigquery/service-account" icon="key">
    Connect with a service account JSON key file. Available in all environments.
  </Card>

  <Card title="BigQuery OAuth" href="/integrations/bigquery/oauth" icon="shield-check">
    Let each user authenticate through BigQuery OAuth. Code IDE only.
  </Card>
</CardGroup>

## Related

<CardGroup cols={2}>
  <Card title="Optional connection attributes" href="/guides/data-warehouse-essentials/optional-connection-attributes" icon="gear" horizontal>
    Set additional `profiles.yml` attributes for this connection.
  </Card>
</CardGroup>


## Related topics

- [BigQuery](/integrations/bigquery/index.md)
- [DinoAI Tools](/products/dino-ai/tools-and-features/index.md)
- [BigQuery Tools](/products/dino-ai/tools-and-features/warehouse-tool/bigquery-tools.md)
- [BigQuery Alerts](/products/radar/real-time-alerting/bigquery-alerts.md)
- [BigQuery cost connection](/integrations/bigquery/cost-connection.md)