> ## Documentation Index
> Fetch the complete documentation index at: https://docs.paradime.io/llms.txt
> Use this file to discover all available pages before exploring further.

# BigQuery OAuth

> Connect BigQuery to Paradime using BigQuery OAuth so each user authenticates through Google and runs dbt™ under their own BigQuery identity.

export const Arcade = ({src, title}) => <div style={{
  position: 'relative',
  paddingBottom: 'calc(56.2225% + 41px)',
  height: 0,
  width: '100%'
}}>
    <iframe src={src} title={title} frameBorder="0" loading="lazy" allow="clipboard-write" allowFullScreen style={{
  position: 'absolute',
  top: 0,
  left: 0,
  width: '100%',
  height: '100%',
  colorScheme: 'light'
}} />
  </div>;

With BigQuery OAuth, users authorize their Code IDE credentials through Single Sign-On (SSO) via BigQuery rather than uploading a service account key to Paradime. Set **Target** to match the environment you are configuring (`dev`).

<Note>
  **Available in:** Code IDE only. The Bolt and Agent environments run non-interactively, so they use a dedicated service account with [service account JSON](/integrations/bigquery/service-account) instead.
</Note>

If BigQuery is set up with SSO through a third-party identity provider, developers can use this method to log into BigQuery and authorize their dbt™ Code IDE credentials without any additional setup.

## Create a BigQuery OAuth 2.0 client ID and secret

To enable OAuth, create a Client ID and Secret to [authenticate](https://cloud.google.com/bigquery/docs/authentication) with GCP and manage the OAuth connection between Paradime and BigQuery.

In the BigQuery Console, navigate to **APIs & Services** and select **Credentials**. If you have not already, set up an [OAuth consent screen](https://support.google.com/cloud/answer/6158849), then click **+ Create Credentials** in the top navigation bar and select **OAuth client ID** from the menu.

<Arcade src="https://demo.arcade.software/yXcTWHFlFMpwCSG4K4YK?embed&embed_mobile=tab&embed_desktop=inline&show_copy_link=true" title="BigQuery OAuth" />

### Required configurations

Use the configurations below to set up the BigQuery OAuth app, then click **Create**. You will generate the Client ID and Secret required to connect Paradime to your BigQuery account.

| Config                        | Value                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| APPLICATION TYPE              | Web application                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| NAME                          | paradime                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| AUTHORIZED JAVASCRIPT ORIGINS | Required. Use the correct domain for your region (check your selected region during onboarding in **Workspace Settings > Workspace Management**):<br />🇪🇺 **eu-west-2 (Europe - London)**: `https://api.paradime.io`<br />🇪🇺 **eu-west-1 (Europe - Ireland)**: `https://eu-w1-api.paradime.io`<br />🇪🇺 **eu-central-1 (Europe - Frankfurt)**: `https://eu-c1-api.paradime.io`<br />🇺🇸 **us-east-1 (US East - N. Virginia)**: `https://api.us.paradime.io`                                                                                                                                 |
| AUTHORIZED REDIRECT URIs      | Required. Use the correct domain for your region (check your selected region during onboarding in **Workspace Settings > Workspace Management**):<br />🇪🇺 **eu-west-2 (Europe - London)**: `https://api.paradime.io/control-plane/bigquery/redirect`<br />🇪🇺 **eu-west-1 (Europe - Ireland)**: `https://eu-w1-api.paradime.io/control-plane/bigquery/redirect`<br />🇪🇺 **eu-central-1 (Europe - Frankfurt)**: `https://eu-c1-api.paradime.io/control-plane/bigquery/redirect`<br />🇺🇸 **us-east-1 (US East - N. Virginia)**: `https://api.us.paradime.io/control-plane/bigquery/redirect` |

### OAuth 2.0 scopes for Google APIs

The Paradime BigQuery OAuth app requests the following scopes. Each user approves these scopes when connecting.

```text theme={"system"}
https://www.googleapis.com/auth/bigquery
https://www.googleapis.com/auth/drive.readonly
https://www.googleapis.com/auth/devstorage.read_only
```

## Field details

<Info>
  Field access levels apply only to the **Code IDE** environment: an `Admin` sets workspace-level fields, and each developer sets their own user-level fields. In the Bolt and Agent environments, an `Admin` sets all fields.
</Info>

| Field                           | Description                                                                                                                                                                                                                                                                                | Example                                   |
| ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------- |
| Profile Name                    | The profile name set in your `dbt_project.yaml`. See more [here](https://docs.getdbt.com/docs/core/connect-data-platform/connection-profiles).                                                                                                                                             | **`dbt-bigquery`**                        |
| Target                          | The target name used to identify the connection. See more [here](https://docs.getdbt.com/reference/dbt-jinja-functions/target).                                                                                                                                                            | **`dev`**                                 |
| Dataset Location                | The location of BigQuery datasets, configured using the location configuration in a BigQuery profile. Location can be either a multi-regional location (e.g. `EU`, `US`), or a regional location (e.g. `europe-west2`). See more [here](https://cloud.google.com/bigquery/docs/locations). | **`US`**                                  |
| Project ID                      | The unique identifier of your BigQuery project. See more [here](https://support.google.com/googleapi/answer/7014113?hl=en).                                                                                                                                                                | **`dbt-demo-project`**                    |
| Client ID                       | The Client ID generated when setting up the OAuth credentials.                                                                                                                                                                                                                             | **`xyz123.apps.googleusercontent.com`**   |
| Client Secret                   | The Client Secret generated when setting up the OAuth credentials.                                                                                                                                                                                                                         | **`GOCSPX-hPfGJe7sd238772BLBA2Bi0ds`**    |
| Execution Project ID (Optional) | You can specify an Execution Project ID to bill for query execution, instead of the project where you materialize your resources. See more [here](https://docs.getdbt.com/docs/core/connect-data-platform/bigquery-setup#execution-project).                                               | (Optional) **`analytics-global-project`** |
| Dataset                         | The default dataset used to build dbt™ objects at runtime.                                                                                                                                                                                                                                 | **`dbt_john`**                            |
| Threads                         | The number of threads used in this connection. See more [here](https://docs.getdbt.com/docs/running-a-dbt-project/using-threads).                                                                                                                                                          | **`8`**                                   |


## Related topics

- [BigQuery](/integrations/bigquery/index.md)
- [BigQuery Tools](/products/dino-ai/tools-and-features/warehouse-tool/bigquery-tools.md)
- [BigQuery Alerts](/products/radar/real-time-alerting/bigquery-alerts.md)
- [BigQuery cost connection](/integrations/bigquery/cost-connection.md)
- [Run BigQuery Scheduled Query](/products/bolt/creating-schedules/command-settings/bigquery-scheduled-query.md)